• Bitcoin’s Taproot Upgrade: Three Years Later, What Changed
  • What Taproot Actually Introduced
  • The Privacy Benefits
  • The Adoption Curve
  • What’s Not Changed
  • The Lightning Improvement
  • Key Takeaways

§Bitcoin’s Taproot Upgrade: Three Years Later, What Changed

Taproot activated in November 2021, introducing Schnorr signatures and MAST to Bitcoin. Three years later, it’s worth examining what has actually changed, what hasn’t, and where the privacy and efficiency benefits are showing up in measurable ways.

§What Taproot Actually Introduced

Taproot was actually three separate upgrades bundled together:

Schnorr signatures: A new digital signature algorithm that enables signature aggregation. Any set of Schnorr signatures can be combined into a single signature that’s indistinguishable from a single signature. This is mathematically proven and can’t be broken without breaking Bitcoin’s cryptography entirely.

MAST (Merklized Alternative Script Tree): Previously, Bitcoin scripts with multiple conditions (A OR B OR timelock) had to reveal ALL conditions on-chain, even the conditions not used. MAST lets you commit to multiple possible scripts and only reveal the one actually used.

Tapscript: A minor scripting upgrade that accompanies the above, enabling new opcodes and improving Script’s flexibility for future upgrades.

§The Privacy Benefits

The most significant impact of Taproot is privacy. Here’s why:

Before Taproot, Bitcoin transaction types looked different on-chain:

• Single-sig P2WPKH transactions had a distinctive pattern
• Multi-sig P2WSH transactions had another
• Timelock recovery transactions yet another

Chain analysis firms used these patterns to identify钱包类型, cluster addresses, and build maps of exchange holdings, OTC desks, and custody services.

With Taproot and Schnorr aggregation:

• A 2-of-2 multisig Lightning channel open looks identical to a single-sig transaction
• A complex vault contract with multiple spending conditions looks identical to simple single-sig
• Even Taproot users who don’t use complex scripts benefit because their transactions look the same as those who do

§The Adoption Curve

Taproot adoption has been gradual, as expected for a change that primarily benefits users who actively choose it. As of early 2026:

• Approximately 25% of new transactions use Taproot addresses (bc1p prefix)
• Approximately 15% of total Bitcoin in circulation is held in Taproot addresses
• Most major exchanges and custodians support Taproot withdrawals
• Hardware wallets (Coldcard, BitBox02, Trezor T) support Taproot natively

The adoption curve is following a pattern typical for Bitcoin upgrades: early adopters (privacy-conscious users, Lightning nodes), then wallets and services adding support, then mainstream adoption as the UX improves.

§What’s Not Changed

Taproot hasn’t magically made Bitcoin anonymous. Chain analysis firms haven’t given up. They’re adapting by focusing on heuristics that don’t depend on transaction type identification:

Timing analysis: When you send from a Taproot address, the timing of that transaction can still be correlated with your other transactions Amount analysis: Round-number amounts and common transaction sizes create patterns Exchange heuristics: If you withdraw from an exchange to a Taproot address, the exchange still knows that address is yours

The privacy improvement is real but partial. Taproot raises the cost of chain analysis, but doesn’t eliminate it.

§The Lightning Improvement

Lightning Network has benefited significantly from Taproot. Channel transactions — which are a major source of Lightning’s privacy leakage — are now far more private when both parties use Taproot.

An old Lightning channel open looked like a 2-of-2 multisig on-chain. With Taproot, it looks like a single-sig transaction. The channel is indistinguishable from ordinary payments when viewed on-chain.

This has encouraged more Lightning adoption among privacy-conscious users, contributing to the network’s growth to 15 million users.

§Key Takeaways

• Taproot (Schnorr + MAST) enables signature aggregation and hidden script conditions
• ~25% of new transactions now use Taproot addresses — gradual but meaningful adoption
• Privacy improvement is real: Lightning channels, multisig, and complex contracts all look like single-sig
• Chain analysis hasn’t been defeated — timing and amount heuristics remain viable
• The full privacy benefit requires widespread Taproot adoption, which is progressing over years, not months

⚡ If this was useful, a zap is always welcome. tomford@rizful.com