Aztec Labs, the team building Ethereum’s programmable privacy Layer 2, has acquired Obsidion and committed to maintaining the ZKPassport protocol and its iOS application as open-source software.

ZKPassport lets users verify their identity using government-issued IDs without actually exposing the sensitive data on those documents. The protocol accomplishes this through zero-knowledge proofs, a cryptographic technique that lets one party prove a statement is true without revealing the underlying information.

What ZKPassport actually does, and why Aztec wants it

In the blockchain world, one of the most persistent headaches is Sybil attacks, where a single person creates thousands of fake accounts to game airdrops, governance votes, or token sales. ZKPassport offers a privacy-preserving solution to this problem. It can verify that a user is a real, unique human without collecting or storing their personal data.

ZKPassport was integrated into the Aztec ecosystem starting around June 2025, serving as the human verification layer on the project’s testnet. The goal was straightforward: make sure each participant was a genuine person, not a bot farm operator running scripts from a data center.

The protocol also played a role during Aztec’s token sale in November 2025, which raised approximately $59 to $61 million at an initial fully diluted valuation of around $350 million.

Obsidion itself has been described as a wallet designed for private payment interactions on the Aztec network. By acquiring the team and technology behind both the wallet and ZKPassport, Aztec Labs is pulling its identity and payment layers in-house.

The open-source commitment matters more than you think

For a protocol that handles identity verification, open-source isn’t just a nice philosophical stance. It’s a trust requirement. Users are being asked to prove their identity using government documents. If the code doing that verification isn’t auditable by anyone, the entire value proposition collapses.

Keeping the iOS app open-source is also notable. Mobile applications are frequently the layer where open-source projects quietly introduce proprietary components. Aztec’s decision to keep both the protocol and the app transparent suggests this isn’t a token gesture.

The broader Aztec Network runs on Noir, a domain-specific programming language designed for writing zero-knowledge circuits.

What this means for investors and the privacy market

Aztec’s token sale raising $59 to $61 million demonstrates that investors are willing to put serious capital behind privacy-preserving infrastructure. That figure, combined with the roughly $350 million initial FDV, suggests the market views Aztec as one of the more credible players in the privacy Layer 2 space.

For the competitive landscape, this acquisition creates a more vertically integrated stack. Aztec now controls the Layer 2 network, the zero-knowledge programming language, the identity verification protocol, and a wallet for private transactions.

The risk worth watching is regulatory. Zero-knowledge identity verification is elegant in theory, but regulators in multiple jurisdictions are still grappling with whether “I can prove I’m a real person without telling you who I am” satisfies compliance requirements. If major markets decide that privacy-preserving verification doesn’t meet Know Your Customer standards, the entire thesis behind ZKPassport faces a serious stress test.