Zerocash had a possible backdoor, which was its&#x27; biggest drawback. I don&#x27;t see it mentioned on the web page, which seems like they&#x27;re hiding it (it&#x27;s cruital to know who we need to trust with the setup part, and whether anybody has the right to take part in it).<p>,,Security of Π relies on a trusted party running Setup to generate the public parameters (once and for
all). This trust is needed for the transaction non-malleability
and balance properties but not for ledger indistinguishability&#x27;&#x27; - from the zerocash paper