SOLANA 𝕏 @zsol_privacy
shielded pool · solana · zcash design

Shield it like Zcash.Spend it like Solana.

In 2016 Zcash answered a hard question: how do you verify a payment without seeing it? Notes, nullifiers and zero-knowledge proofs. ZSOL brings that design to Solana: a shielded pool for SOL and SPL tokens, proofs with no trusted setup, viewing keys for selective disclosure, and ZEC as the first asset to cross the bridge, shielded.

Sapling-stylenotes & nullifiers
Halo-styleno trusted setup
ZECfirst bridged asset
a paymentvisible
a balancevisible
a habitvisible
a counterpartyvisible
what the chain sees

Same wallet. Three readers.

The public explorer sees deposits and withdrawals at the edge of the pool, and engraved lines where your history should be. You see everything. Someone holding your viewing key sees only the slice you shared. Demo data below.

demo wallet

Shield. Send. Unshield.

A simulated wallet. Nothing here touches the chain, and no SOL or ZEC moves.

wallet · not connected (demo)
public balance
12.400 SOL
shielded balances
0.000 SOL 0.000 zZEC

Moves SOL from your public balance into the shielded pool.

zsol://demo — ready
› choose an action on the left
how it works

Three moves. No trust required.

01 / SHIELD

Into the pool

Deposit SOL or a supported SPL token. You get a private note that only your keys can read. The chain sees a deposit, then engraved lines.

02 / PROVE

Math, not exposure

Every private transfer carries a zero-knowledge proof: inputs equal outputs, nothing is spent twice. No trusted setup, the Halo way. Validators check the proof, never the amounts.

03 / UNSHIELD

Out, anywhere

Withdraw to any address. A relayer can pay the gas, so the new address has no fee trail back to your old one.

the zcash link

Built on the design that proved it works.

Zcash has run shielded transactions in production since 2016. ZSOL doesn't reinvent that; it ports the ideas to Solana and adds a bridge so ZEC can live here without losing its shade.

01 · NOTES & COMMITMENTS

Sealed envelopes

Your balance lives in notes, stored on-chain as commitments. Everyone sees the envelope exists; nobody sees what's inside or whose it is. Same model as Sapling and Orchard.

02 · NULLIFIERS

Spent, but unlinkable

Spending a note publishes a nullifier that can't be traced back to the note it came from. No double spends, no trail.

03 · PROOFS WITHOUT A CEREMONY

No trusted setup

Zcash moved from a ceremony to Halo-style recursive proofs. ZSOL starts there: no toxic waste, no party you have to trust.

04 · VIEWING KEYS

Disclosure, on your terms

Zcash's viewing keys let you show your history without the ability to spend. ZSOL keeps the same split: full keys, viewing keys, nothing in between.

fromZECshielded on Zcash
→ bridge →
tozZECshielded on Solana, inside the ZSOL pool

ZSOL is an independent project. It is not affiliated with, endorsed by, or connected to Zcash, the Electric Coin Company or the Zcash Foundation. Zcash and ZEC are their marks.

viewing keys

Private by default.
Provable on demand.

Privacy isn't hiding from everyone forever. It's deciding who gets to look. A viewing key is read-only: it can show history, it can never move funds.

  • 01Scope it: one token, one date range, or one account.
  • 02Hand it to your accountant, an auditor or an exchange that asks.
  • 03They verify. Nobody else sees a thing.
  • !Once someone has seen data with a key, you can't un-show it. Share carefully.
viewing key · demo
zvk1·░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░
scopeSOL · 2026-07-01 → 2026-09-30
can readincoming, outgoing, balance
can spendnever
$ZSOL

The token that runs the pool.

A small fee on unshielding keeps relayers and bridge operators paid and buys back $ZSOL. Holders vote on which tokens get a pool next.

unshield fee0.15%

Charged only when you leave the pool.

to relayers & bridge50%

Pays the people who submit your transactions and run the bridge.

buyback & burn50%

Buys $ZSOL on the market and burns it.

governance1 token
1 vote

Which SPL tokens get a shielded pool next.

limits · read this

What a shield can't do.

The crowd is the coverA shielded pool is only as private as it is busy. Early on, with few users, deposits and withdrawals are easier to link.
Timing leaksShielding 3.17 SOL and unshielding 3.17 SOL a minute later is easy to connect. Wait, and vary amounts.
The bridge is a trust pointUntil the bridge is fully trust-minimised, its operators can censor or pause transfers. They never see shielded amounts, but they can stop the bus.
Audits firstZSOL is pre-launch. Circuits, contracts and the bridge will be audited before mainnet, and the reports published.
No. It's an independent shielded pool on Solana that follows the Zcash design: notes, nullifiers, zero-knowledge proofs without a trusted setup, and viewing keys. ZEC can be bridged in and stays shielded, but ZSOL is not a Zcash product.
No. A mixer pools coins and hopes. ZSOL uses zero-knowledge proofs inside a shielded pool, and viewing keys let you show your history to anyone you choose, which mixers can't do.
No. Notes are encrypted to your keys. The team, validators, relayers and bridge operators see proofs and encrypted data, nothing readable.
SOL and bridged ZEC first, then SPL tokens voted in by $ZSOL holders.
Not yet. The contract address will be posted on 𝕏 by @zsol_privacy. Anything posted anywhere else is not us.