Your wallet never shows up
A transaction needs someone to pay its fee, and whoever pays is on the record. The relayer submits shielded transactions and pays their network fees, so the wallet you use day to day never appears on them.
It can't cheat
Every shielded proof commits to a hash of its external data: the recipient, the relayer, the fee and the encrypted outputs. The program recomputes that hash on-chain and rejects anything that differs.
extDataHash = SHA-256(recipient ‖ relayer ‖ fee ‖ outputs) bound inside the proof
- It cannot change where a payment goes.
- It cannot take a cent more than the fee you saw.
- It cannot spend your notes: it never has your keys.
What else it does
- Stages proofs into accounts so every action fits a single small transaction in any wallet, then closes them again.
- Runs the hidden-amount bridge: it holds the key to the pool’s confidential balance, stages hidden deposits and pays hidden withdrawals, checking every one independently first.
- Keeps the pool balanced, moving round sums between the pool’s public and confidential sides so both kinds of withdrawal are always ready.
It keeps no request logs.