Architecture

Stealth Pay is built from four layers that never trust each other. Each layer can be verified independently — the security model does not rely on any single point of trust.

1

L4 — App

TypeScript SDK. Runs in your browser. Your keys never leave your device.

2

L3 — Prover

Nargo + Barretenberg CLI. Proof generation is local. Nothing is sent to a server.

3

L2 — Contracts

PrivacyPool (UUPS proxy) + UltraHonk verifiers. Logic is immutable once deployed.

4

L1 — Chain

0G Galileo testnet. Sub-second finality, near-zero gas, EVM-compatible.

Trust model

The only trust assumption is that the ZK proof system (UltraHonk / Barretenberg) is sound — i.e., false proofs cannot be constructed. No admin key, oracle, or relayer is required at runtime. The contract owner can pause the pool and whitelist tokens, but cannot access user funds.