// WITHDRAW

[REDEEM YOUR
DEPOSIT]

Paste your note. A zero-knowledge proof is generated entirely in your browser — no one can link this withdrawal to your original deposit.

WITHDRAW

// redeem 0.1 ETH to any address

Your secret never leaves your browser. The zk proof only reveals that you own some commitment in the tree — not which one.

DEPOSIT NOTE

RECIPIENT ADDRESS

◈Proof generated locally. Your secret never touches a server. Nonce = recipient address (front-running protection).

// security properties

◈

PRIVACY

The zk proof proves membership in the Merkle tree without revealing which commitment is yours.

⬡

DOUBLE-SPEND

The nullifier is marked used on-chain after withdrawal. The same note cannot be used twice.

⚡

FRONT-RUNNING

The nonce equals the recipient address and is baked into the proof. Attackers cannot redirect funds.

UNLINKABLE

Deposit and withdrawal transactions share no on-chain data. There is no public connection between them.