Core Concepts
Shielded transfers
2-in / 3-out shielded transfers verified by the BFT cohort.
Transaction shape
Shielded transfers are 2-in / 3-out: up to two input notes are spent and up to three output notes are created. The third output covers fees and change without leaking which note is which.
Flow
- Wallet selects notes, builds the circuit witness and generates a Groth16 proof locally.
- Proof and encrypted output notes are gossiped to validators.
- Validators verify, vote, and BFT-finalise. Leader submits a state-root update on Base.
- Recipient wallets scan encrypted notes and decrypt any addressed to them.
Note encryption
Output notes are sealed with AES-256-GCM under a per-note key derived from the recipient's viewing key. Delivery is on-chain but recipient-anonymous.