Walk through it before it seals a single lamport.
An illustration of the three moves, with example figures: nothing to approve, nothing signed, nothing on-chain. The mechanism is real; the vault is not deployed.
| Asset | Qty | Value |
|---|---|---|
| AAPLx | 120 | $40,639.20 |
| TSLAx | 45 | $16,962.75 |
| NVDAx | 300 | $67,869.00 |
| USDC | 18,250 | $18,246.35 |
| Total | $143,717.30 |
| From | 7xK…92F | 7xK…92F |
| To | Vault PDA | Vault PDA |
| Amount | 1 SOL | 1 SOL |
| Note | kept in browser | not yet drawn |
| Link | you know it | — |
Left: what you see · Right: what everyone sees
> Your wallet, readable by anyone with the address.
Send
Send 0.1, 1 or 10 SOL to the program from whatever wallet you already use. Three sizes and no others, because an unusual amount is a name. This step is public: your address, the amount, and one fingerprint.
Hold the note
Before you send, your browser draws two random numbers and publishes only their fingerprint. That note is the only claim on the deposit — no account, no copy, no recovery. Every deposit that joins while you wait is another one yours could be.
Withdraw
Paste any address. A proof says you hold a note for one of the deposits, without saying which, and a relayer sends it. The destination needs no SOL, no history and no link to you.
Deposit sizes
0.1 · 1 · 10
SOL, and nothing in between. Fixed amounts make deposits look like each other.
Withdraw to
Any address
A relayer pays the fee, so the destination wallet needs nothing at all.
In the vault
Nothing
No program, no vault, no deposits. When there are, this figure is read from the chain.