Shield
Deposit supported assets into a shielded vault. A unique commitment is added to the private pool.
Shield, move, and claim assets across supported networks with a privacy-first architecture built around zero-knowledge proofs and relayer-assisted claims. Designed to reduce direct public links between deposits and withdrawals.
A simple flow for users. A considered privacy architecture underneath. Each step has a distinct role in the intended transfer journey.
Deposit supported assets into a shielded vault. A unique commitment is added to the private pool.
Generate a zero-knowledge proof locally to prove ownership without revealing the secret witness.
Request withdrawal to a fresh destination address through a relayer-assisted claim flow.
A conceptual view of how a private cross-chain transfer could move between components. Final architecture will be documented in the specifications.
The user deposits a supported asset into a shielded vault contract on the source network.
A commitment joins the private pool. The direct link back to the depositor is not published.
A zero-knowledge proof is generated locally, then a relayer submits the claim on the destination.
The destination verifies the proof and nullifier, then releases funds to a new address.
The protocol concept separates deposit commitments, local proof generation and destination claim verification.
Source-chain deposits create commitments that can be included in a Merkle tree for later proof generation.
The intended client-side prover constructs a proof without sending the private witness to a service.
A relayer can submit a claim while destination contracts or programs verify proof validity and nullifier status.
Network support shown here is illustrative. Live routes should be announced only after contracts and verification are published.
Network names are design examples, not a claim of deployed or supported routes.
Situations where separating public address history from a transfer can matter. Examples are illustrative.
Rebalance funds across chains without publishing a direct line between a treasury and its destinations.
Pay teams on their preferred network while limiting how much payment history is linked on-chain.
Move assets to a fresh address on another chain instead of reusing a long-lived, widely known one.
Support grants and distributions where recipients may not want their full wallet history exposed.
Shift positions between ecosystems with a flow designed around proofs rather than public address links.
Receive cross-chain payments at fresh addresses to keep business and personal activity separate.
Use cases are illustrative. Always follow the laws and regulations that apply to you.
Security depends on proof circuits, contract implementation, cross-chain message verification, nullifier handling and operational assumptions. No audit or live deployment is claimed by this website.
A conceptual comparison of design goals. Actual guarantees depend on the final implementation and independent audits.
Implementation guides should document the supported networks, proof system, contract interfaces and relayer requirements as these components become available.
Document circuit design, public inputs, verification keys and reproducible proof generation.
Specify per-chain vaults, asset support, messaging trust assumptions and destination verification.
Define claim submission, fee handling, monitoring and failure recovery before production use.
An illustrative roadmap. Milestones and order are placeholders until they are confirmed and published.
Protocol concept, threat model and interface design.
PlannedProof circuits and vault contracts specified and implemented.
PlannedPublic testing of deposits, proofs and relayer claims.
PlannedThird-party review with a published report.
PlannedGradual launch of verified routes.
PlannedCore documentation areas for the protocol. Replace these summaries with verified specifications and live links before launch.
No. This is a frontend preview. Wallet connections, live routes and on-chain transfers are not active.
No absolute anonymity guarantee is made. Privacy depends on protocol implementation, usage patterns and the chain-specific environment.
This website does not claim an audit. Any audit status should be supported by a public report from an identified auditor.
A relayer submits the claim transaction on the destination chain on the user's behalf, so a fresh address does not need to be funded from a linked wallet.
A unique value revealed when a claim is made so the same deposit cannot be claimed twice, without revealing which deposit it came from.
The intended design generates the zero-knowledge proof locally, so the secret witness never leaves the user's device.
Fee details are not published in this preview. Network and any relayer fees should be shown before confirmation once integration is enabled.
Claims should be backed by open specifications, public circuits and independent audits. Until those are published, treat this site as a design preview.
Explore the bridge interface and the protocol concept. Wallet connection and live routes are not enabled in this preview.