Private Transfer - Veilify

function shieldedTransfer(ShieldedTransferParams calldata params, bytes calldata proof)
    external nonReentrant whenNotPaused;

Params

struct ShieldedTransferParams {
    bytes32[6] noteNullifiers;
    bytes32    txNullifier;
    bytes32    root;
    bytes32    rkRoot;
    bytes32    noteOutCommitment;
    bytes32    noteChangeCommitment;
    bytes32    noteFeeChangeCommitment;
    bytes32[9] ciphertextOut;
    bytes32[9] ciphertextChange;
    bytes32[9] ciphertextFeeChange;
    GasFee     gasFee;
    bytes32    nullifiersHash;
    bytes32    fee;
    bytes32    feeTokenAddress;
}

struct GasFee {
    bytes32 maxPriorityFeePerGas;
    bytes32 maxFeePerGas;
    bytes32 gasLimit;
}

Field	Description
`noteNullifiers`	Nullifiers of up to six input notes. Zero for unused slots.
`txNullifier`	Replay-protection nullifier of the signed transaction
`root`	A historical note-tree root
`rkRoot`	A historical key-registry root
`noteOutCommitment`	Recipient’s new note
`noteChangeCommitment`	Sender’s change
`noteFeeChangeCommitment`	Sender’s fee-token change
`ciphertext*`	Nine-field ciphertexts for each output
`gasFee`	Gas fields of the signed transaction
`nullifiersHash`	Hash of the six nullifiers
`fee`	Relayer fee, paid to `msg.sender`
`feeTokenAddress`	Token the fee is paid in (`0` = ETH)

Execution

fee > 0 → msg.sender must be an allowed relayer (NotRelayer)
txNullifier unused (TxNullifierAlreadyUsed)
root known (InvalidNoteTreeRoot)
rkRoot known (InvalidKeyRegistryRoot)
Verify 46 public inputs (PublicInputNotInField, InvalidProof)
Spend nullifiers (NullifierAlreadySpent), mark txNullifier
Insert three commitments, emit three NoteAdded
Transfer fee to msg.sender
Emit ShieldedTransfer

Event

event ShieldedTransfer(
    bytes32 indexed txNullifier,
    bytes32 nullifiersHash,
    bytes32 noteOutCommitment,
    bytes32 noteChangeCommitment,
    bytes32 noteFeeChangeCommitment,
    uint256 fee,
    address feeTokenAddress
);