[nootropicat]

Deanonymizing zcash's shielded transactions requires breaking the preimage resistance of sha256.

[ianmiers]

Technically, you could also break the encryption used in the memo field. But thats bog standard cryptography