Offworld's website describes two products that would bring shielded ZEC to Solana and Aztec as loan collateral: Offworld Bridge, which would move shielded ZEC into private balances on both chains, and Offworld Lend, which would let users borrow against that ZEC on both networks.

That is the full extent of what the site discloses. There is no launch date, no deployed contract, no loan-to-value figure, no liquidity number, no audit, and no description of which Zcash pool, disclosure mechanism, or liquidation method the products would use. Everything that follows is therefore a test the design would have to pass, not a description of how it passes it.

The test matters because borrowing against ZEC on Solana is already possible without any of this. In September 2026, Solana lending protocol Kamino Finance announced on X an isolated market, curated by Allez Labs, in which bridged ZEC backs USDC loans with up to 1.7x leverage. That market is fully public. Offworld's stated purpose is the privacy it promises on top, so the question is whether that privacy survives each stage of a loan.

Stage One: ZEC Has to Leave the Shielded Pool

Nothing on Solana or Aztec can hold native ZEC. A borrower deposits coins on Zcash and receives some claim on the destination chain, and the form of that claim determines much of what comes later.

The existing route illustrates the trade-off. As CoinDesk reported, wrapped ZEC arrived on Solana in October 2025 through the Zolana bridge as an ordinary SPL token, backed one-to-one but with balances and transfers in the open. It is this token that Kamino prices and custodies. A private version would have to mint the claim into an encrypted balance, which means the proof that the claim is backed can no longer be a public ledger entry anyone can inspect.

Proving backing is harder for Zcash than for most assets, and 2026 demonstrated why. On May 29, 2026, security researcher Taylor Hornby found a counterfeiting flaw in the Orchard shielded pool that had existed since May 2022; the Zcash Open Development Lab shipped a fix by June 2. The disclosure, written by Zooko Wilcox, Jason McGee, and Hornby, says the bug could have minted unlimited undetectable ZEC and that Orchard's privacy makes it impossible to prove whether that happened. A bridge that accepts shielded deposits inherits that uncertainty: it can verify that a note exists, but it depends on the pool's own soundness for whether the note represents real supply.

Two more things a user needs from the bridge are redemption rules and custody. If withdrawals are delayed, or one network pauses, who holds the underlying coins, and under what conditions they move back, determines whether the destination-chain claim is worth its face value. A claim that cannot be redeemed quickly tends to trade below the coin it represents under stress, and a lending market that prices collateral at the native ZEC price would be overstating what a liquidator could actually recover.

Comparison compiled by Coindoo from Zcash, Solana, Kamino, and Offworld documentation as of November 2026. The Offworld column reflects only what its website describes.

Stage Two: Proving Collateral Without Showing It

Once a private balance sits on Solana or Aztec, a lender needs three things from it: that it exists, that the borrower has committed it to this loan, and that it cannot be spent or pledged elsewhere while the debt is open.

Zcash gives a partial answer to the first requirement. The Sapling viewing-key specification describes how a holder can let a third party see incoming and outgoing notes without handing over the ability to spend them. A lender with a viewing key can confirm a balance. It cannot freeze or move it.

The second and third requirements need something Zcash does not provide on its own: a rule written into the lending contract and a way to enforce it. A zero-knowledge proof can show a statement such as “this note is unspent and worth at least X” without revealing the note, but the contract still has to be able to act when the statement stops being true. Either the borrower pre-delegates spending authority to the contract at deposit, or the collateral sits in an escrow the contract controls. Both options work. Both also mean the privacy of the position is now only as strong as the contract's handling of that authority.

Stage Three: A Falling Price Is the Real Test

Lending protocols express enforcement as a health factor. Aave's liquidation documentation defines it as collateral value, discounted by a liquidation threshold, divided by debt; below 1.0, the position can be liquidated. The arithmetic is trivial. What the ladder below shows is the part that is not: what a liquidator has to know, and be allowed to do, at each rung if the borrower's balance is encrypted.

Illustrative position of 100 ZEC against a fixed $5,000 debt with a 75% liquidation threshold, calculated by Coindoo. Interest, fees, and liquidation bonuses excluded. Not ZEC's market price and not Offworld's terms.

Three designs could fill the bottom rung, and each leaks something different. The first pairs an oracle price with a zero-knowledge proof that the position has crossed its threshold: the borrower's balance stays hidden, but the proof itself tells the network a liquidation-sized position exists, and the moment of the sale is public. The second has the borrower hand a liquidation key to the contract at deposit: nothing is revealed until it is used, but a single contract now holds spending rights over every borrower's collateral. The third moves collateral into an escrow on the destination chain and liquidates it publicly, which is the simplest to audit and the one where privacy ends the day the loan is opened.

The June 2026 selloff is the scale any of them would have to handle. The Block reported that ZEC fell more than 50% within days of the Orchard disclosure, to roughly $310, with about $116 million in liquidations across venues. A private lending market facing that drop would have to prove breaches, obtain prices, and sell collateral for thousands of positions at once, and it would have to do so while the event that caused the drop was a question about whether the shielded supply itself was sound.

Stage Four: Where Solana and Aztec Draw the Line

Whichever liquidation design Offworld picks, it runs inside privacy rules set by the host chain, and neither chain hides everything.

Solana's privacy documentation describes a default Privacy Ring that encrypts the asset and the amount while leaving sender and recipient addresses visible. For a lending market, that means a liquidator's address, a borrower's address, and the fact that they interacted are on the ledger even when the figures are not. Coindoo examined the consequences of that split in its piece on Solana's private transfers.

Aztec runs private functions by default, but Offworld's contract would almost certainly need public functions too, for oracle prices and for liquidations that outside actors must be able to trigger. Aztec's developer documentation warns that anything a public function writes into private storage is readable by anyone. A liquidation path that crosses from public to private has to be built so that the crossing does not carry the borrower's data with it.

What Offworld Would Have to Publish

The case against caring about any of this is a fair one, and Kamino is the evidence for it: ZEC holders are already borrowing USDC against a fully public position, so a borrower who wants privacy at deposit may be content to accept exposure at liquidation, since liquidation is the outcome they are trying to avoid anyway. On that view, Offworld's privacy only has to cover the ordinary life of a loan, and the third design above would be enough.

Whether that is the trade Offworld is offering is exactly what its website does not say. The things that would settle it are a set of deployed contracts, a threat model stating what a liquidator, an operator, and the public can see at each stage, the scope of an independent audit, published valuation and liquidation parameters, and a funded market with borrowers in it. The order in which those appear is the signal: a specification published before a market opens means the team is treating liquidation privacy as a product requirement. A market that opens first, with the specification to follow, means borrowers are being asked to find out the answer with their own collateral.

This article was originally published on Coindoo.