Trust
Nobody holds the keys but you.
⌀
No admin key
The vault can't be upgraded, paused or emptied by anyone. Only valid proofs move notes.
◐
Proofs stay local
Your browser builds every proof. No server sees your notes, your keys or your balance.
◌
No address trail
Relayers pay the network fee and take it from your notes, so your wallet never signs on-chain.
▣
One signature
Your keys come from one wallet signature, made on your device. Nothing to back up but your wallet.
Status: in development. The vault will be independently audited before it holds real funds.
What stays public
- Every shield: amount and depositing wallet
- Every unshield: amount and destination
- Which relayer sent a private action, and its fee
What stays hidden
- Who holds private notes, and how much
- Who sent to whom, and how much
- Links between a shield and later actions
Reviews
- 3 internal adversarial reviews
- Every finding fixed and tested
- Independent audit before real funds