What Is Fedimint? Bitcoin's Privacy Custody Protocol
Fedimint lets trusted communities hold Bitcoin together and transact privately via ecash without an exchange or solo self-custody. Here's how it works.
Key takeaways
- Fedimint is a community custody protocol. It lets a trusted group of guardians hold Bitcoin collectively via threshold multisig, removing any single point of control or failure.
- Ecash is the user-facing layer. When users deposit Bitcoin, they receive private ecash tokens that can be transacted instantly and for free within the federation.
- Blind signatures power privacy. The Chaumian blind signature scheme ensures the federation cannot link any ecash token to the user it was issued to.
- Federation trust is the core risk. The security model depends on the honesty and reliability of the guardians.
Fedimint (short for Federated Mint) is an open-source Bitcoin custody protocol that lets a trusted group of people, called a federation, collectively hold Bitcoin and issue private ecash tokens. Users transact instantly and privately inside the federation without needing a centralized exchange or a personal Lightning node.
This concept sits at the intersection of Bitcoin's privacy problem and its custody problem, and it's gaining real traction as a practical answer to both.
The Problem Fedimint Is Solving
| In short: Bitcoin has a custody and privacy problem. Most users must choose between trusting a centralized exchange, which can fail, freeze funds, or be seized, and managing self-custody alone, a process too technically demanding for the majority of people worldwide. |
- The exchange problem is well-documented. Centralized platforms can freeze accounts, go bankrupt (as seen with FTX in 2022), or become targets of government seizure. When users leave Bitcoin on an exchange, they don't truly own it but hold an IOU.
- The self-custody problem is just as real. Hardware wallets, seed phrases, and channel management on the Lightning Network require a baseline of technical knowledge that billions of potential users simply don't have. This is especially true in emerging markets where infrastructure is limited and financial literacy around digital assets is still developing.
- Bitcoin's privacy gap adds another layer. Bitcoin's ledger is fully public. Anyone with a block explorer and a known wallet address can trace every transaction – a significant problem for users in regions with financial surveillance or political repression.
Fedimint was built to address all three of these gaps simultaneously, through a model the project calls "second-party custody": a community you know and trust.
What Is Fedimint? The Core Concept
| In short: Fedimint is an open-source protocol for collectively managing Bitcoin within a community setting, combining federated multisig custody with Chaumian ecash for private, instant transactions. |
At its core, Fedimint works like a community bank for Bitcoin, but one where no single person is in charge. Here's the basic flow:
- A user deposits Bitcoin into a Fedimint federation.
- The federation issues ecash tokens – private, bearer-instrument IOUs backed 1:1 by the deposited Bitcoin.
- The user can spend, send, or receive these ecash tokens inside the federation with no transaction fees and strong privacy.
- At any time, the user can redeem ecash tokens to withdraw real Bitcoin back to their wallet.
The key distinction from a regular custodial wallet is that no single party controls the funds. Control is distributed across multiple guardians who must coordinate to approve any movement of Bitcoin out of the federation.
My own perspective
Fedimint doesn't try to turn everyone into their own bank. The "not your keys, not your coins" principle is correct, but it has quietly functioned as a gate, keeping billions of people on exchanges because the alternative felt too risky to manage alone. Fedimint sidesteps that deadlock entirely. If people are going to trust someone with their Bitcoin, the model argues they should trust multiple people they already know rather than an anonymous institution. Custody risk becomes social accountability, and humans have been navigating social accountability long before cryptography existed. That's a realistic design decision.
How Fedimint Works: The Technical Architecture
In short: Fedimint works by combining two mechanisms:
These two layers operate independently. Custody is handled by guardians, while transactions happen through ecash, entirely off-chain. |
Chaumian Ecash & Blind Signatures
The cryptographic foundation of Fedimint dates back to 1982. Cryptographer David Chaum published a scheme using blind signatures – a technique that allows a mint to sign a token without being able to see or track its content. As a result, the mint knows how much ecash it has issued in total, but cannot link any specific token to a specific user.
When a user deposits Bitcoin and receives ecash, the following happens:
- The user generates a random token and blinds it before sending it to the guardians.
- Guardians sign the blinded token without seeing its actual content.
- The user unblinds the signed token and now holds a valid, spendable ecash note.
When the token is later redeemed, the mint verifies its own signature but cannot connect that redemption to the original deposit. This breaks the transaction graph entirely, making ecash inside Fedimint far more private than standard Lightning or Bitcoin transactions.
Fedimint implements threshold BLS blind signatures, meaning a quorum of guardians must collectively sign every ecash issuance. No single guardian can issue tokens unilaterally.
