Most Ethereum wallets still show your entire financial history to anyone who has your address, and the Ethereum Foundation is now framing that as a security hole rather than a privacy nice-to-have. On Monday, the Foundation posted that the past week's attacks and exploits made one point clearer to them, which is that privacy and security can't be treated as separate goals. Their line was that you can worry less about an attacker using your onchain history against you when privacy is the default. The post quoted an update on Kohaku, the Foundation's privacy-first wallet tooling project. The JavaScript repo splits it into packages that a wallet team can pick up one at a time. There are libraries for Privacy Pools and Tornado Cash, plus a Railgun library the README currently marks as under maintenance. A plugins package defines a standard interface for shielded pool protocols, so a wallet can talk to all of them the same way. A provider package abstracts over ethers, viem, Helios and Colibri. The repo also ships a post-quantum ERC-4337 account. Rust crates live in a separate sister repository. I like that this is shaped as an SDK rather than yet another privacy wallet asking users to move funds. The idea is that existing wallets add shielded flows without each team reimplementing three protocols. The README is blunt about where things stand. Some parts are marked as not ready for production, and the packages contain unaudited code. Ambire's Jordan Enev said last Friday that the team has spent months testing the integrations, and no public launch date has been given. Vitalik and Nicolas Consigny are scheduled to demo Kohaku with Ambire on Ethereum mainnet at @EFDevcon next Tuesday, according to the session listing. here is the repo - https://t.co/egNbLgAo0J