Roadmap
From private transfers
to a shielded economy.
A guarded path: real cryptography first, an audit before mainnet, and never a shortcut through users' privacy.
Shielded pool on Base Sepolia
Arbitrary-amount shield, private send, and unshield; nullifiers, Poseidon2 Merkle proofs, and gasless relayer exits — all with real Noir / UltraHonk proofs.
In-browser wallet, prover & relayer
Local note scanning, in-browser proof generation, encrypted notes, a 12-word recovery phrase, and a relayer service real testers can use.
Anonymity mining
Spend-on-claim rewards for keeping value shielded, minted straight into the pool as private notes — the second circuit, proven in-browser and verified on-chain.
Public testnet
Open testers, multi-relayer discovery at scale, an indexer for fast note recovery, and a growing anonymity set.
Independent audit
An independent Solidity audit and a separate Noir circuit review — the cryptography ships to mainnet only once it is reviewed.
Guarded launch
Role handover to a Safe + Timelock (delayed, reversible), genesis vesting, published risk disclosure, and a careful Base mainnet launch.
Use the live testnet.
Everything above the line is live on Base Sepolia.
Launch app →Testnet · proofs verified on-chain · audit pending