Private DeFi.
Provable AI.
The unified protocol for encrypted finance and zero-knowledge ML verification on Starknet. Privacy pools, shielded swaps, dark pool trading, and GPU-accelerated ZKML — all verified on-chain.
Complete Privacy Stack
Six privacy primitives working together to shield your identity, amounts, and transaction history — all verified on-chain with zero-knowledge proofs.
Four Steps to Privacy
From wallet connection to on-chain verification — your transaction stays private at every step.
Connect
Connect your Starknet wallet. Register your ElGamal public key for encrypted balances.
Choose Privacy
Pick your privacy level — pool deposits, confidential transfers, stealth payments, or dark pool orders.
Proofs Generated
Zero-knowledge proofs are generated automatically by the SDK — Schnorr, Chaum-Pedersen, range proofs, and more.
Verified On-Chain
Proofs are verified on Starknet. No trusted intermediary, no centralized server — pure math.
Bitcoin-Grade
Privacy Model
The VM31 track uses a UTXO model with fixed denominations — the same privacy model that makes Bitcoin's CoinJoin effective, but with zero-knowledge proofs and an 800x faster hash function.
Fixed Denominations
Like physical cash — every UTXO of the same value is indistinguishable. Observers cannot infer your balance from withdrawal patterns.
Poseidon2-M31
Mersenne-31 field enables 800x faster hash computations than felt252. Single-cycle modular reduction on modern CPUs.
Batch Proving
Relayer batches up to 1,000 transactions into a single GKR proof. ~2 seconds on GPU. Cost: ~0.0003 STRK per transaction.
Cross-Track Bridge
Move between Track 2 (UTXO) and Track 1 (encrypted balances) seamlessly. Maximum privacy when you need it, flexibility when you want it.
On-Chain ML Verification
Verify neural network inference 100% on-chain using the GKR interactive proof protocol. No trusted setup, no centralized verifier — prove that any AI model produced a specific output.
Why GKR Protocol?
Traditional SNARKs and STARKs require FRI polynomial commitments, which depend on felt252_dict — a libfunc blocked on Starknet. GKR uses only field arithmetic and Poseidon hashing, making it natively deployable.
Verified Models
| Model | Prove Time | Status |
|---|---|---|
Single MatMul | <100ms | First On-Chain |
MLP Network | ~500ms | Multi-Layer |
LayerNorm Chain | ~1s | Normalization |
Residual Network | ~2s | DAG + Deferred |
Qwen3-14B 18-TX streaming | 37.64s | Streaming GKR |
All models verified on Starknet mainnet via SumcheckVerifier contract.
Security by Design
Every cryptographic choice is deliberate. No shortcuts, no trusted parties, no compromises.
No Trusted Setup
Transparent Fiat-Shamir hashing via Poseidon. No ceremony, no MPC, no toxic waste. Anyone can verify the math.
96-bit Security
QM31 extension field provides 124-bit computational security. Proof-of-work commitment adds 26-bit grinding resistance.
48-Hour Timelock
All upgradeable contracts have 48-hour timelocks. Users always have time to review changes and exit safely.
Perfect Hiding
Pedersen commitments are information-theoretically hiding. Even with infinite compute, committed values cannot be extracted.
Unlinkable Nullifiers
Domain-separated Poseidon hashing ensures nullifiers cannot be linked back to deposits. Your withdrawal is anonymous.
Open Source
All contracts, provers, and SDK code are open source and auditable. Verify everything yourself — we encourage it.
Stake. Prove.
Earn.
Back the GPU prover network by staking SAGE tokens. Provers generate zero-knowledge proofs for privacy transactions and ZKML verification. Earn up to 45% APY with datacenter-grade hardware.
| Tier | Min Stake | APY |
|---|---|---|
| Consumer | 1K SAGE | 15% |
| Professional | 10K SAGE | 22.5% |
| DataCenter | 50K SAGE | 30% |
| H100 | 200K SAGE | 45% |
Slashing applies for invalid proofs or proving timeouts.
Build with Obelysk
Full TypeScript SDK with 10 sub-clients. All proofs generated automatically — just call the API.
10 Sub-Clients
Each privacy feature has its own client with typed methods, automatic proof generation, and error handling.
Ready to go private?
14 smart contracts live on Starknet mainnet. Full TypeScript SDK. Open source. Start building today.