Privacy for honest users. Controls for illicit flows.
Nox applies automated risk checks without public surveillance: outcomes are enforced by the protocol, while users keep on-chain privacy.
Prove funds are clean without revealing anything.
A user should be able to deposit, mix, and withdraw while demonstrating the wallet is not flagged or frozen and the deposit is source-able and mature — without ever revealing the amount, the route, or the counterparty.
Admission control
DepositManager checks the ComplianceRegistry before any commitment is minted. A compliance-violating note cannot exist — the deposit reverts.
zkKYC entry
Self-service registration via Privado ID UniversalVerifier. Identity is proven with ZK credentials — without revealing which credential is yours.
Risk scoring
The graph scanner and rule-based canister scanner assemble evidence of non-involvement: seed funding, structuring, velocity, concentration.
Maturity as proof
Even a clean deposit must mature (1h zkKYC, 24h manual, 7d flagged) before funds become liquid. Innocence is continuously re-verifiable.
Outcomes enforced by the protocol.
Compliance statuses live on-chain in the ComplianceRegistry — enforced by contracts and canisters, not by a Terms of Service page.
Fast Path
Verified history or strong trust score. Execution proceeds immediately.
- Minimal friction UX
- No identity disclosure
Dual Resolution
New wallet or high-risk amounts. Pick the path that matches your situation.
- Privacy Path: 24h time-lock
- Speed Path: ZK proof unlock
Protection Mode
Hack patterns or exploit-linked funds. The protocol freezes the flow.
- Stops laundering vectors
- Preserves legitimate liquidity
Risk detection, self-hosted & on-chain.
A graph scanner correlates funding patterns from public chain data; a rule-based scanner inside the relayer scores volumes, velocity, and structuring. Escalation is automatic — de-escalation is manual and auditable.
Detection signals & scores
Flag at ≥ 50 · Freeze at ≥ 90
Documented limitations
Honesty is part of the security model.
- Withdraw is a clear-model MVP — the commitment is not yet cryptographically bound to the proof in the circuit. Real binding exists in the mixer path.
- The scanner MVP uses only on-chain indexed data — no external vendors or AI models. The RiskProvider trait is the extension point.
- De-escalation (flagged → clean) is always manual via operator review. Escalation is the only automatic path.
Compliance-first privacy layer.
Block illicit behavior while keeping honest users shielded on-chain.