Privacy BridgeLaunch App
Deposit on any chainWithdraw on Starknet
No link between them

Groth16 proofs sever the on-chain trail. 6 source chains. Fixed denomination pools. Poseidon Merkle tree.

—— Chain Transit Map —— Unclassified ——
Flow
ETH
Base
ARB
OP
POL
Starknet
—— Protocol Sequence —— Unclassified ——
1
Lock
EVM Chain
Deposit fixed denomination, commitment added to Merkle tree
2
Prove
Browser
Generate Groth16 proof of valid commitment
3
Verify
Starknet
Garaga verifier checks proof on-chain
4
Claim
Starknet
Tokens minted, nullifier marked spent
—— Transit Network —— Unclassified ——
Deployed Contracts // 6 EVM Chains
Flow EVM Testnet#545
0xd1959eA3d6ca0631f2e617ac7CE71e297E5328Ca
Ethereum Sepolia#11155111
0x2eaEF8016D2a7Dc01677E57183a167649cB07402
Base Sepolia#84532
0xd1959eA3d6ca0631f2e617ac7CE71e297E5328Ca
Arbitrum Sepolia#421614
0x2eaEF8016D2a7Dc01677E57183a167649cB07402
Optimism Sepolia#11155420
0x2eaEF8016D2a7Dc01677E57183a167649cB07402
Polygon Amoy#80002
PENDING
—— Security Dossier —— Unclassified ——
Verified
Fixed denominations prevent amount correlation
Commitment hiding via nested Poseidon hash
Double-spend protection via nullifier tracking
Fee protection via max_fee_bps bound
Emergency withdraw with 30-day timelock
Same circuit, separate bridge per source chain
Disclosed
Root relay centralized (single owner key)
Garaga calldata proxy centralized
Single-party trusted setup (no MPC ceremony)
Non-Flow Starknet pairs pending deployment
—— Known Limitations —— Declassified ——
  1. 011-party trusted setup. The proving key was generated without a multi-party ceremony. A compromised ceremony allows forged proofs.
  2. 02One-directional bridge. Shielded tokens on Starknet have no redemption path back to the source chain.
  3. 03Root relay is centralized. The watcher uses a single owner key to relay Merkle roots cross-chain.
  4. 04Emergency withdraw is a single-key rug vector, mitigated by a 30-day timelock.
  5. 05Amount is a public circuit input. Denomination pools mitigate but do not eliminate amount correlation.
CIRCUIT: 6,634  |  TREE: DEPTH-24  |  CALLDATA: 1,977  |  TESTS: 93/93  |  CHAINS: 6  |  BUFFER: 30

Ready to bridge privately?

Launch App