Leave straight into Zodl.
Unshield to a unified u1… address. A one-purpose forwarder can only pay the swap solver; real shielded ZEC lands on Zcash in minutes.
Robinhood Chain · zero-knowledge · zcash inside
the chain remembers everything. you don't have to show it.
Every swap, every payment, every balance sits in a ledger any stranger can read — indexed, searchable, permanent. nullvisor gives your funds somewhere to disappear: provable to the contract, invisible to everyone else, and one step away from Zcash.
Next unshield wave
connecting…
--:--
ETH behind the visor
—
Shielded notes
—
Spent in the dark
—
Waves released
—
00 · the film
A short film about being watched.
01 · read by strangers
What they see. What you see.
The same private payment, from both sides of the visor. The explorer gets a relayer and a proof. You keep the rest.
block explorer
fromrelayer
to
amount
your balance
link to your depositnone
you, behind the visor
fromyou
tonvs1zqy9…m655
amount0.25 ETH
memo“rent, october”
proofbuilt in your tab · ~3 s
02 · three verbs
No witnesses.
shield
Sign once to unlock your shielded account, then deposit ETH or USDG. It becomes an encrypted note only your keys can open.
send
Pay any nvs1… address with an encrypted memo. A relayer posts the proof — your address never touches it.
unshield
Leave in waves: withdrawals gather and go out together, shuffled, so timing gives nothing away.
03 · the exit
ZCASH
robinhood chainzero-knowledgezcash shielded
exit
enter
Arrive from any Zcash wallet.
Pay a QR in ZEC and it arrives here as a private dollar note. A one-off claim key signs the shield, so nobody who sees it can redirect it.
keys
Zcash-grade viewing keys.
Spend key → nullifier key → address. Hand an auditor a viewing key that sees everything and spends nothing.
memos
512 bytes, sealed.
Every note carries a fixed-size encrypted memo — readable by one person, invisible to everyone else.
04 · trust nothing
Built so you don't have to trust us.
Privacy that depends on an operator behaving is a promise. These are properties of the code.
Keys stay in your tab.
Derived from a wallet signature, held in memory only. The server never sees them and cannot read your balance.
No upgrade switch.
The pool is not a proxy. Nobody can swap its logic; only a valid proof moves pooled funds.
Exits can't be frozen.
The guardian can only cap new deposits. Unshielding always works — even if this site disappears.
Turnstile in the open.
Notes are private, totals are not. In minus out equals the contract balance, per asset, for anyone to check.
Disappear.
Privacy isn't hiding. It's deciding who gets to look.