01
Your browser draws a receipt
Two random numbers, and only their hash is published. The numbers stay on your machine — they are the only way back, and nobody else has ever held them.
Move SOL without
leaving a trail.
Anyone you have ever paid can read your wallet — what you hold, what you buy, who you pay. Put a fixed amount into the pool, take it out at another address, and nothing connects the two. There is nothing on our side to connect.
—
in the pools right now
—
deposits since launch
—
withdrawals paid out
Put SOL in, take it out somewhere else.
Nobody can connect the two. Not us — there is nothing on our side to connect.
Three sizes only. An unusual amount would be a name, and would give you away.
Three moves, nothing else
02
You send a fixed amount
0.1, 1 or 10 SOL, into an address with no private key. Three sizes and no others, because an unusual amount is a name.
03
You take it out elsewhere
Your machine proves you own one deposit without saying which, and a relayer pays any address you name. Your wallet never signs.
What is not done
There is no external audit, and the proving key still came from a setup run on one machine — until a public ceremony replaces it, whoever held that machine's randomness could forge a withdrawal. Both are written out in the open, the ceremony takes two minutes to join, and the program itself is at CTHg29…Y1YW.