Private Protocol on Solana.

Validators verify Groth16 proofs in ~10 ms. Any laptop runs a node. No GPUs, no special hardware. Validators earn all fees.

GitHub

Run a validator

Anchored Protocol.
Two shielded primitives.

Groth16 proofs verify offchain. Groth16 proofs verify offchain, but merkle root and nullifier set live in Solana's Anchor program. Even 10-of-10 malicious validators can't steal — they can only delay.

Protocol capabilities

What Occlude enforces at the protocol level.

PRIMARY ADVANTAGE

ZK proofs enforce validity

On-chain Anchor program anchors the pool. Groth16 proofs enforce validity — validators verify, never extract.

EXECUTION PRIVACY

Groth16 ZK proofs

Inputs encrypted with AES-256-GCM in --private mode. BLS12-381 curve + Poseidon hash. Proof stays on your machine.

CONFIDENTIAL BALANCES

Poseidon commitments

Amounts hidden via Poseidon commitments. Values constrained to u64 in-circuit — no field overflow possible.

IDENTITY + POLICY CONTROLS

Nullifier-based unlinkability

Each note emits a nullifier on spend. Double-spend is structurally impossible. Output unlinkable to input.

AUTOMATION LAYER

7-of-10 BFT consensus

Reputation-gated. Equivocation and persistent unavailability are slashable on the validator set.

OFFLINE TRANSFERS

1-slot expiry on Anchor

Anchor program enforces one-slot expiry on every withdrawal proof. Replay attacks are structurally blocked.

NATIVE L1 SETTLEMENT

Commodity hardware

Groth16 verification in ~10 ms on commodity hardware. Any laptop qualifies. No GPU needed.

OPEN SOURCE

MIT open source

MIT license. ~33K lines of Rust. 407 tests passing. Sigstore keyless signing on all releases.

VALIDATOR ECONOMICS

No founder cut

Validators earn protocol fees directly. No founder allocation from fee stream. Protocol-native incentives only.

Ask About Occlude

Occlude Research

Welcome. I can walk you through Occlude's shielded pool, Groth16 proofs, BFT 7-of-10 consensus, the MPC ceremony, and the road to mainnet. What would you like to explore?

Start with a research question

Funds stay
shielded.

Occlude devnet is live. Mainnet opens after MPC ceremony, external audit, and output-note compute. MIT licensed, build in the open.