01
Shield
One Phantom approval moves SOL, USDC or any SPL token into the shared pool.
Privacy Pools for Solana
Private by default.
Clean by proof.
Shield your SOL and tokens once. Send, swap and earn privately on Solana, and prove your funds are clean without revealing who you are.
1approval to enter
0keys on our servers
100%proofs verified on-chain
Pool · SOLIllustration
your note
01 · The problem
Your wallet is a public diary.
Every payment, trade and balance on Solana is visible forever. Anyone can map who pays you, what you hold and when you sell.
Old mixers fixed that by hiding everyone together, including hackers. That is why exchanges flag mixer withdrawals and honest users get caught in the net.
Canonex keeps the privacy and drops the baggage.
02 · How it works
Four steps. No trail.
One signature in Phantom is the last public trace of you. Everything after happens inside the pool.
02
Screened
The association set checks where the deposit came from. Exploits, rugs and sanctioned sources stay out.
03
Private
Send, swap and hold inside the pool. Balances become encrypted notes only your browser can open.
04
Exit clean
Withdraw to a fresh address with a zero-knowledge proof of clean origin. Nobody learns which deposit was yours.
03 · The clean set
Privacy that exchanges don't flag.
Canonex is built on the Privacy Pools model from the 2023 paper by Buterin, Illum, Nadler, Schär and Soleimani. An association set provider keeps a set of clean deposits. When you withdraw, you prove membership in that set, not your identity.
A flagged deposit is never frozen. It can always leave, but only back to the address it came from.
| Feature | Public wallet | Old mixers | Canonex |
|---|---|---|---|
| Hides sender and amounts | No | Yes | Yes |
| Keeps exploit funds out | n/a | No | Yes |
| Proof of clean origin | No | No | Yes |
| Private swaps on Solana | No | No | Yes |
| KYC required | No | No | No |
04 · Protocol
Nobody holds your keys. Not even us.
Client
Keys never leave your browser
Notes are encrypted locally. Proofs are generated client-side in WebAssembly.
Program
Solana checks every proof
Groth16 on BN254 via alt_bn128. Poseidon Merkle tree. One nullifier per note.
Association set
Screens, never holds
Publishes the clean-set root on-chain. It can leave a deposit out, but it cannot move or freeze funds.
Relayers
They pay. They see nothing
Fees are sponsored, so no wallet signs inside the pool. Relayers stake $CNX as a bond.
Viewing keys for your accountant onlySwaps routed through JupiterAudit: [AUDITOR], [DATE]
05 · Token
$CNX
Fair launch, no presale. Protocol fees flow back to the token.
Contract
[CONTRACT ADDRESS]Buyback
Fees burn supply
A share of every withdrawal and swap fee buys back and burns $CNX.
Discount
Lower fees for holders
Hold above the threshold and pay less on every private action.
Relayer bond
Stake to relay
Relayers stake $CNX to serve the pool. Misbehave and the bond is slashed.
Governance
Vote on the clean set
Holders decide which risk lists and rules shape the association set.
06 · Roadmap
Mainnet after tests and audit.
- Phase 01 · Now
Launch
Site, X, $CNX fair launch, community.
- Phase 02
Devnet MVP
SOL deposits and withdrawals, first association set, proofs in the browser.
- Phase 03
Mainnet
Audited program, USDC and SPL tokens, staked relayers, fees and buyback.
- Phase 04
Expand
Private swaps via Jupiter, browser extension, governance of the clean set.
Privacy without
the baggage.
Connect Phantom, shield once, and move on Solana without a trail back to your wallet.