Private Transfers

Send to any registered address. Sender, recipient, amount and token stay hidden. Only commitments and nullifiers appear on-chain.

Private Withdrawals

Exit to any public address. The amount and recipient become public. The source notes do not.

Withdrawal Rounds

Round exits are queued and sent together at the next round instead of the moment you sign.

Staggered Withdrawals

Up to five legs per exit, each with its own round, recipient and status.

Private Swaps

Swap through a Uniswap V2-compatible router without the swap leaving the pool.

Gas Abstraction

Relayers pay gas. They are reimbursed from your veiled balance, so your wallet needs no ETH after setup.

Standard Wallet UX

MetaMask, Rabby, any EIP-1559 wallet. No extension, no new seed.

Hardware Wallets

Ledger and Trezor sign the same transactions they always sign.

ERC-20 Support

Native ETH, standard ERC-20 and fee-on-transfer tokens, managed by a whitelist.

Deposit Screening

A gatekeeper checks every deposit before it enters the pool. Rejected deposits are refunded.

Where each guarantee lives

Some features are enforced by the contract. Others depend on an off-chain service. Veilify is explicit about which is which.
Rounds are a scheduling policy run by the Veilify Network service. The shieldedWithdrawal entry point does not compare timestamps. A round is not an on-chain timing guarantee and does not measure anonymity. See On-Chain Guarantees.