Zero-knowledge · chain 4663
Private balances Deposit any amount, spend any part of it later from an address that was never linked to it, and whatever is left stays hidden. There is no operator and no admin key: the only way out is a proof, checked by the contract itself.
Shielded balance
Connect a wallet to begin. Your balance is reconstructed in this browser from a signature, never fetched from a server.
How it works
01
Your browser makes a note
A hidden amount and two random numbers. Their hash goes on-chain. Nothing that identifies you leaves the page.
02
Every size shares one pool
Notes of any value sit in the same tree, so the crowd you hide in is everyone using the pool rather than everyone who picked the same amount.
03
You prove, you do not ask
Spending proves you know the secret behind some note and that the sums balance, without revealing which note or what it held.
04
Change stays shielded
Spend part of a note and the remainder comes back as a fresh hidden note, encrypted to you. Only what you withdraw is ever visible.
What this does not hide
That a deposit and a withdrawal happened, and when Timing, if you withdraw moments after depositing Anything, if you withdraw to the address you deposited from Whichever wallet pays gas for the withdrawal, which stays in the transaction permanently. If it can be tied to you, so can the withdrawal Your network. The notes are read and the transaction is sent over the same connection, so an RPC provider sees both ends even though the chain does not