Move HYPE to a new wallet without a trail.
Deposit into a shared pool on Elysium, withdraw to any address later. A zero-knowledge proof says you own a deposit, never which one.
A deposit is public. A withdrawal is public. The link between them is the one thing Saturn takes away, and only for money that passed the approved set.
How a transfer goes.
Deposit from your wallet
The pool stores a commitment: a hash of the amount and a secret only your browser knows. Everyone sees the deposit, nobody sees where it goes.
min 0.05 HYPEWait for approval
An hour later the deposit joins the approved set, unless its wallet is blocked. Leaving a minute after arriving would be easy to match anyway.
delay 1 hWithdraw anywhere
Name any address. Your browser builds the proof in seconds and the relayer pays the gas, so the new wallet never needs HYPE or a signature.
proof ~4 sMore ways to stay hidden.
Privacy meter
Before you withdraw, the app counts how many approved deposits could have paid that amount and how many landed after yours, and tells you when waiting or splitting would help.
Split across wallets
Send one note to up to four fresh wallets in equal parts, so no single transfer matches your deposit.
Spread over hours
Schedule the parts at random moments over one or six hours, so timing can't tie them back to your deposit.
New wallet in one click
The app makes a fresh address on the spot and hands you its key. Nothing about it was ever on chain before.
The set right now.
One square per deposit in the pool, read from the chain. Your withdrawal could have come from any lit square.
Blocked money can't hide here.
Every withdrawal proves its deposit is in the approved set, a list the pool checks on chain. The list and its hash are public at /api/state, and the keeper posts its root.
Your money always comes back.
If a deposit is never approved, the wallet that made it takes the full amount back with a ragequit. There is no function that lets anyone, us included, move or freeze funds in the pool.
| Direct transfer | Through an exchange | Saturn | |
|---|---|---|---|
| Link between the two wallets | Public on chain | Known to the exchange | Hidden by a proof |
| Who holds the HYPE meanwhile | You | The exchange | The pool contract |
| New wallet needs gas first | Yes | No | No, the relayer pays |
| Account or ID check | No | Yes | No |
Questions.
Is this Tornado Cash?
It is Privacy Pools by 0xbow, which adds the approved set: a withdrawal must prove its deposit was not blocked. The circuits and proving keys are 0xbow's, from their public trusted setup.
What if I lose my phrase?
Then your notes can't be withdrawn or returned, by you or anyone. The app shows the 12 words once and asks you to confirm you saved them before the first deposit.
What does the relayer learn?
The address and the amount you withdraw to. Not which deposit it came from: the proof hides that from the relayer too.
How private is it today?
As private as the number of deposits around yours. The privacy meter in the app shows that number for each withdrawal. While the pool is small, wait, use round amounts and split across wallets.
Who can change the contracts?
Nobody: there is no upgrade path. The owner can set fees within hard caps of 1% in and 5% out, and stop new deposits. Withdrawals and ragequits keep working either way.