Search

Search projects, tokens and protocols by name or address

Security

Privacy Pools v1 logo
Privacy Pools0xbow

About

A privacy pool system for any amount, where only centrally approved deposits can be withdrawn privately.


  • Total Value SecuredTVS
    $9.09 M0.36%

  • Trusted Setups

    Used in

    Privacy Pools v1 logo

    Verifiers

    1by

    Used in

    Privacy Pools v1 logo

    Verifiers

    1by

    Tech Stack

    zkVM
    BN254
    Snarkjs
  • Total Value SecuredTVS
    $9.09 M0.36%
  • About

    A privacy pool system for any amount, where only centrally approved deposits can be withdrawn privately.



    Total
    Canonically BridgedCanonically Bridged ValueCanonical
    Natively MintedNatively Minted TokensNative
    Externally BridgedExternally Bridged ValueExternal

    ETH & derivatives
    Stablecoins
    BTC & derivatives
    Other

    ASP revokes every fxUSD approval

    11 Mar 2026

    Approved fxUSD deposits leave the list for 13 days, with public ragequit as the only exit.

    Learn more

    ASP halts all private withdrawals

    11 Mar 2026

    The ASPAn Association Set Provider (ASP) is the compliance layer used in Privacy Pools. It maintains the set of approved deposits and updates the corresponding roots used by withdrawal proofs, allowing users to prove in zero knowledge that their withdrawal belongs to an approved set without revealing which deposit they are spending. posts a root no deposit belongs to, blocking every private withdrawal for two hours.

    Learn more

    Privacy Pools v1

    Snarkjs
    1. Phase 1 · Universal61contributions
    2. Phase 2 · Circuit-specific513–514contributions

      Ragequit: 513. Withdraw: 514.

    Detailed description

    Trusted setupGeneration of a piece of data that must then be used for some cryptographic protocol to run. Generating this data requires some secret information. The "trust" comes from the fact the secret must be destroyed after the ceremony, otherwise cryptographic properties of the protocol could be broken. Once the data is generated, and the secrets are forgotten, no further participation from the creators of the ceremony is required. There are two types of trusted setups for SNARKs: (i) trusted setup per circuit where it is generated from scratch for each circuit, (ii) trusted universal setup per proving system where it can be used for several circuits. for two Groth16A zk-SNARK proving system introduced by Groth in 2016 that proves arithmetic circuits and requires a separate trusted setup for each circuit. It allows extremely efficient proof verification. Privacy Pools circuits: the Ragequit circuitA program written for the purpose of being proven within a proving system. A circuit is a mathematical representation of the computation to be executed, arithmetic circuits and zkVM execution trace are examples of circuits. Circuits can be written in different languages, ranging from low-level to high-level. and the private Withdrawal circuit.

    This trusted setup ceremony uses the ppot_0080 files from the Perpetual Powers of Tau ceremony as Phase 1For Groth16 trusted setup, phase 1 represents circuit-independent part of the trusted setup (e.g. Perpetual Powers of Tau), which could be reused across different circuits. It generates a part of the secret cryptographic data required for Groth16 ZK protocol to work. If the outcome of phase 1 trusted setup ceremony is known, arbitrary proofs could be forged.. They contain 61 participant contributions and one public randomness beacon, for 62 transcript records. The contribution IDs are 0001–0058 and 0078–0080: contribution 0078 resumes from 0058 after a fork, so 0080 is an identifier rather than a count.

    Phase 2For Groth16 trusted setup, phase 2 represents circuit-dependent part of the trusted setup. It generates a part of the secret cryptographic data required for Groth16 ZK protocol to work. If the outcome of phase 2 trusted setup ceremony is known, arbitrary proofs could be forged. of the ceremony was publicly announced, open to anonymous and identified participants, and concluded in March 2025. It contains 514 contributions to the Withdraw circuit and 513 to the Ragequit circuit. The finalized zKeys were published for independent verification, and the ceremony code and UI were open-sourced.

    List of different onchain verifiers for this proving system. Unique ID distinguishes different deployments of the same verifier from different verifiers (e.g. different versions).

    Groth16: Snarkjs

    Circom / iden3 implementation of Groth16 proving system written in JS.

    Verification
    Used in
    Known deployments
    Privacy Pools verifiers v1.2.1
    by
    Privacy Pools v1 logo