Private sends
Pay any notrail1… address from your shielded balance. The chain sees a valid proof. It never sees who, whom or how much.
Live on Solana devnet
Money that keeps its own counsel.
Notrail is a zero-knowledge shielded pool for Solana. Shield SOL or tokens once, then pay anyone, get paid and withdraw without leaving a trail back to your wallet.
Groth16 on BN254Poseidon Merkle treeVerified on-chain
—
SOL shielded
—
Shielded transactions
—
Private transfers
Groth16
Proof system
How it works
Three moves. One public footprint.
i.
Shield
Deposit SOL or sUSDC from any wallet. Your browser makes an encrypted note and a proof, and the deposit is the last time your wallet appears.
ii.
Move privately
Send to any Notrail address. A 2-in/2-out join-split proof spends your notes and creates new ones for the recipient, and the relayer submits it.
iii.
Exit clean
Unshield to a fresh address whenever you like. The privacy check helps you avoid timing and amount links before you hit send.
Who sees what
Normal Solana is a glass house.
Every transfer you've ever made is one explorer search away. Notrail puts walls up, and gives you the only key.
| Plain Solana | Notrail | |
|---|---|---|
| Your balance | Public | Hidden |
| Who you paid | Public | Hidden |
| Who paid you | Public | Hidden |
| Amounts sent | Public | Hidden |
| Transaction history | Public | Only you + viewing key |
| Fee payer wallet | You | Relayer |
| Deposits & withdrawals | Public | Public |
Features
Privacy you can actually use.
Gasless by default
A relayer pays fees and submits for you, so your wallet never signs anything after the first deposit and never shows up again.
Payment links
Request money with a link. Payers can settle from their own shielded balance or straight from a public wallet into your private one.
Privacy check
Before every withdrawal Notrail scores the common ways people get de-anonymised, like timing, matching amounts and reused wallets, and tells you how to fix them.
Viewing keys & signed reports
Give an auditor a read-only key, or export a CSV your wallet signs. You stay compliant without becoming public.
No indexer, no backend trust
Every encrypted note lives on-chain, so your browser syncs straight from Solana. If our servers go down, your money is still yours.
Under the hood
Proved in your browser. Verified by Solana.
Each transaction carries a Groth16 proof that the notes you spend exist in the pool, belong to you, haven't been spent, and balance exactly. The Notrail program checks it with Solana's native BN254 syscalls in about 180k compute units.
Read the protocol docs- Circuit
- 2-in / 2-out join-split · 26,784 constraints
- Proof
- Groth16 · BN254 · 256 bytes
- Hash
- Poseidon (circomlib-compatible syscall)
- Tree
- Depth 20 · 1,048,576 notes · 64-root history
- Double-spend
- One nullifier PDA per note
- Note encryption
- x25519 + XSalsa20-Poly1305 · 87 bytes
- Binding
- Recipient, relayer & fee hashed into the proof
- Setup
- PSE Perpetual Powers of Tau + Notrail phase-2
Questions
Fair questions.
Is this a mixer?
No. Notrail is a shielded pool, like Zcash's design on Solana. Balances become encrypted notes that only your keys can open, and every spend is checked by a zero-knowledge proof on-chain. Your funds aren't pooled with someone's custody. Only you can spend your notes.
What is public?
Deposits (shielding) and withdrawals (unshielding) touch public wallets, so their amounts and addresses are visible. Everything in between is hidden: private transfers, balances, who paid whom, and your history.
Where are my keys?
Your spending and viewing keys come from a signature your wallet makes over a fixed message. They're computed in your browser and kept in memory only. The same wallet always restores the same account, on any device.
Is it live on mainnet?
Not yet. Notrail runs on Solana devnet with test SOL and a test sUSDC token while the circuits and program go through review. Don't send real funds.
What does it cost?
Shielding costs normal Solana fees plus about 0.005 SOL of rent for the on-chain note records. Private sends and withdrawals pay a flat relayer fee (0.005 SOL or 0.5 sUSDC) out of your shielded balance.