Public assets. Private ownership. Verifiable backing.
STSH lets you move tokens from the public ledger into a private balance you control. Inside the shielded pool, zero-knowledge proofs confirm that every transaction follows the protocol rules — without publishing who paid whom or exposing the private transaction trail.
The basic flow
Three steps from public to private and back again.
Move STSH into the private pool.
The transfer into protocol escrow is recorded publicly on-chain. Your private note is not.
Your wallet creates the note privately and sends only a cryptographic fingerprint to the pool. The encrypted note data is linked to your Internet Identity, allowing you to recover your private balance from another approved device without exposing the note itself.
What stays public
- The deposit occurred
- The amount deposited
- The assets held in escrow
What stays private
- Your private ownership secret
- How you later use the private balance
- Which private transaction belongs to you
Transfer without exposing the trail.
Inside the pool, your balance is represented by private notes controlled through your wallet. To make a transaction, the wallet generates a zero-knowledge proof. The proof confirms:
- You control valid funds
- The funds have not already been spent
- The transaction balances correctly
The protocol checks the rules. It does not need to see your private activity.
You remain in control
STSH does not hold a password that can spend your private balance. Your wallet derives the private access needed to use your notes, anchored to your Internet Identity and the Internet Computer's threshold-key infrastructure.
Return assets to the public ledger.
When you withdraw, your wallet proves that it controls valid private funds. The protocol verifies the proof, confirms the same funds have not already been spent, and releases the corresponding STSH from escrow to the selected public wallet. The withdrawal is visible on the public ledger, but the proof does not disclose which private note funded it.
Fixed amount
Withdraw using a standard amount shared by other users. This makes the transaction less distinctive within the pool.
Custom amount
Withdraw a specific amount. Your private ownership and internal transaction trail remain hidden, but the amount withdrawn becomes public.
Anonymity set
Why do deposits use standard amounts?
Privacy works better when transactions look alike.
A unique deposit amount can be recognisable later, regardless of how strong the underlying cryptography is. STSH uses standard note denominations so that many users' deposits share the same visible shape.
Larger balances can be assembled from several private notes, while the wallet presents them as one simple balance.
Which denominations are supported?
Initial supported denominations will be displayed in the wallet and may expand through future protocol upgrades.
Privacy boundaries
What STSH hides — and what stays public.
Private inside the pool
- Ownership of private notes
- Private transfers between users
- Which note funds a withdrawal
- The internal transaction trail
- Fixed-denomination transferred amounts
Public and auditable
- Total token supply
- Assets deposited into escrow
- Assets withdrawn from escrow
- Public wallet balances
- Custom withdrawal amounts
- Whether the pool remains fully backed
The point
STSH protects transaction activity without hiding whether the protocol is solvent.
Selective disclosure
Planned — not yet availablePrivate does not have to mean unverifiable.
A user or treasury may need to demonstrate ownership, transaction history or compliance information to a chosen accountant, auditor or authorised party. STSH is designed so that an owner can authorise selected private information to be viewed, without publishing the same information to the entire network.
Owner approved
Access is granted by the user or organisation controlling the private account.
Read only
Viewing authority does not provide spending authority.
Selective
Only the required account, transaction or reporting information is disclosed.
Ownership and recovery
Your balance belongs to you.
Private notes are controlled through your wallet, not by a central STSH account. Internet Identity and threshold-derived keys support secure access across approved devices without requiring a central service to store your private spending key.
Recover access without giving up custody.
Publicly verifiable
Privacy does not hide the reserves.
Every token represented inside the shielded pool remains backed by assets held in public escrow. An independent on-chain monitoring canister checks that private obligations never exceed the available backing, allowing anyone to verify the pool's solvency without seeing individual private balances.
Want to inspect the machinery?
Explore the Technical page.
The underlying circuit, commitments, nullifiers, proof verifier, canister architecture, trusted setup, reproducible builds and current security status.