Private transfers on Solana. MAINNET LIVE.
Joined January 2026
- Tweets1.7K
- Following8
- Followers92
- Likes118
memecoin trading has private strategies, private chats and private groups.
the actual movement of funds is still the odd one out.
private memcoin transfers feel like a natural step.
thoughts?
no bridge, no special wallet, no new chain
zerok auto-splits into fixed denominations, stays non-custodial, and lets you withdraw gasless to a fresh wallet that never has to sign
privacy should just feel like using any other solana app
AI agent won't just need wallets. They'll need rules around what they can spend, where they can send and what stays private.
Wallet infra for agents is going to get way more interesting.
Done. Private USDC is live on solana mainnet.
Deposit stables, withdraw to any wallet without publicly linking them.
This is a good reminder that self-custody risk isn't just about the hardware wallet itself.
A weak point can be the firmware, the signing flow, a third party service or even a leaked customer data.
Protecting the keys matter. Protecting everything around them does too.
Hardware wallets are not as safe as we thought.
In the past, there have been multiple security incidents involving established crypto cold wallets.
These are some of the biggest incidents:
1⃣ @COLDCARDwallet entropy flaw (July 2026)
Exploit: Weak seed generation affected several COLDCARD models.
Damage: Some wallets with affected seed phrases were drained.
2⃣ @SafePal data breach (August 2026)
Exploit: An order-tracking flaw exposed customer information.
Damage: Personal data from 39,798 customers was exposed.
3⃣ @Trezor / @TheShipMonk breach (August 2026)
Exploit: A ShipMonk breach exposed Trezor customer order data.
Damage: Personal data from 13,689 customers was exposed.
4⃣ @Bybit_Official / @safe compromise (February 2025)
Exploit: Attackers disguised a malicious cold-wallet transaction.
Damage: $1.46B was stolen from Bybit’s ETH cold wallet.
5⃣ @WazirXIndia multisig breach (July 2024)
Exploit: Attackers compromised WazirX’s multisig signing flow.
Damage: More than $230M was stolen.
6⃣ @Trezor support breach (January 2024)
Exploit: Attackers gained access to Trezor’s third-party support portal.
Damage: Up to 66,000 customers were exposed to phishing risk.
7⃣ @Ledger Connect Kit exploit (December 2023)
Exploit: Malicious code prompted users to sign draining transactions.
Damage: Multiple wallets were drained.
8⃣ @Ledger customer data breach (July 2020)
Exploit: Attackers accessed Ledger’s e-commerce customer database.
Damage: 1M+ emails and ~272,000 detailed customer records were leaked.
The weak points are different in each one.
Be smart about this and don't keep all your money in one place.
Privacy that needs 6 extra steps will always lose to convenience.
The better goal is making the private route the easiest route.
You can hide the trade but if the profits end up in public stables that part of the money trail is visible again.
Private stables would close the loop.
This is exactly why cold storage alone isn't enough.
SafePal says the breach didn't expose seed phrases or private keys but leaked names, addresses and purchase details can still create a real world security problem.
Self-custody has to protect your privacy too not just your keys.
Another cold wallet company was breached.
So where is your data actually safe?
SafePal says an order-tracking plug-in exposed data belonging to 39,798 customers.
Names, emails, phone numbers, shipping addresses and purchase details were compromised.
Seed phrases, private keys, passwords and funds were reportedly not exposed.
But attackers may now know who owns a hardware wallet and where they live.
That turns a digital privacy failure into a potential physical security threat.
Cold storage can protect your keys while the surrounding supply chain exposes you.
Real self-custody requires secure technology, personal privacy and operational discipline.
Make 10 fresh wallets then fund them all from the same wallet.
Now anyone watching can still link them together.
Fresh wallets don't mean much if the graph stays public.
Some of yellow make 15 wallets just to trade, then tp into stables and link the whole wallet graph again
What if we make the stables private too
Interesting direction from Ethereum. Hegota is shaping up to push censorship resistance, account abstraction and privacy deeper into the protocol itself.
FOCIL is already scheduled while privacy related proposals like frame transactions and keyed nonces are still being worked through.
✦ Ethereum developers are set to refine 66 proposals linked to the Hegotá upgrade:
The upcoming Hegotá upgrade is focused on enhancing native privacy for Ethereum applications. Developers are evaluating 66 proposals to select the most relevant ones for this significant upgrade, with many aimed at improving privacy features within the protocol. Currently, FOCIL is the only Ethereum Improvement Proposal (EIP) confirmed for inclusion, while EIP-8141, EIP-8250, and EIP-8272 are expected to facilitate native privacy and enhance censorship resistance.
Most privacy protocols let you deposit any amount. That's the flaw.
If you deposit 1.8 SOL and someone later withdraws 1.8 SOL, the amounts match. It doesn't matter that the addresses are different. Amount correlation is a known attack. Statistical analysis links deposits and withdrawals by size, not just by address.
Variable amounts mean every deposit has a unique fingerprint. The more specific your amount, the smaller your anonymity set — sometimes down to one.
Fixed denomination removes the variable entirely. Every deposit is identical. Every withdrawal looks the same. When you withdraw, a zero knowledge proof proves you own one of the deposits in the pool, without specifying which one. The verifier sees a valid proof. Your specific deposit is indistinguishable from every other deposit at that denomination.
Your anonymity set isn't "people who deposited around 1.8 SOL." It's everyone who ever deposited at that denomination. The pool is the protection.
The size of that pool is the only privacy metric that actually matters.
The better you get at trading on Solana, the harder it gets to stay good.
Every successful trade is a public data point. Your wallet, your token, your size, your timing — all permanent and searchable. Once you have a track record, wallet tracking tools let anyone mirror your moves in real time.
Your edge doesn't disappear because you got worse. It disappears because you got good enough to be worth copying.
The naive fix is a fresh wallet. But fresh wallets need SOL to operate, so you fund them from your main wallet. That link is on chain and permanent. You moved the problem, not solved it.
The actual fix is address unlinkability. You deposit from your main wallet. A zero knowledge proof is generated proving you own that deposit without revealing which deposit it is. You withdraw to a completely separate address. No on chain connection between the two exists anywhere.
Your history stays on one address. Your live trading happens on another. No one connects them.
The better you get at trading on Solana, the harder it gets to stay good.
Every successful trade is a public data point. Your wallet, your token, your size, your timing — all permanent and searchable. Once you have a track record, wallet tracking tools let anyone mirror your moves in real time.
Your edge doesn't disappear because you got worse. It disappears because you got good enough to be worth copying.
The naive fix is a fresh wallet. But fresh wallets need SOL to operate, so you fund them from your main wallet. That link is on chain and permanent. You moved the problem, not solved it.
The actual fix is address unlinkability. You deposit from your main wallet. A zero knowledge proof is generated proving you own that deposit without revealing which deposit it is. You withdraw to a completely separate address. No on chain connection between the two exists anywhere.
Your history stays on one address. Your live trading happens on another. No one connects them.
The right question isn't "is it private?"
It's "what information does an observer still have after the transaction?"
Variable amounts: they have the amount. Fixed denomination: they have nothing. Same token, same size, cryptographically unlinked sender and receiver.
Fixed denomination isn't one design choice among many. It's what privacy actually means on a transparent ledger.