Live on Solana devnet
Pay anyone.
Leave no trail.
Shield SOL or USDC once. Every payment after comes from a shared pool, not from your wallet.
Every payment you make is public.
On Solana anyone can open your wallet and read who you paid, how much and when. Forever. One payment to a friend tells them your whole balance.
Your wallet 7xKp…9a1c
Public transaction history
7xKp…9a1c → 4Fq2…h8Ze
Rent
2h ago
12.5 SOL
7xKp…9a1c → Bv91…Lm3Q
Salary to a friend
1d ago
1,200 USDC
7xKp…9a1c → 9xQe…Tt7w
Donation
3d ago
0.5 SOL
7xKp…9a1c → HdP4…uY2c
Invoice
6d ago
340 USDC
How SHADOW breaks the link.
Shield
Deposit from your wallet. The funds become private notes: encrypted records only your account can open. This is the one public step.
Prove
To spend, your browser builds a zero-knowledge proof. It shows you own enough notes, without revealing which ones or where they came from.
Pay out
A relayer sends the payment from the pool, together with everyone else in the next wave. On chain, the sender is the pool.
See it work. Eighty seconds.
Connect, shield, send, and watch a payout leave with the wave. Every screen is the real app.
3
LINKS
Three things link a payment to you. SHADOW cuts all three.
- AddressA fresh wallet that never touched yours
- AmountA round amount hundreds of people send
- TimeIt leaves with everyone in the next wave
Your keys, your proofs, your funds.
One signature. No new seed phrase.
Your private account is derived from a single signature of the wallet you already use. Same wallet, same account, on any device.
Proofs made on your device
Your keys never leave the browser. Only a 256-byte proof does.
Screened deposits
Every depositor is checked against the US Treasury sanctions list before funds can enter.
0.25%
On payouts, plus a small relayer fee. Shielding is free.
Next withdrawal wave
--:--
$SHADOW
The token, out in the open.
Everything below is read live from the mint on Solana, so you can check it yourself.
Supply
-
Launched with 1,000,000,000
Burned since launch
-
Read from the mint
Authorities
-
Questions
It is a shielded pool. Your funds stay yours: only your keys can spend your notes, and nobody, including the operator, can move them. Deposits are screened against sanctions lists.
The program only moves a note with a proof that your keys alone can produce, and the relayer cannot change who gets paid. During the beta the team still holds the key that can upgrade the program; it moves to a multisig before limits are raised, which is also why deposits are capped.
Any Solana wallet that can sign messages: Phantom, Solflare, Backpack. Your private account is derived from one signature, so wallets whose signatures change every time (some MPC wallets) are refused rather than risk a lost account.
As private as the crowd you hide in. The more people use the pool, the harder a payment is to match. Waves, round amounts and fresh addresses make the most of it.