Opaque shields xStocks on Solana. The public sees nothing. You, whoever you choose, and a split-key auditor see everything.
A broker shows your account to you and to a regulator. A ledger shows it to anyone who learns one address: a competitor, a copy-trading bot, a stranger.
Hold
Deposit stock tokens and they become notes in one shared pool. Send, split and merge them under zero-knowledge proofs. The chain records that something happened, and nothing about what.
Trade
A midpoint dark pool. Orders come out of notes, stay sealed until the batch closes, then cross at the open market's mid. Settlement burns and mints notes, so no token moves.
Prove
State one fact about your holdings without opening them: more than this much, held since that date, none of that ticker.
Deposits and withdrawals are public, amounts included. Privacy is what happens between them, and it grows with everyone else in the pool.
| Deposits and withdrawals | Your balance | Transfers inside | Who is behind a note | |
|---|---|---|---|---|
| Anyone reading the chain | ||||
| Opaque's server and relayerIt only ever holds public data. | ||||
| One auditor, aloneA lone share decrypts to noise. | ||||
| Someone you paidThe one note you sent them. | ||||
| You | ||||
| Both auditors, togetherTag by tag, never the whole key. |
visible one note only hidden
Inside every proof, the transaction seals its own contents to an auditor key. If the seal is wrong, the proof does not verify, so nothing unsealed can enter the pool.
The key is split between two holders who never pool their secrets. Each releases one partial per transaction, and a partial opens that transaction only. Nobody, at any point, holds the whole key.
An unauditable pool on a regulated securities chain gets switched off. This one is built to stay on. It gives you the privacy a brokerage account always had, and no more.
To prove a transaction in your browser. Your keys never leave it.
The rent and fees of a shielded transaction on Solana. Transfers and withdrawals are sent by the relayer.
On Cross, around the clock. Sealed orders meet at the market midpoint: no spread, no book, nothing to front-run.
In one tree shared by every asset and every account, so every transaction hides among all of them.