STELLAR VAULT

ProductPrivacyDocs

STELLAR · SOROBAN · ZERO-KNOWLEDGE

The first confidential multi-sig treasury on Stellar.

Approve as a team. Reveal nothing. Every transaction runs transparent for the world to audit — or private, where signer identities, amounts and recipients stay sealed behind zero-knowledge proofs.

CONTRACT  CA3V…XTAW
NETWORK  Testnet · live
PROOFS  Groth16

HOW IT WORKS

From zero to a confidential treasury in three steps.

01

Create a vault

A factory deploys a fresh smart contract — its own address & balance, your chosen signers and m-of-n threshold. Safe-style, one contract per vault.

02

Propose & approve

Anyone proposes a transfer. Co-signers approve — transparently (name on-chain) or privately, where a zero-knowledge proof proves a valid signer approved without revealing who.

03

Execute

Once the threshold is met, any signer executes. Real XLM moves from the vault — and in private mode the chain never learns who approved.

Safe-style factory

One contract per vault

Per-transaction privacy

Transparent or private, your call

ZK voter privacy

Hide who approved (Groth16, verified on-chain)

Confidential balances

Hide amounts, on a SEP-41 standard

THE SAME LEDGER, TWO STATES

Same security. Different privacy.

One vault, one threshold. You decide — per transaction — what the chain is allowed to see.

TRANSPARENTRECEIPT #4471

Approved byAlice · Bob · Carol

Amount1,000.00 XLM

RecipientGXYZ…7K2P

StatusSettled on-chain

Every detail is publicly verifiable. The classic bank statement — fully auditable.

🕶 ANONYMOUS APPROVALSRECEIPT #4472

Approved by🔒 3 valid signatures

Amount1,000.00 XLM

RecipientGXYZ…7K2P

StatusConfidential · settled

nullifier 0x9f…c1a4Groth16 ✓

UNDER THE HOOD

Real contracts. Real proofs.

▹

Smart-contract vault — Soroban (Rust, SDK 27) — not native multi-sig, so it can run custom logic native accounts can't.

▹

Our own ZK circuits — voteApproval (Poseidon + Merkle membership + nullifier) & confidentialTransfer, compiled with circom.

▹

Groth16 in the browser — Proofs are generated client-side with snarkjs; the chain records only a nullifier — never who approved.

▹

Factory architecture — One deployed contract per vault, with an on-chain owner→vaults registry.

Source on GitHub↗Factory on stellar.expert↗

STACK

Soroban SDK 27 · circom + circomlib
snarkjs Groth16 (BN254)
Next.js 14 · Freighter · Protocol 27