Federation & Guardians
A federation is the group of trusted individuals (guardians) who operate the Fedimint together. Each guardian runs their own server instance, and they coordinate using AlephBFT – an asynchronous Byzantine Fault Tolerant consensus protocol.
The federation uses a t-of-n threshold model. For example:
Federation Size | Guardians Required to Sign | Failures Tolerated |
| 4 guardians | 3 | 1 |
| 7 guardians | 5 | 2 |
| 10 guardians | 7 | 3 |
This means a Fedimint federation keeps working even if one or more guardians go temporarily offline, which is critical for real-world reliability. No single guardian holds the complete key material needed to move funds, so theft or unilateral exit by one bad actor is structurally prevented.
Guardians are also responsible for ecash backup and account recovery. If a user loses their phone, they can approach a quorum of guardians to recover their funds, which is a social recovery model that replaces the anxiety of a single lost seed phrase.
Ecash Transactions Inside the Federation
Once a user holds ecash tokens, transacting within the federation is instant, free, and private. There are no blockchain confirmations, no routing fees, and no channel liquidity to manage.
The anonymity set for any ecash note is the entire set of notes of that denomination ever issued by the federation, meaning individual transactions are cryptographically indistinguishable from each other. This provides near-perfect privacy within the federation boundary.
Ecash tokens are also bearer instruments. Whoever holds the token data can spend it. This enables peer-to-peer transfer as simple as sharing a file – useful for communities without reliable internet or for offline-adjacent use cases.
Lightning Gateways
To transact with the outside Bitcoin world, Fedimint uses Lightning Gateways – separate services that bridge the federation's internal ecash system with the broader Lightning Network.
A gateway allows users to:
- Pay any Lightning invoice using their ecash balance.
- Receive Lightning payments, which are converted back to ecash inside the federation.
Critically, gateways are not guardians. They are independent entities that provide a service to federation users, keeping the custody layer separate from the payment routing layer. Gateway operators earn routing fees for this service.
As of Fedimint v0.6 (released in early 2025), the gateway architecture was significantly simplified: a single gatewayd daemon can now service multiple federations simultaneously, and the LNv2 module (stabilized in v0.5) handles Lightning integration more efficiently. Fedimint v0.7 introduced LNURL support for recurring Lightning payments, with BOLT12 support in active development.
What Fedimint Does Well
| In short: Fedimint's core strengths are strong transaction privacy, distributed custody resilience, and a low barrier to entry, making it well-suited for users who need Bitcoin to work practically. |
- Privacy without complexity. Users get near-perfect transaction privacy inside the federation without needing to understand CoinJoin, Lightning channel management, or any advanced Bitcoin technique. Privacy is built into the ecash layer.
- Resilient custody without single points of failure. Unlike an exchange (single point of failure) or a hot wallet (single device failure), a Fedimint federation continues operating even with partial guardian outages. The BFT consensus tolerates up to one-third of guardians being offline or compromised.
- Low barrier to entry. Users don't need to run a node, manage liquidity, or hold a hardware wallet. Joining a federation requires only a compatible app, which makes it realistic for onboarding people who would otherwise use a custodial exchange.
>> Read more: Bitcoin Custody Fees: What You'll Actually Pay
- Social recovery. Losing a device doesn't mean losing funds. A quorum of guardians can assist with wallet recovery – a meaningful improvement over the "lose your seed phrase, lose your Bitcoin" model that deters many non-technical users.
- Interoperability with Lightning. Through gateways, federation members can send and receive payments to anyone on the Lightning Network, keeping Fedimint connected to the broader Bitcoin payment ecosystem.
- Real-world deployment in emerging markets. BitSacco, a project building community banking in Kenya, received a grant from the Human Rights Foundation (HRF) in 2025 to bring Fedimint-based digital savings groups to users in East Africa – a concrete proof of the model working outside developed markets.
Where Fedimint Falls Short
| In short: Fedimint's main limitation is that it remains a custodial system: users hand their Bitcoin to a federation in exchange for ecash IOUs, meaning trust in the guardians is the foundation of the entire model. |
- It is custodial. When users deposit Bitcoin, they receive ecash IOUs. The underlying Bitcoin is held by the federation. If a majority of guardians collude, they can theoretically steal or freeze funds. The security model depends entirely on the social trustworthiness of the guardians chosen.
- Debasement risk exists. In theory, a malicious federation could issue more ecash tokens than Bitcoin it holds, inflating the supply and diluting the value of existing tokens. This is not detectable in real time by users.
