There are technologies that arrive quietly, without fanfare, and end up changing everything. Cashu is probably one of them. Behind this unassuming name lies a forty-year-old idea, resurrected and grafted onto Bitcoin to give it what it still lacks: total privacy for everyday payments, the speed of physical cash, and the ability to pay offline.
Flashback to 1982: when a visionary cryptographer invented digital money
To understand CashuWe have to go back to David Chaum. In 1982, this American cryptographer published an article that would lay the foundations for all future digital currency: “Blind Signatures for Untraceable Payments”.
His question is simple and radical: how to create digital money that no one, not even the bank that issues it, can trace?
His answer: the blind signatures (blind signaturesThe principle is elegant. Imagine you slip a banknote into an envelope lined with carbon paper. You ask the bank to sign the envelope from the outside; the signature is imprinted on the banknote inside, without the bank ever having seen it. You take out the signed banknote and spend it wherever you want: no one can link the banknote to you. The bank recognizes its own signature but doesn't know to whom it issued it.
Chaum's ideas have been described as the technical roots of the Cypherpunk movement, this same movement from which the direct precursors of Bitcoin Nick Szabo Hal Finney, Wei Dai.
In 1990, Chaum founded DigiCash and launched eCash, the first fully private digital payment system. Banks like Mark Twain Bank in the United States, Deutsche Bank in Germany, and Bank Austria adopted the technology. Visa offered $40 million for the project. Netscape wanted to integrate it into its browser. And yet, DigiCash went bankrupt in 1998.
Why? Because the technology was brilliant, but the infrastructure and adoption of online commerce weren't ready. The idea itself, however, was perfect. It was simply waiting for its moment.
Bitcoin is coming. Chaum's idea is taking on a new dimension.
Bitcoin solves the problem that DigiCash by David Chaum This hadn't been solved: decentralization. No more need for a central bank to guarantee funds. But Bitcoin introduces a new paradox: the blockchain is public. Every transaction, every amount, every address is visible to everyone, forever. It's transparency in the service of verification, but it's also mass surveillance of each user's assets and habits.
Le Lightning Network It improves the situation by making transactions off-chain and accelerating payments, but there are still flaws: Lightning nodes can see payment flows, and onboarding new users remains complex.
That's where Cashu comes in.
Cashu: Chaum's blind signatures, connected to Bitcoin
Cashu is a free and open-source ecash protocol, based on Chaumian cryptography and built for Bitcoin. Ecash is a digital bearer token, stored on the user's device, very similar to physical money.
The system relies on three actors:
- The Mint (the issuer) A mint is a server that receives bitcoins via Lightning and issues ecash tokens in return. Anyone can run a mint: a cafe, a local community, or an independent developer.
- The Wallet : the user's application that stores tokens locally on their phone, like banknotes in a physical wallet.
- The blind signature protocol : cryptographic magic. Thanks to blind signatures, the mint signs each token in such a way that the user can manipulate the signature to produce a valid signature that the mint recognizes as its own, but which does not allow identification of where the token came from.
In concrete terms: when Alice sends sats to Bob via Cashu, the mint sees one transaction enter and one transaction leave, but it is cryptographically incapable to establish the link between the two. He doesn't know who sent what to whom. Nor the time, nor the original amount, nor the identity of the parties.
What makes Cashu truly revolutionary
1. Native privacy: not optional, not expensive
With Bitcoin on-chain, every transaction is public. With Lightning, it's better, but not perfect. With CashuConfidentiality is the default mode, built into the cryptography itself. Blind signatures allow Alice to receive tokens from the mint, send them to Bob, and for Bob to redeem them without the mint ever knowing that Alice's and Bob's tokens are linked.
2. Offline payments at last
This may be the most practical innovation for mass adoption. Because ecash is a bearer token, payments can be transferred directly between devices without using the internet.
Think of a farmers market with poor signal, a festival, or a remote area. Cashu works like physical cash: as long as you have the tokens on your phone, you can pay. Synchronization happens upon reconnection.
3. Zero friction for onboarding
This is one of Bitcoin's most underestimated limitations. To receive funds on Lightning, you need incoming liquidity, and you must already own Bitcoin to receive it.
Cashu can play a key role in improving the Bitcoin onboarding experience while gradually guiding users towards sovereignty. This is precisely why Zeus Wallet and Blitz Wallet have integrated Cashu as their entry point: new users can receive ecash immediately, without a Lightning Channel and without prior liquidity.
