Glossary

Asset tree. The Merkle tree for one mint. SOL is the tree with no mint. Token trees are seeded with the mint.

Base units. The integer the chain uses. Lamports for SOL and VEILIX. Six decimals for USDC. Eight for wBTC and wETH.

Blinding. The random field element mixed into a commitment so two notes of equal amount still differ.

Change note. The new note created when a withdrawal spends only part of an input note. Its amount is input minus the public withdrawal amount.

Commitment. Poseidon(amount, spending public key, blinding, mint field). The leaf stored in the tree.

Configuration authority. The key on network state that can replace fee wallets and change a tree’s deposit cap.

Deposit cap. maxDepositAmount on a tree. Deposits above it fail.

Encrypted output. Ciphertext stored with a leaf so the owning wallet can find the note again. Empty when the note was not sealed.

External-data hash. The public hash that binds recipient, relayer, fee, amount, mint, and encrypted outputs to the proof.

Fee split. A platform wallet’s share of a withdrawal, in basis points. Each share is floored, then summed.

Groth16. The zk-SNARK proving system the withdraw circuit uses.

Indexer. The service that stores leaves, answers note status, quotes fees, lists relayers, and queues Private Send proofs.

Leaf index. The position of a commitment in the tree. Required to compute the nullifier. Not stored in the note string.

Note. The secret string that spends a shielded amount. Current notes start with vx2.

Nullifier. The value published when a note is spent, derived from the commitment, the leaf index, and the spending key. Stored once.

Platform fee. The part of the withdrawal fee paid to the configured wallets.

Poseidon. The hash used for commitments, nullifiers, and Merkle nodes.

Private Send. A deposit of a new note followed by a full withdrawal to a recipient, so the recipient gets a public balance and never handles a note.

Relayer. The operator who signs a withdrawal transaction and is paid the relayer fee.

Relayer fee. The part of the withdrawal fee set by the relayer you selected.

Root history. The latest 100 Merkle roots the program will accept in a proof.

Shielded balance. The sum of unspent notes you can open. It is not an on-chain token account.

Spending key. The private field element inside the note. Its public key is Poseidon(privateKey). It is not a Solana wallet key.

Treasury. The program account that holds deposited SOL or tokens until a withdrawal.

Zero note. A padding input or output with amount zero, used so every proof has two inputs and two outputs.