A Shielded Bitcoin transfer publishes a ciphertext containing wallet state data alongside a zero-knowledge proof verifying the ciphertext's correctness