Use Cases

These are the flows the protocol supports today: holding a shielded note, withdrawing it in full or in part, and sending to another Solana address through Private Send.

Hold, then withdraw later

You deposit an amount you choose into the SOL tree, or into VEILIX, USDC, wBTC, or wETH. You keep the note. Later you withdraw to a different wallet, either the full note or a slice of it. The remainder stays shielded as a change note.

This is the right flow when the goal is to separate the address that funded the pool from the address that receives the funds, and when you can wait while other deposits join the same tree.

Pay someone who never opens Veilix

Private Send is a deposit followed immediately by a withdrawal to a recipient address. The recipient receives a normal token balance. They do not install anything, do not hold a note, and do not claim.

A partner app can offer this on its own site: the user quotes the fee, signs the deposit, and the app submits the withdrawal proof. Several recipients and several assets can be sent in one call. Each item is its own note.

Split one note into a payment and a remainder

Because amounts are not fixed, a single deposit can fund more than one later payment. Deposit 10 SOL. Withdraw 2 SOL to one address and keep 8 SOL as a change note. Later, spend the change note the same way. Each spend publishes a new nullifier and, when there is a remainder, a new commitment.

The public withdrawals are 2 SOL and then whatever you send next. They are not required to match the original 10 SOL deposit.

Recover notes on a new device

If the deposit sealed the note into the on-chain encrypted output, the same wallet can sign the note-encryption message and scan the trees. Unspent notes come back without a pasted backup. The scan key is not the spending key of any Solana account. It is derived from a signature over a fixed message.

A downloaded note file remains the backup when that seal was not written.

What this is not

Veilix does not hide the fact that a deposit happened, the size of that deposit, or the size and recipient of a withdrawal. It hides the connection between a specific deposit and a specific withdrawal.

It also does not swap one asset for another inside the pool. A USDC note withdraws as USDC. To change assets, you withdraw and use a normal venue, which is a public trade.