4. Microtransactions finally viable
Transactions below 1,000 satoshis are difficult to carry out sovereignly; non-custodial Lightning wallets charge fees of several hundred sats even with open channels.
Cashu solves this problem. Cash transfers between users on the same mint are virtually free and instantaneous. This is the technology that makes micro-tips (the famous "Zaps" on Nostr), on-demand payments for APIs, and even Wi-Fi payments on the go economically viable.
5. Programmable tokens: a smart contract without a blockchain
Cashu tokens can encode script conditions before being blinded for the mint to sign, and at redemption the mint can refuse to buy back the token if these arbitrary conditions are not met.
In practical terms: we can create tokens that can only be redeemed with a specific public key, tokens with expiration, escrow tokens. And with recent developments in zero-knowledge proofs, these conditions can become Turing-complete for any conceivable contract, executable within the ecash system, without exposing any data to the blockchain.
How does architecture actually work?
The Cashu ecosystem is built on a model of multiple small decentralized mintsThe vision is an ecosystem of many very small, locally operating mints, all interconnected via the Lightning Network. Rather than focusing on large mints with massive network effects, the developers envision small-scale, local operators.
This allows users to place their trust in entities close to them—their café, their community, their local association—rather than in a centralized and anonymous platform. And if a mint disappears, the impact remains limited because the funds are distributed among several mints.
Transfers between mints go through the Lightning Network: a user of Mint A can pay a user of Mint B via an inter-mint Lightning transaction, all in a way that is almost transparent to the end user.
The Cashu ecosystem in 2025: rapid growth
In the space of two years, the Cashu ecosystem exploded.
Native iOS wallets are available today. (Macadamia, Sovran), Android wallets (Minibits, Nutstash), web applications (Cashu.me), and integrations into existing wallets such as Zeus ou Blitz Wallet.
The use cases go far beyond simple payment:
- Routstr : a decentralized AI marketplace where users pay on demand with Cashu tokens, without an account, without KYC.
- TollGate : a paid WiFi system using e-cash for open networks.
- Chorus : a Nostr app for activists with integrated Cashu wallet, combining censorship-resistant messaging and private payments.
- Hashpool : a Bitcoin mining pool without an account, paid for in eCash.
- Multinut payments: a feature allowing users to pay a single Lightning bill from multiple mints simultaneously, reducing dependence on a single mint.
And of course, Number : the application that transforms any NFC Android into a Bitcoin tap-to-pay payment terminal.
Limitations to be aware of: Cashu is not perfect
Transparency is essential. Cashu presents important compromises that need to be understood.
- The custody of the mint Your tokens are guaranteed by the mint's solvency. If the mint disappears or defaults, you could lose your funds. This differs from non-custodial Lightning where you hold your private key. Mitigation? Use multiple trusted mints, maintain small amounts in each mint, and regularly withdraw to your sovereign Lightning wallet.
- Partial confidentiality Cashu does not completely anonymize transactions, as metadata such as IP addresses can still be tracked. For maximum privacy, it is recommended to use Cashu with Tor.
- The bearer token Just like with physical cash, if you lose your wallet without a backup, you lose your funds. The responsibility is real.
These compromises are known and documented. They make Cashu not a replacement for Lightning self-custody, but a complementary tool — ideal for small daily amounts, where the friction of non-custodial Lightning is too high.
Why Cashu represents a turning point for Bitcoin adoption
The adoption of Bitcoin as a means of everyday payment has faced three obstacles for years: technical complexity, fees for micro-payments, and a lack of privacy for everyday transactions. Cashu tackles all three at once.
People use custodians; it's something they always have and likely always will, regardless of the flexibility offered by non-custodial solutions. Cashu aims to be a radical improvement for users of custodial services, bringing privacy, censorship resistance, and flexibility to users who would otherwise lack access to these properties.
This is Cashu's great strength: it doesn't require users to immediately become Bitcoin self-custody experts. It offers a gradual path, from easy ecash to Lightning, to full self-custody, with strong privacy at every stage.
David Chaum was right in 1982. It took him forty years, a decentralized blockchain, and a secondary payment network for his idea to finally find its infrastructure. Is Cashu perhaps the missing piece of the Bitcoin puzzle for mass adoption?
To know more : cashu.space | To try: Minibits (Android), Macadamia (iOS), Cashu.me (web)
