Private payments
that leave no trail

Shield, send, swap and bridge across chains with zero-knowledge proofs. No fixed denominations, no waiting periods, no custody.

Base
Robinhood Chain
Arbitrum
BNB Chain
Solanabridge only
Ethereumbridge only
Shield queuedconfirming…confirmed
1.000 ETH joined the Base pool as an encrypted note.
Prove queuedbuilding groth16…1.4 s
Your browser builds the proof. Keys never leave it.
Relay queuedsubmitting…gas paid
The relayer submits the transaction, so your wallet never touches it.
Deliver queuedsettling…settled
The recipient receives plain ETH. Nothing on-chain links the two.

Send privately

Private balance · 1.284 ETH on Base
0x9f3c…41e7
0.25 ETH
0.00015 ETH · paid from the pool
Send privatelySending privately…Sent · nothing to trace
Shield queuedconfirming…confirmed
1.000 ETH joined the Robinhood Chain pool as an encrypted note.
Prove queuedbuilding groth16…1.6 s
Your browser proves the note and pays a one-time burner. Your wallet is never involved.
Intent queuedquoting 1Click…deposit funded
NEAR Intents returns a one-off deposit address. The burner pays it; the origin chain never sees Solana.
Deliver queuedsolvers settling…delivered
USDC lands in the Solana wallet. Neither chain can see the other side.

Bridge privately

From Robinhood Chain · private ETH
Solana · USDC
7Gx4…kQ2m
≈ 2,259.40 USDC · NEAR Intents quote
Bridge privatelyBridging via NEAR Intents…Delivered on Solana · no trail
Approve queuedsigning…signed
One wallet signature authorises the deposit. Nothing else ever leaves your wallet.
Encrypt queuedbuilding note…note built
Amount, owner and blinding are sealed into a note only your key can open.
Commit queuedadding to tree…leaf 4 821
The commitment joins the Merkle tree. The chain sees a hash, never an amount.
Confirm queuedconfirming…confirmed
Your private balance updates. Any amount, withdrawable whenever you want.

Shield privately

Robinhood Chain · wallet 2.418 ETH
ETH · Robinhood Chain
1.000 ETH
0.0003 ETH · relayer
Shield privatelyShielding…Shielded · +1.000 ETH private
Merkle treenew leaf → root · 4 levels
Prove queuedbuilding groth16…1.4 s
Your browser proves you own a note worth 0.500 ETH. No address is revealed.
Burner queuedfunding…funded
A one-time burner receives the ETH. It has never transacted before.
Route queuedUniswap V3…1,134.20 USDG
The burner swaps on Uniswap V3 at the public price. 1% slippage cap.
Re-shield queuedre-shielding…note updated
The USDG goes straight back into the pool as a fresh note.

Swap privately

Private balance · 1.284 ETH on Robinhood Chain
0.500 ETH
≈ 1,134.20 USDG
2,268.40 USDG / ETH · 1% slippage
Swap privatelySwapping…Re-shielded · nothing links the trade
QuoteUniswap V3 · refreshes every 5 s
2,268.40USDG / ETH⇄
Derive queuedderiving…128 burners
Every burner key you ever used is re-derived from your signature. No backup needed.
Scan queuedchecking chains…4 chains
Each burner is checked on every pool chain for stranded funds.
Sweep queuedsweeping…0.25 ETH swept
Stranded funds are swept back into your private balance.
Intents queuedverifying…3 verified
Every bridge intent in your encrypted registry is re-checked with 1Click.

Recover

Scanning 4 chains · 3 intents in registry
0.25 ETH stranded
empty
delivered
RecoverScanning…Swept to private balance
Scanning from signatureburners derived · 4 chains · intent registry
0 / 128burners checked
1 stranded burner found · 3 intents verified
Live · Private bridge
Run complete

Introducing Blackpool

Every step of a payment,
none of the exposure

How people use Blackpool

Principle

“No fixed denominations, no mixer queues, no waiting periods. Any amount, whenever you want it back.”

Pool design2-in / 2-out shielded notes with change
Principle

“Your signature derives everything. No private key or signature is ever sent to a server.”

Non-custodialProof inputs and burner keys stay in your browser
Principle

“The relayer pays the gas, so the paying wallet is never yours.”

Relayer-built transactionsFlat fee taken from the note itself
Principle

“Bridges should not know who is on the other side. Intents keep the recipient off the origin chain.”

NEAR Intents routingOne-off solver deposit address per transfer
Principle

“If a step fails, the money is still yours. Every burner and bridge is recoverable from any device.”

Deterministic recoveryBurner + intent registry, encrypted client-side

Move value privately.
Start with one signature.

Connect a wallet, sign once, and your private account exists on every supported chain.

Launch app