Why Confi.cash exists
Public blockchains make transaction amounts, wallet relationships, and trading behavior easy to inspect. That transparency supports verification, but it can also expose treasury activity, payment flows, portfolio rebalancing, and trading strategy. Stellar AMMs provide liquidity and price execution. They do not create a shielded balance layer or hide each user’s swap amount. Confi.cash adds that privacy-preserving execution layer without creating a new bridge or taking custody of your spend keys.What you can do
Hold and transfer shielded assets
Create a shielded balance and send notes to another
cb1... address without publishing the transfer amount on-chain.Swap through Stellar AMMs
Batch-swap through Soroswap, Aquarius, and other supported AMMs while only the aggregate net flow reaches public liquidity.
Withdraw to Stellar
Move a standard amount from the shielded pool to a public Stellar wallet when you need on-chain funds.
Fund a compliant payout
Use a shielded balance to fund an anchor payout flow without exposing your complete prior wallet and swap history to the public chain.
How it works
Your browser creates the proofs and secrets needed to control your shielded notes. Soroban contracts verify note ownership, value conservation, nullifier freshness, valid batch clearing, and withdrawals without receiving your spend key. For a swap, Confi.cash groups eligible shielded orders and clears them at a shared batch price. Only the aggregate net flow is routed through an adapter to the selected public AMM. When you choose Others in the app, that external liquidity can come from Soroswap, Aquarius, or another supported Stellar AMM. Your proceeds return as a fresh shielded note.Others is a liquidity-route choice, not a separate privacy mode. The same batch privacy boundaries apply to every supported external AMM route.
Compliant payouts
The same shielded balance can fund an individual payout through a regulated Stellar anchor. The anchor performs the identity and destination checks required for its payout rail, then delivers fiat, mobile money, or another supported form of value. The public chain sees a withdrawal from the shielded pool to a destination assigned for that payout session. It does not receive a direct record of your internal transfers or individual swap history. The anchor still sees your identity, payout amount, destination, and session details, and public timing or amount correlation may reveal additional links. The current Confi.cash offramp is a testnet simulation. It does not deliver real fiat.The privacy boundary
Confi.cash is designed to hide shielded balances, internal transfer amounts, and individual batched swap legs from public chain observers. It does not make activity invisible.- Deposits and withdrawals remain public, including their asset and amount.
- The chain records batch timing, clearing price, and aggregate net flow.
- A solo swap makes the individual order equal to the public batch net.
- The operator can observe network metadata such as IP address and timing.
- Confi.cash operates the threshold committee and can reconstruct individual swap amounts with quorum-level administrative access.
Explore the protocol
How Confi.cash works
Follow value through shielded notes, browser proofs, batch settlement, and withdrawal.
Privacy model
See what chain observers, AMMs, anchors, recipients, and the operator can learn.
Create a shielded balance
Connect a testnet wallet, derive your shielded identity, and deposit a supported asset.