Proof-bound swaps, private by construction.
Exchange one shielded note for another with a VetKeys-encrypted payload, an L1 nullifier lock and a post-fill output proof. Settlement remains publicly observable.
The journey of an intent.
A two-proof flow with an explicit privacy boundary: private note ownership, encrypted submission and observable settlement.
Encrypt
Your browser encrypts the exact swap parameters for the relayer with VetKeys. The output secret never leaves your device.
Prove
A Digest9 proof authorizes the input note, change and reserved output key before any quote or order exists.
Execute
After verification, the nullifier is locked and the settlement executes a public, individually observable swap.
Finalize
A second proof binds the actual fill to a new shielded note. Finalization consumes the input and creates both outputs atomically.
Proof before quote
The relayer verifies note ownership and locks the nullifier before requesting a quote or creating an order.
Explicit privacy boundary
The settlement transaction is visible on-chain. What remains hidden is the ownership link between the consumed note, change and post-fill output note.
Swap from one private note to the next.
Authorize first, settle publicly, then mint the exact filled amount into a new shielded note.