- Federation availability. If too many guardians go offline simultaneously (beyond the Byzantine fault tolerance threshold), the federation halts. Users cannot access their funds until enough guardians come back online.
- Regulatory exposure. Federation guardians are identifiable and could be subject to legal pressure, forced shutdowns, or fund freezes by regulatory authorities. This risk is lower than with a centralized exchange, but not zero.
- Still maturing. As of mid-2025, Fedimint reached v0.7 with major usability improvements, but the ecosystem of user-friendly apps and security-audited deployments is still developing. Most federations running today are in communities of technically informed users.
The project's own mitigation advice is "KYF" – Know Your Federation. Users are encouraged to join only federations operated by people they personally know and trust, keeping the trust model social rather than institutional.
Fedimint vs. Cashu vs. Lightning Network
These three technologies often appear together in Bitcoin conversations, but they solve different problems with different tradeoffs.
Fedimint | Cashu | Lightning Network | |
| Custody model | Federated (multi-guardian) | Single operator | Self-custodial |
| Privacy | Blind signatures (threshold) | Blind signatures (single) | Limited (routing visible) |
| Trust required | Federation guardians | Mint operator | None (trustless) |
| Setup complexity | Medium (coordinate guardians) | Low (single server) | High (node + channels) |
| Transaction speed | Instant (inside federation) | Instant (inside mint) | Near-instant |
| Counterparty risk | Distributed across guardians | Concentrated in one operator | None |
| Implementation language | Rust | Python | Varies |
The clearest way to understand the difference:
- Cashu offers simplicity. Anyone can spin up a single-operator mint in minutes, and the privacy properties are equivalent to Fedimint. But all custodial risk is concentrated in one person.
- Fedimint distributes that risk across a group, making collusion or exit harder.
- Lightning Network eliminates custodial risk, but requires users to manage their own node and channel liquidity – a significant technical barrier.
Both Fedimint and Cashu implement Chaumian ecash on Bitcoin and integrate with Lightning. They are complementary rather than competing. Cashu suits smaller, informal, or experimental mints, while Fedimint suits communities that want stronger institutional-grade custody guarantees.
Who Is Fedimint For?
| In short: Fedimint is best suited to users and communities where trust in centralized institutions is low, technical self-custody is impractical, and privacy matters. |
1. Users in emerging markets
People in regions without reliable banking infrastructure, reputable custody providers, or stable local currencies are prime candidates. Fedimint enables Bitcoin to function as usable money within a community without requiring KYC, an exchange account, or technical knowledge.
2. Communities under financial surveillance or political repression
Bitcoin without privacy is a surveillance tool. Fedimint's ecash layer makes transaction histories invisible to outside observers, providing meaningful protection for activists, journalists, and ordinary people in hostile jurisdictions.
3. Non-technical Bitcoin holders
Users who understand the risk of exchanges but are not comfortable managing self-custody can join a federation run by people they trust, such as family, community leaders, or local businesses, and experience Bitcoin with strong privacy and no technical overhead.
4. Developers building Bitcoin-native applications
Fedimint ships with three default modules, including Bitcoin, Lightning, and Chaumian Ecash, and supports custom modules. Developers can build community savings pools, DeFi-like applications, and programmable spending conditions on top of the protocol without modifying Bitcoin's base layer.
Sources and Further Reading
- Fedimint.org – "Welcome to Fedimint" https://fedimint.org/
- GitHub – "fedimint/fedimint: Federated E-Cash Mint" https://github.com/fedimint/fedimint
- Bitcoin Design Guide — "Fedimint" https://bitcoin.design/guide/how-it-works/ecash/fedimint/
- Spark Research – "Fedimint: Federated Ecash Mints on Bitcoin" https://www.spark.money/research/fedimint-federated-ecash
- Fedimint Blog – "Fedimint's Ecosystem: A Look Back at 2025's First Half" https://fedimint.org/blog/2025/06/30/fedimint-review-first-half
- David Chaum – "Blind Signatures for Untraceable Payments" (1982) https://sceweb.sce.uhcl.edu/yang/teaching/csci5234WebSecurityFall2011/Chaum-blind-signatures.PDF
- Fedi Developer Docs – "Setting Up a Fedimint" https://fedibtc.github.io/fedi-docs/docs/fedimint/intro/
FAQs About Bitcoin Fedimint
Potentially, yes. Guardian identities can be known to regulators, and legal pressure could force guardians to freeze access or shut down a federation. However, this risk is meaningfully lower than a centralized exchange, because there is no single legal entity controlling all funds. Jurisdictional diversity among guardians also increases resilience.
