By Michael J. Casey an experimental privacy structure for AI agents by Ethereum co-founder Vitalik Buterin that uses onion routing, cover traffic, zero-knowledge payments, and local prompt rewriting has been published.
Vitalik Buterin’s implementation, a wrapper the paranoid mode over an agent harness, is intended to avoid leaking identity along each of the three axes AI use can be traceable: what you request, how you pay for it, and where you’re making the request from. The work builds on Vitalik Buterin’s early experiments in private access to AI and arrives as private AI infrastructure meanwhile is gaining interest across the blockchain industry. Inside the New Privacy Daemon.
Table of Contents
Privacy-Preserving Agent Daemon
Implementation revolves around an OpenAI compatible agent daemon that receives requests from the agent and passes them through local rewriting before submission. Local model Vitalik Buterin says he is using qwen3.8-flash-next, which rewrites prompts to erase identifiable information and stylistic signatures.
Source: PCMag Australia
Each conversation gets its own Tor circuit to hide network identity, and requests are shuffled with random cover traffic to hide timing and frequency. Payments are delivered through zkAPI, a private usage credit protocol developed by the Open Anonymity Project, Ethereum Foundation, and integrated into the Ethereum mainnet on Oct. 1.
ZkAPI enables users to top up a private balance and demonstrate enough funds via zero knowledge proofs without linking deposits to individual requests, decoupling billing identity from query data. The agent harness is also sandboxed with bwrap, experimenting with MicroVM isolation, and wrapped with torsocks to route outbound traffic through Tor.
Also Read: Vitalik Buterin AI New UI: $1.4B Hack to 5-Min ENS Fix
Why Privacy for AI Agents Matters
The experiment matters because AI agents increasingly act as economic agents, holding funds and interacting with exchanges, protocols, and data sources. If payment credentials, IP addresses, and prompt content can be correlated, agents leak sensitive information.
For developers building autonomous agents on Ethereum and other networks, unlinkable payment rails like zkAPI offer a way to pay for inference and data feeds without exposing wallet balances or behavioral patterns.
For institutions exploring AI-driven research and trading agents, the architecture gives a template for operational privacy that aligns with broader demands for confidentiality on public blockchains. The project also highlights a design tension central to current infrastructure debates: low latency convenience versus strong anonymity.
Also Read: Ethereum Roadmap 2030: Vitalik Buterin Maps Post-Hegota Overhaul
Beyond Tor Toward Mixnets
Vitalik Buterin makes this explicit in the callout at the bottom of the screen. Tor was never intended for this application. Cover traffic can protect against passive adversaries but it doesn’t do much if the LLM provider colludes with the entry guard and takes the timing. Anonymity networks with low latency are not able to scale to prevent correlation attacks when an adversary can see both ends of the communication channel.
Source: Carlo Eduardo Oliveieri – Medium
Mixnets that delay and reorder messages and constant rate cover traffic can prevent such attacks but come with high bandwidth overhead and added latency. Vitalik Buterin considers this task better suited to a specialized mixnet, conceding that tradeoff.
Usability is not that far off despite latency and is better when starting a new dialogue, and cheaper deposit and withdrawal gas costs for zkAPI will land on mainnet soon. In the near term, the test will be by developer adoption of agent harnesses and inference markets.
Source: Remitly
For Ethereum, this signals continued commitment to privacy primitives other than scaling and rollups, promising impact to developers, institutional actors and regulators aligned with the AI-on-Chain stack. A successful launch could set standards for confidential agent compensation across the world’s biggest blockchain platforms.
Also Read: Vitalik Buterin Pushes EIP-8288 for Ethereum’s I-Star Upgrade
