Imagine placing a stop-loss exactly where risk management says it should go, only to watch the market dip precisely to that level, trigger your exit, and reverse without you. That’s not bad luck — in a fully transparent blockchain, your stop was sitting in plain sight the whole time. This is the exact problem Nillion says it’s setting out to fix with its newly unveiled Encrypted Markets roadmap, a multi-year plan to bring privacy to the parts of crypto trading that have never had it: execution and strategy.
Summary
Key takeaways
- Nillion is building Encrypted Markets to extend blockchain privacy beyond simple transaction data to execution and strategy layers.
- The roadmap’s first phase, called Dusk, launches on Ethereum mainnet on 28 September 2026, following a Sepolia testnet debut on 28 August and a first live testnet app on 11 September.
- The core building block is the Covenant, an encrypted instruction that decrypts and executes itself only when a specified condition is met — with no single party holding the key.
- Seven phases run from August 2026 through February 2028, adding multi-chain support, cross-chain settlement, custom condition logic, a formal Covenants virtual machine, post-quantum cryptography, and scaling for everyday use.
- Nodes are permissionless but held accountable through consensus-based slashing and jailing mechanisms, and a developer SDK is designed to keep the underlying cryptography hidden from builders.
The Need for Enhanced Blockchain Market Privacy
Crypto privacy has almost always meant one thing: hiding who sent what to whom. That’s the layer projects like Zcash and Monero tackled years ago, proving there’s real demand for shielded transactions. But according to Nillion, that’s only the smallest slice of what actually matters in a market. Onchain activity, the company argues, breaks down into three layers — the transaction itself, the execution (how an order moves, routes, and settles), and the intelligence behind it (the strategy, the trigger conditions, the reasoning an agent or trader relies on). Privacy today covers only that first layer, leaving execution and intelligence broadcast in the clear, often before anything even happens.
That gap creates a structural exposure problem. A trading vault with a rebalancing trigger, once deployed, can be reverse-engineered by anyone willing to read the contract — and once the trigger logic is known, competitors or bots can simply wait for it to fire. As more finance and more autonomous agents move onchain, Nillion contends this exposure only compounds, because an agent that announces what it’s watching for can’t meaningfully compete. This is one of the two moments where the stakes become clear: without privacy at the execution and intelligence layers, sophisticated strategies onchain have a shelf life measured in days, not months.
Introducing Encrypted Markets and the Covenant Primitive
Nillion’s answer is a primitive it calls the Covenant — an encrypted instruction that stays sealed until a defined condition is satisfied, at which point it decrypts and executes itself automatically. A trade, an order, a bid, a prediction, or a payment can all be sealed to a condition and posted onchain without revealing its contents to other traders, to searchers, to the underlying network, or even to Nillion itself. Only when the condition triggers does the instruction unlock. This is the mechanism meant to close the gap between Layer 1’s existing privacy and the still-exposed execution and intelligence layers described above.
Running the network are permissionless nodes that anyone can operate, rewarded according to stake. But permissionless doesn’t mean unaccountable: node behavior is policed through consensus, with jailing and slashing enforced whenever a node misbehaves. That combination — open participation paired with enforceable penalties — is Nillion’s attempt to keep the system decentralized without sacrificing reliability. A companion SDK is also part of the plan, built specifically so developers can create what Nillion calls “condition-native” apps without having to touch the underlying cryptography themselves.
Seven-Phase Roadmap from Ethereum Launch to Scaling
The Encrypted Markets roadmap unfolds across seven named phases stretching from August 2026 to February 2028, starting on Ethereum and gradually expanding outward. Each phase adds a specific capability, moving from a single-chain proof of concept toward a system designed to handle complex, cross-chain, and eventually quantum-resistant privacy at scale.
Phase 1 “Dusk”: Ethereum Mainnet Launch and SDK Availability
The opening phase, Dusk, runs from August through November 2026 and brings the first Covenants to Ethereum’s Layer 1, created and resolved without any single trusted party in control. Three milestones anchor this phase: Dusk goes live on the Sepolia testnet on 28 August, the first application runs live on testnet by 11 September, and Dusk reaches Ethereum mainnet on 28 September 2026. Alongside the mainnet launch, Nillion is releasing baseline tokenomics, a node kit for permissionless operators, and the agent-optimized SDK that lets developers build condition-native apps while the cryptographic complexity stays hidden under the hood.
Phases 2 and 3: Multi-chain Support and Cross-chain Settlement
From November 2026 to February 2027, the second phase, Darkfall, extends the network natively across the EVM ecosystem, giving developers and node operators chain-specific tooling while strengthening accountability through peer-to-peer consensus among nodes. The third phase, Skyglow, follows from February to May 2027 and introduces cross-chain settlement logic — allowing a condition observed on one chain to be settled on another — while also extending reach beyond the EVM toward chains like Solana and privacy-focused networks such as Monero.
Phases 4 to 7: Complex Conditions, VM Formalization, Post-Quantum Hardening, and Scaling
The later phases push the system toward full maturity. Subsequent stages introduce support for arbitrary, user-defined condition logic tied to any observable data feed, followed by a formalized Covenants virtual machine that keeps conditions fully private even from the nodes processing them. Then comes Aurora, running from October 2027 to January 2028, which layers in post-quantum cryptography hardening to protect the network against future quantum-computing threats. The roadmap closes with Moonshine, from December 2027 to February 2028, focused on scaling the system for everyday, high-volume use rather than just specialized trading applications.
Taken together, the sequencing tells its own story: Nillion is deliberately building trust and infrastructure on Ethereum first before spreading across chains, only tackling the hardest cryptographic problems — arbitrary conditions, post-quantum resistance, mass scale — once the foundational Covenant primitive has proven itself. For builders and investors watching the space, that phased approach is itself a signal about how seriously the project treats security tradeoffs versus speed to market.
FAQ
What problem does Nillion’s Encrypted Markets aim to solve?
It enhances blockchain market privacy beyond transaction details to also protect execution and intelligence layers where trading strategies are exposed.
What is a Covenant in the Encrypted Markets context?
A Covenant is an encrypted instruction that self-decrypts and executes only when specific conditions are met, keeping strategy private until execution.
When will the first phase of Encrypted Markets launch on Ethereum mainnet?
The first phase, Dusk, will launch on Ethereum mainnet on 28 September 2026.
How does Encrypted Markets ensure node security and accountability?
Nodes operate permissionlessly but are accountable through consensus mechanisms that enforce jailing and slashing for misbehavior.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.
