Skip to main content
This page follows one private transaction from start to finish, then shows how it is de-anonymized when that is needed and how the result is kept on Palliora. It names each part, says what the public can see at each step, and links to the page that goes deeper.
Nine steps across seven lanes in three territories. Your device builds and proves a private transaction. In the EVM network, a relayer or bundler submits it and the pool contract checks and records it. Later, only if the transaction must be de-anonymized, the revoker makes a public request in the request record. In the Palliora DeFi guardians and revoker network, each Decom guardian checks the request and sends a partial decryption directly, and a failed check rejects the request. The revoker combines a threshold of partials with its own key and reads the decrypted transaction, then seals a report to the reader's key, its own by default, and publishes it. In Palliora Core, Data Availability keeps the encrypted report. Later, the revoker, or a third party the revoker grants access to, reads it with an access grant. The public sees nullifiers, new commitments, encrypted memos, the fee and the submitter. Sender, recipient, token and amount stay hidden.Nine steps across seven lanes in three territories. Your device builds and proves a private transaction. In the EVM network, a relayer or bundler submits it and the pool contract checks and records it. Later, only if the transaction must be de-anonymized, the revoker makes a public request in the request record. In the Palliora DeFi guardians and revoker network, each Decom guardian checks the request and sends a partial decryption directly, and a failed check rejects the request. The revoker combines a threshold of partials with its own key and reads the decrypted transaction, then seals a report to the reader's key, its own by default, and publishes it. In Palliora Core, Data Availability keeps the encrypted report. Later, the revoker, or a third party the revoker grants access to, reads it with an access grant. The public sees nullifiers, new commitments, encrypted memos, the fee and the submitter. Sender, recipient, token and amount stay hidden.

​
The parts

A Decom guardian is a node that holds a share of the disclosure key. It is not a Palliora Guardian. Palliora Guardians have a different job: they protect the stored report. See Accountable privacy and disclosure and Palliora integration.

​
Life of a private transaction

  1. Create and register your account. Your wallet signs a fixed message. The app turns the signature into your keys. You then register, which links your public address to your shielded address so others can send to you. See Shielded accounts.
  2. Deposit. Tokens move from your wallet into the pool. A proof creates notes worth that amount. You pay gas for this step from your wallet, so it is public.
  3. Settle. New notes join the commitment tree after the next tree update. A tree update is a proof that anyone can submit, and the app does it for you. Until then the balance shows as pending. See Notes and commitments.
  4. Send, swap or withdraw. You spend notes. The proof shows the notes exist, you own them, the value adds up, and the new notes are correct. The transaction reveals a nullifier for each spent note and a commitment for each new one, and nothing else about them. A relayer submits it. See Shielded transactions and Relaying and gas.
  5. Call another protocol, if you want. For a swap, a loan or a stake, the pool sends the tokens to an adaptor, the adaptor calls the other protocol, and the result comes back to you as new notes. See Adaptors.
  6. Disclose, only when needed. Every transaction includes an encrypted seed. A revoker and a threshold of Decom guardians can de-anonymize it together. No one of them can do it alone. The revoker then keeps what it de-anonymized on Palliora, as an encrypted report. The revoker, or any third party the revoker grants access to, can open it. See Palliora integration.

​
What the public sees

Privacy is as strong as the number of other people using the pool. Read the Privacy model for what this means in practice.

​
Where to go next