SEND WITHOUT PUBLISHING
Transfers settle through a shielded pool. The public ledger records that a transaction happened, not how much moved or who received it.
One pool. One fee.
One public edge.
Fee, once, on exit
Taken out of the withdrawal. Shield and transfers inside the pool are free.
Public-boundary unit
Every amount that crosses the public edge snaps to US$ 100, so the amount is not an identifier.
Trusted setup
Noir and Barretenberg UltraHonk. No ceremony to trust, and none to re-audit.
Pool, one asset
One immutable contract on Polygon. A fix is a new pool, never a patch to a live one.
A testnet pool on Polygon Amoy.
Mainnet is not open.
One immutable pool, one asset, one relayer we run. The client proves in the browser. The relayer pays gas.
| SURFACE | WHERE | NETWORK | WHAT IT IS | OPEN |
|---|---|---|---|---|
| Client Browser wallet, in-page prove | testnet.send.arcanom.org | Amoy | Holds the seed in the tab. Never asks for an EOA. | Open |
| Pool ArcanomPool, immutable | 0x1fC5…a09d | Amoy | One asset. Notes from earlier pools cannot move here. | Explorer |
| Relayer Pays gas for transact | testnet.arcanom.org | Amoy | One process we run. It never holds the spending key. | Health |
Self-custody
You hold the key the whole time. The pool never does. ARCANOM never holds principal.
Hidden inside, public on exit
Inside the pool the ledger shows no amount and no counterparty. A withdrawal publishes both, because the money is leaving.
Provenance when you choose
A receipt discloses one note. A statement bundles receipts for a period. The spending key does not change hands.
Confidentiality, not anonymity.
You can still prove a payment.
The explorer must not reveal how much moved or between whom. The owner must still be able to prove where the funds came from, to a party they choose.
Shield, send, withdraw
The proof is built in the browser and verified by the contract. Nothing about the note reaches the chain in the clear.
US$ 100 public boundary
A deposit of 743,219.55 followed by a withdrawal of 743,219.55 is a perfect link. The unit snaps every public-edge amount so the amount itself is not an identifier.
Receipts you can show
The owner proves a payment to a party they choose. The spending key never leaves the device. The verifier recomputes and matches the chain.
The proof is built
in your browser
The contract verifies it. The relayer pays gas and never holds the key. There is no trusted setup.
Wallet A, the pool,
then wallet B.
The observer sees the deposit and the withdrawal. Everything between them is opaque. This is not a DEX, not a money market, and not a mixer that fronts capital.
Shield
Deposit into the pool at the US$ 100 unit. Free. The chain records the deposit, not who you will pay later.
Transfer inside
Free, and nothing about it is public: no amount, no sender, no recipient. Notes are backed 1:1 by the deposit that created them.
Withdraw
Leaves the pool to a public address. The amount and the recipient are on chain. 0.50% is taken out of the amount. The relayer checks the address against the OFAC SDN list before carrying the exit. That check is advisory: the relayer refuses, the contract does not enforce it.
The testnet is open.
Mainnet is not.
Proofs run in your browser. Keys stay in the tab. This is a testnet. Tell us what broke.