Aztec Labs acquires Obsidion, maker of ZKPassport age verification protocol

May 27, 2026

Blockchain privacy firm Aztec Labs has acquired Obsidion, creator of the ZKPassport identity protocol. ZKPassport uses zero-knowledge proofs to let users verify attributes like age from government IDs without exposing personal data. The acquisition comes as governments mandate age verification and data breaches from traditional ID checks rise, with 780 compromises in Q1 2026 alone. Aztec Labs will keep the protocol and its iOS app open-source.

Aztec Labs acquisition of Obsidion

▪The financial terms of the acquisition were not disclosed.
▪Aztec Labs is the team building a programmable privacy Layer 2 blockchain on Ethereum.
▪Obsidion co-founders Michael Elliot and Theo Madzou, along with their team, will join Aztec Labs.
▪Aztec Labs has acquired Obsidion Labs Ltd., the British startup behind the ZKPassport protocol.
▪Aztec Labs has committed to maintaining the ZKPassport protocol and its iOS application as open-source software.

Government age verification mandates

▪Governments in the U.K., Australia, and parts of the U.S. are moving to force online platforms to verify user ages.
▪Regulators are still determining if privacy-preserving verification methods satisfy Know Your Customer (KYC) compliance requirements.

ZKPassport zero-knowledge identity protocol

▪The protocol uses zero-knowledge proofs, a cryptographic method that proves a statement is true without revealing the information supporting it.
▪The protocol works by reading the near-field communication (NFC) chip in passports and national IDs from over 130 countries.
▪ZKPassport helps prevent Sybil attacks, where one user creates many fake accounts to manipulate airdrops, votes, or sales.
▪ZKPassport allows users to verify attributes like age or nationality from government IDs without exposing underlying personal data.

Identity verification data breach crisis

▪Traditional identity verification often requires sending a scan of a user's passport to a third-party vendor.
▪The Identity Theft Resource Center reported 780 data compromises in the first quarter of 2026, exposing the information of nearly 140 million people.