01
Shield
One Phantom approval moves SOL, USDC or any SPL token into the shared pool.
Privacy Pools for Solana
Private by default.
Clean by proof.
Shield your SOL and tokens once. Send, swap and earn privately on Solana, and prove your funds are clean without revealing who you are.
Pool · SOLIllustration
your note
01 · The problem
Your wallet is a public diary.
Every payment, trade and balance on Solana is visible forever. Anyone can map who pays you, what you hold and when you sell.
Old mixers fixed that by hiding everyone together, including hackers. That is why exchanges flag mixer withdrawals and honest users get caught in the net.
Canonex keeps the privacy and drops the baggage.
02 · How it works
Four steps. No trail.
One signature in Phantom is the last public trace of you. Everything after happens inside the pool.
02
Screened
The association set checks where the deposit came from. Exploits, rugs and sanctioned sources stay out.
03
Private
Send, swap and hold inside the pool. Balances become encrypted notes only your browser can open.
04
Exit clean
Withdraw to a fresh address with a zero-knowledge proof of clean origin. Nobody learns which deposit was yours.
03 · The clean set
Privacy that exchanges don't flag.
Canonex is built on the Privacy Pools model from the 2023 paper by Buterin, Illum, Nadler, Schär and Soleimani. An association set provider keeps a set of clean deposits. When you withdraw, you prove membership in that set, not your identity.
A flagged deposit is never frozen. It can always leave, but only back to the address it came from.
| Feature | Public wallet | Old mixers | Canonex |
|---|---|---|---|
| Hides sender and amounts | No | Yes | Yes |
| Keeps exploit funds out | n/a | No | Yes |
| Proof of clean origin | No | No | Yes |
| Private swaps on Solana | No | No | Yes |
| KYC required | No | No | No |
04 · Protocol
Nobody holds your keys. Not even us.
Client
Keys never leave your browser
Notes are encrypted locally. Proofs are generated client-side in WebAssembly.
Program
Solana checks every proof
Groth16 on BN254 via alt_bn128. Poseidon Merkle tree. One nullifier per note.
Association set
Screens, never holds
Publishes the clean-set root on-chain. It can leave a deposit out, but it cannot move or freeze funds.
Relayers
They pay. They see nothing
Fees are sponsored, so no wallet signs inside the pool. Relayers stake $CNX as a bond.
Viewing keys for your accountant onlyMainnet soon · devnet liveExternal audit after mainnet launch
06 · Roadmap
Mainnet right after the sale.
- Phase 01 · Done
Devnet live
Shield, association-set screening, private withdrawals and ragequit for SOL. Try it in the app.
- Phase 02 · Now
Token sale
Open until Oct 21. No hard cap. 100% of raised SOL goes to locked Meteora liquidity.
- Phase 03 · Soon
Mainnet
Launch pool goes live, mainnet program from a public trusted setup, app switches to mainnet with deposit caps.
- Phase 04
Audit and expand
External audit, caps lifted, USDC and SPL tokens, private swaps, staked relayers, governance.
Privacy without
the baggage.
Mainnet opens after the token sale. Until then, try the full product on devnet.