The round uses a square root formula that lets 100 small donors outweigh a single large donor, and admits privacy coin contributions in Monero and shielded Zcash by verifying amounts through a cryptographic handle that confirms how much arrived at an address without identifying…
In the Tor Project's latest funding round for internet-freedom projects, a $10 donation from a hundred people earns a larger match than a $1,000 donation from one person, because the formula weights the square root of each contribution rather than the sum. The round also accepts Monero and shielded Zcash, two cryptocurrencies built to hide sender identity, and counts them toward the match without learning who sent them. The device that makes this possible: the project shares a view key with the campaign, a cryptographic handle that proves a specific amount arrived at a specific address while keeping the donor's identity shielded.
The mechanism is called quadratic funding, and it is the matching-pool counterpart to quadratic voting, the mechanism-design idea that Vitalik Buterin, Zoë Hitzig and E. Glen Weyl have pushed as a way to register the intensity of preferences rather than just the count. Quadratic funding applies the same logic to money: the match a project receives grows with the square root of the sum of the square roots of its individual donations, so a project with many small backers can outmatch a project with one large one even when the dollar totals are equal.
The campaign page documents the rules, not the results. The Tor × FTC round is presented as a mechanism explainer and operations page, and the page does not disclose the match-pool size, the round dates, or the grantee count, so any reading of the round's impact has to wait for a results post (Tor Project × FTC funding round page). The worked example the page uses to make the math legible: four projects each raise $400 from their donors, but the project with 80 donors of $5 each receives a larger share of the match pool than the project that raised the same $400 from a single $400 gift. That is the property the campaign leans on when it describes the round as "democratizing allocation."
The privacy layer is what separates this deployment from earlier quadratic-funding rounds. Public-chain donations in bitcoin, ether, and transparent Zcash are verified on-chain, where amounts and timing are visible to anyone. Monero and shielded Zcash, by contrast, hide the sender on the chain itself, so the campaign cannot read the blockchain to count contributions. The view key is the bridge: a cryptographic handle the project shares with the round operator, who can verify how much landed at a given address without learning which donor sent it. Donor identity is shielded; the campaign still sees the amount, the timing, and the project-side counterparty.
The view-key approach is a trusted-operator model, not a protocol-level anonymity guarantee. The campaign holds a handle that, in principle, could be misused, and donors have to trust that the operator will not deanonymize them or hand the key to a third party. That trust boundary is the price of admitting privacy-coin contributions into a matching formula that needs to count distinct donors to function.
Sybil resistance, the design problem of stopping one person from pretending to be many donors, is the load-bearing honesty layer of the whole round. The campaign describes a three-step pipeline: automated flagging of correlated addresses and dust-burst patterns during the round, review of flagged patterns by a small trusted committee before distribution, and exclusion of flagged donations from the match formula while still passing them through to the project. Flagged donations still reach the project; they just do not count toward the match. The committee is operator-appointed, and its membership is not disclosed on the campaign page.
The mechanism has a real-world track record outside Tor. Gitcoin Grants has run quarterly quadratic-funding rounds in the Ethereum ecosystem since 2019, with per-round matching pools on the order of $3 million from matching partners, and reports cumulative funding of public goods in the tens of millions of dollars, a figure that comes from the operator rather than an independent audit (Gitcoin blog on quadratic funding). The Tor × FTC round is a smaller deployment of the same formula, layered with a privacy-tech twist that Gitcoin's mainstream rounds do not carry.
The conceptual argument, laid out in Buterin's 2019 primer, is that quadratic funding is a tool for funding non-rival, non-excludable goods, the economic category that includes open-source software, journalism, and privacy infrastructure, where private markets undersupply because no one can capture the value. The "public markets" framing treats the match pool as a stand-in for the missing price signal, and the square-root weighting as a way to measure demand from people who cannot safely register it through normal markets (Vitalik Buterin, "Quadratic Payments: A Primer," 2019-12-07).
The unmeasured part: the sybil-resistance layer is described, not independently audited. The correlated-address and dust-burst detection are operator-stated, the trusted committee is operator-appointed, and the mechanism's effectiveness against a well-funded adversary has not been measured in public. For an internet-freedom round, that is the part of the design that has to hold up under scrutiny, and it is the part that most deserves an outside review.
What to watch: whether the campaign publishes match-pool size, donor counts, and committee membership once the round closes, and whether a future round adds an independent audit of the sybil-review process. The square-root formula is the part of the design that is easy to verify. The privacy device is the part that is hard.