Honest accounting

Protocol

Lens is a private dapp on the Wallet API. It does not hold viewing keys, does not use sub-accounts (Wallet API still pending), and does not run a custom prover. Deposit screening still applies to every shield. Amounts on deposit, withdrawal, and helper legs stay visible; movement inside the pool does not. Look-back scans the last 80,000 blocks. We do not invent an anonymity-set size.

Pool

STRK20 live

Mainnet pool. Look-back reads Deposit.user_addr and Withdrawal.to_addr, not the relayer.

Wallet

Ready

Shield, send, and unshield go through WalletAccountV6. The app never sees a viewing key.

Fee

On-chain

Fee comes from get_fee_amount. It is reserved on MAX, not hard-coded as 4 STRK.

Leak sheets

What this action reveals

Hidden

  • What you do with the notes after they enter the pool

Visible on-chain

  • Your address
  • Token and amount (public Deposit event)
  • Time you used the pool

What this action reveals

Hidden

  • Who paid whom
  • The amount
  • Which token
  • Which notes moved

Visible on-chain

  • That someone used the pool
  • Timing of that interaction

What this action reveals

Hidden

  • Which notes funded the withdrawal

Visible on-chain

  • Recipient address
  • Token and amount (public Withdrawal event)
  • Time you used the pool