Private.
Zero-knowledge.
Post-quantum.
Trade Solana out of a zero-knowledge shielded pool, with every key Lowkey controls on NIST post-quantum crypto. Your wallet stays off the record.
Your wallet never appears in the trade.
- Settlement
- fresh account/leg
- Order flow
- up to 4, jittered
- Addresses
- never stored
Swaps spend shielded notes with a proof.
- Proof
- Groth16, in browser
- Pool
- Cloak shielded notes
- Submit
- relay pays gas
Every key Lowkey controls survives Shor.
- Signatures
- Ed25519+ML-DSA-65
- Sealing
- X25519+ML-KEM-768
- Transport
- TLS X25519MLKEM768
Cloak's relay knows which wallet asked for the swap. The pool is young and swaps are rare: split orders and vary timing.
| Part | Algorithm | Quantum | Note |
|---|---|---|---|
| Site traffic | TLS 1.3 X25519MLKEM768 | RESISTANT | Hybrid key exchange on every request |
| Identity signatures | Ed25519 + ML-DSA-65 | RESISTANT | Both required once your PQ key is on record |
| Proofs and badges | Ed25519 + ML-DSA-65 | RESISTANT | Dual-signed by the attestor |
| Requests with addresses | X25519 + ML-KEM-768 | RESISTANT | Sealed in the browser to the attestor |
| Vault at rest | AES-256-GCM | RESISTANT | 128-bit security left after Grover |
| Q-Vault holdings | Winternitz OTS, keccak | RESISTANT | Hash-based. Program deploy pending |
| Pool notes | Groth16 BN254, X25519 | EXPOSED | Curve crypto, like every ZK pool today |
| Solana transactions | Ed25519 | EXPOSED | Every account, burners included |
Holdings behind Winternitz one-time signatures: 34 keccak chains, 256 steps, a fresh key per spend. No elliptic curve for Shor to break. Swap output can land in it directly.
Verified PnL under a handle. The attestor reads the history, signs only what you disclose with Ed25519 and ML-DSA-65, and drops the addresses.
Example. Click a row to show, round or redact it.
No. The vault seed is created and encrypted in your browser and never leaves it. Lose the recovery key and the browser data together and nobody, including us, can restore it.