Private by design.
Proven step by step.
A technical laboratory, not the production app. Real SDK cryptography and proofs; simulated balances and trades. Nothing here signs or broadcasts a funded transaction.
Your keys. Your recovery.
Save this test phrase. This is not your Phantom phrase.
Phrase restores key identities; encrypted backup also restores wallet indexes and pending work. Never replace a funded vault without its backup. This prototype is unaudited.
Measure, don’t assume.
Verify recovery of real SDK-encrypted notes. Then generate real deposit, withdrawal, and return proofs against a local fixture ledger.
Proofs use official circuit assets and a guarded local CSPRNG substitution for SDK note blinding. RPC responses, pool state, and fees are fixtures. The substitution is unaudited; passing does not establish mainnet acceptance or anonymity.
Actual SDK deposit → withdrawal → official DEX buy/sell → SDK return proof. Every signed client transaction waits for encrypted browser storage. Includes a lost-response restart and duplicate-retry check. All chain execution and prices are fixtures; your simulated balances stay unchanged.
Phantom is optional for these offline checks. No signatures requested.
API probe contacts Privacy Cash directly and exposes your IP. It does not send your WiSP identity.
Awaiting checks.
Shield. Trade. Return.
LockedUnlock a local vault to begin.
Simulated 1% buy/sell fee, fixture overhead, flat-price trades. Test waits: Flicker 0s / Drift 15s / Haze 45s—not validated privacy delays. Buy reserves SOL for sell/return.
No positions yet.
Initializing isolated worker…