Watch a real epoch of private payments prove itself in under 10 seconds.
A private payments system on Solana. 1000 transactions per epoch, the final proof verified on-chain.
3 consecutive epochs, 1000 transactions each · all verified.
Prove 1000 transactions live: every epoch under 10 seconds.
Kick off a real run on the prover: three consecutive 1000-tx epochs, pipelined, each settling sub-10s and verified on Solana devnet.
Run a real 1000-tx throughput proof, right now.
Every epoch's proof, verified on Solana.
The console settles each proven epoch into a Solana program that checks the BN254 pairing on-chain.
Each settled epoch publishes its recursive proof to the Solana program, which verifies the BN254 pairing on-chain before accepting the new state root.
Yes, and you can check it yourself.
Recursive STARK aggregation
Each epoch is a single STARK; a second STARK verifies the first, collapsing a thousand transactions into one fixed-size proof.
Self-contained proving
The whole pipeline proves itself end to end, with no distributed prover market and no trusted coordinator.
Checkable on Solana
The final 256-byte Groth16 proof is verified on-chain by the native alt_bn128 pairing, so anyone can confirm it.
Private to its owner
Your balance is private to you. The chain holds only a commitment plus a ZK proof the transition is valid.