Privacy by math, not by promise.
A shielded pool where balances and transfers are hidden by zero-knowledge proofs. Any amount, no minimum, no partner in the middle — proofs are generated in your browser.
Unlock your shielded account
Your shielded account is derived from one signature — nothing is stored, here or anywhere. Sign the same message again on any device to recover it.
Your wallet asks you to sign twice — the second signature confirms the account can be recovered.
How it works
- Shield — deposit ETH or USDG. You receive an encrypted note only your key can open.
- Send — pay another shielded address. Amount, sender and recipient stay hidden.
- Unshield — withdraw any amount to any address. A proof shows you own enough, without saying which deposit was yours.
What stays hidden:
- who sends and who receives inside the pool
- each user's balance
- which deposit a withdrawal came from
What stays visible (true of every privacy pool):
- amounts entering (shield) and leaving (unshield)
- the addresses that shield, and the address that sends each transaction
Tip: wait before unshielding and use a different amount than you shielded — matching amounts and timing are the usual way pools get de-anonymised.
Milestones
Note pool built on Poseidon commitments, a Merkle tree, nullifiers, and 2-in/2-out zero-knowledge proofs.
circom + circomlib, no home-made cryptography. 34 end-to-end tests with real proofs, including double-spend, front-running, forged notes and inflation attempts.
Phase 1 from the Ethereum Foundation’s Perpetual Powers of Tau (80 contributors). Phase 2 has a development ceremony; a public ceremony anyone can join comes before caps are raised.
Line-by-line review of circuits, contracts and client; findings fixed and re-tested.
Immutable per-deposit and total pool caps. No admin keys, no upgrades.
Third-party audit of circuits and contracts before caps are lifted.