App
Your wallet goes in. A stranger comes out.
The agent writes the plan, your wallet makes the deposit, this tab builds the proof and a relayer handles the exit. Your notes stay in this browser.
Agent plan
idleYour plan builds here line by line, from the sentence the agent reads to each value the chain would see. Orange rows touch the chain.
Each pool takes one size, so nobody can match a withdrawal to a deposit by amount.
Hush also keeps it in this browser, under Notes.
What happens
- 01
Your browser draws two random numbers, the nullifier and the secret. Together they form the note above, and they stay in this tab.
- 02
Your browser hashes them into a commitment, and your wallet sends it with 0.5 ETH to the 0.5 ETH pool.
- 03
The pool adds the commitment as a leaf of its Merkle tree. The chain now holds a deposit from your address and a hash that says nothing about you.
- 04
Later, from any browser, the note proves you own one leaf without saying which, and the pool pays out as ETH or swapped, to an address you choose.
A deposit costs about 885k gas.
Paxos dollar, quoted on chain
Empty recipient: the dry run binds a throwaway address.
What the proof will say
Your tab builds the proof in a few seconds and downloads the proving key once (about 3 MB over the wire). The proof reveals the nullifier hash and nothing about which deposit is yours. A relayer that changes the recipient, the fee, the token or the minimum makes it invalid.
The pools aren't live yet, so the dry run proves your note against a local tree and checks the proof with the verification key. It uses the live circuit and keys and sends no transaction.
Notes · 0
No notes in this browser. A deposit adds one here, or you can paste a note into Withdraw.
Chain 4663 · No accounts · Notes stay in this browser