Aztec Labs Acquires ZKPassport in Privacy-Preserving Identity Verification Bet

ZKPassport is an open-source protocol that allows users to verify age, nationality and sanctions status from a passport or government ID without uploading personal data or revealing anything beyond the specific attribute being checked.

The deal brings ZKPassport's co-founders Michael Elliot and Theo Madzou into Aztec Labs, where they will continue developing the protocol alongside new consumer product lines. Financial details weren't disclosed. Aztec Labs has raised $125mn to date, including a $100mn Series B led by a16z crypto and Paradigm.

The acquisition arrives as privacy re-emerges as a major structural theme in crypto. Zcash surged more than 40% in May on fresh institutional accumulation, Monero has rallied 30% since April, and the broader privacy token cohort has consistently outperformed the wider market so far this year.

Missing primitive for DeFi compliance

Joe Andrews, chief executive of Aztec Labs, told Sandmark the acquisition addresses what he sees as a fundamental ceiling on decentralized finance adoption. 

"DeFi has a ceiling. You can build sophisticated financial rails, but the moment you need to verify who someone is, you're forced to send their data somewhere central and trust that it stays safe, which is antithetical to the idea of decentralized finance," he said. 

"For DeFi to truly replace intermediaries, you need to be able to do a sanctions check or KYC check with a smart contract. Without this, DeFi will always be intermediated as it reaches into the real world. We think ZKPassport is that missing primitive."

ZKPassport uses the NFC chip technology found in airport eGates, with all data processing occurring locally on the user's device. Proofs are verifiable in-browser, server-side or on the Aztec Network, Ethereum or any EVM-compatible chain. The protocol supports government IDs from more than 130 countries.

Testing privacy at scale

Andrews said the use of ZKPassport to protect user information during Aztec's token sale proved something previously untested at scale. 

"It proved that for the first time, you can do a sanctions check with a smart contract. Thousands of people used ZKPassport across the token sale and testnet onboarding, under real production conditions. Proofs ran on a user's phone, no data left their device, and sanctions compliance was upheld," he told Sandmark.

He added that privacy-preserving compliance tools address a design assumption that predates better technology. 

"The assumption has always been that compliance requires surveillance. ZKPassport proves you can satisfy a sanctions check or age verification as part of a transaction," he said.

"The transaction cannot happen unless the check passes, without storing any personal data whatsoever. The rate of illicit transactions will decrease as the rules are enforced ahead of time by an immutable ledger, versus after the fact by fallible humans."

Aztec Labs said it will maintain ZKPassport as an open-source project while building integrations for external developers. Andrews said further acquisitions are not a core strategy but that the summer pipeline would bring significant new product developments across consumer and institutional markets.