I've been sitting with Citadel on Dusk for a while. It's the identity layer they keep pointing at when they talk about regulated assets on-chain without the usual KYC mess.
You check once with a license provider. They verify you off-chain and register an encrypted license. Later you prove you hold a valid one. The contract only confirms a registered license exists. You pass a session cookie to the service. They never see your name, wallet, or which license you used.
It's like showing a stamp that says you're allowed in, instead of handing over your ID every time. Institutions don't store the data. Users don't repeat KYC for every venue. That matters if Dusk wants permissioned markets where eligibility is enforced but positions stay private.
You still trust the issuer to do the check properly. Service providers pick which issuers they accept and when a session dies. The code still carries the not-fully-audited disclaimer. Adoption is the real issue. Someone has to issue licenses and someone has to build services that actually consume the proofs instead of running another form on the side.
Citadel 2 tidied the protocol, but I still don't see much live use.
Will enough regulated players issue and accept these, or does this stay a clean design that never leaves the docs?
WHY CONFIDENTIAL FINANCIAL WORKFLOWS COULD MATTER MORE THAN EVM COMPATIBILITY Spent some time digging into Dusk lately and it changed how I think about L1s.🤔 Everyone chases EVM compatibility because it makes onboarding devs easy. Fair. But after watching how institutions actually behave, I'm not sure that's the winning bet for regulated finance. Real securities workflows need privacy baked in — you can't put a fund's positions on a fully public ledger and expect compliance teams to sign off. Dusk's approach is interesting: zero-knowledge proofs at the protocol level, so things like confidential transactions and regulated asset issuance aren't bolted on, they're native. That's a real differentiator. The trade-off is obvious though. Smaller dev ecosystem, less tooling, slower network effects. If nobody builds, the best privacy tech in the world just sits there. Liquidity is my other concern. Confidential assets are harder to market-make and harder to audit on-chain, which could scare off the exact DeFi activity that drives fees. Still, if tokenized securities actually become a thing, chains built for that from day one might age better than general-purpose ones retrofitted for compliance.
WHY PROGRAMMABLE PRIVACY COULD MATTER MORE THAN SIMPLE BLOCKCHAIN PRIVACY
The more I study Dusk, the more I think the interesting part of privacy is not simply hiding a transaction. It is deciding what stays hidden, what gets revealed, and when.
A normal privacy layer can protect the sender, receiver, or amount. Useful, obviously. But regulated finance has another problem: some information must be visible to the right party. That is where programmable privacy starts to make more sense to me.
Dusk is building around confidential smart contracts, selective disclosure, and different transaction models, so privacy can become part of the actual market logic rather than a separate feature. For something like tokenized securities, that matters. An investor may need to prove eligibility without exposing everything about themselves, while an issuer or regulator may still need specific information.
The tradeoff is adoption. Privacy that is too restrictive can hurt liquidity, integrations, and user experience. Privacy that is too weak defeats the purpose.
So I’m watching whether Dusk can turn that balance into real market activity, not just theory on paper.
Do you think programmable privacy will become a core requirement for onchain finance, or will simple transaction privacy be enough?
I’ve spent a fair amount of time looking at how Dusk approaches identity, and Citadel is the piece that keeps standing out.
Most public chains leave you with two bad options. Either everything about a wallet is visible, or nothing is. Neither works when you’re dealing with regulated assets. Institutions won’t put real securities on a system where every balance and transfer is public knowledge. At the same time, regulators still need a way to check that the right people are holding the right assets.
Citadel sits in that awkward middle. It’s designed so someone can prove they’re eligible without dumping their full identity onto the chain. Think of it like showing a bouncer only the age on your ID instead of the entire card. You meet the rule, but the rest stays private.
That’s the part that feels practical. It ties directly into Dusk’s selective disclosure model. Sensitive details stay shielded until an authorized party needs them for a specific check or audit. In theory it gives compliance teams what they require without turning the whole network into a public registry.
Of course the real test is still ahead. These systems only work as well as the access rules and the parties who control disclosure. One poorly designed permission layer and the privacy edge starts to erode.
I’m still watching how this holds once more actual NPEX-linked assets start moving. Will the selective part stay selective under real regulatory pressure, or does it get forced wider over time?
Financial privacy is often framed as a choice: either everything is public, or everything is hidden.
For regulated finance, that choice is too simplistic.
An investor may need to prove eligibility. An auditor may need to verify a transaction. A regulator may need evidence. But that does not mean every market participant should see full balances, trading history, or other sensitive data.
This is where Dusk’s selective disclosure approach becomes interesting.
Dusk is designed for regulated onchain finance, using privacy features such as zero-knowledge proofs and controlled visibility. The idea is not to hide everything, but to reveal the specific information an authorized party needs for a defined purpose, while keeping unrelated financial data private.
What stands out to me is the shift in mindset: privacy is not the opposite of compliance. Poorly designed transparency can actually become a barrier to institutional participation.
For tokenized securities and financial applications, this could matter a lot. Institutions need auditability, access controls, and regulatory oversight, but they also need confidentiality around positions, counterparties, and business activity.
My takeaway: the real upgrade may not be “more privacy” or “more transparency.” It is having the ability to choose who gets to see what, and why.
Public blockchains made transparency the default. Private finance made confidentiality the default.
Financial markets probably need something in between.
A bond trade, investor position, or institutional strategy cannot always sit fully exposed on a public ledger. But making everything private creates another problem: how do participants, auditors, or regulators verify what happened when verification is actually required?
That middle layer is what caught my attention about Dusk.
Its approach is built around confidential transactions and selective disclosure, meaning sensitive financial information can stay protected while still producing verifiable evidence for authorized parties. Dusk’s infrastructure combines privacy with access controls and compliance-oriented workflows rather than treating them as separate systems.
That distinction matters.
The goal isn't simply to “hide transactions.” It is to avoid forcing financial markets into a choice between total visibility and total opacity.
For tokenized securities and institutional finance, that could be a much more practical model: public infrastructure underneath, confidential information where needed, and controlled visibility when accountability matters.
My takeaway: the next step for onchain finance may not be making everything public.