Bet privately.Nobody sees your side
Bet on binary outcomes with zero-knowledge privacy. Your side and amount are encrypted end to end; only the market's net ever settles on-chain.
Provably
private.
Every order is proven valid before it's ever seen. A threshold committee nets the batch, the LMSR sets fair odds, and your keys never leave your wallet.
Private by construction
A Groth16 proof hides your side and amount. Nobody - not even the operator - sees your individual order.
Fair LMSR odds
A logarithmic market maker prices YES/NO continuously and settles the net on-chain.
No-leak committee
A t-of-n threshold committee decrypts only the aggregate net, never any single trade.
Self-custody
Your wallet signs every action; your order secrets stay in your browser.
Deposit.Supply.Earn.

Verifiable by
design.
Built on Stellar Soroban. Groth16 over BLS12-381, circom circuits, a Jubjub threshold-ElGamal committee, and a Reflector-oracle resolver.
Only the committee-decrypted net order ever touches Soroban. Individual orders never appear on-chain.
Proven
on testnet.
Composes
with the ecosystem.
Stellar Soroban for settlement, Reflector for price resolution, and a circom + Groth16 proving stack for private orders.
Verified,
not assumed.
Every order is proven valid with a Groth16 circuit before the committee ever decrypts anything, and a t-of-n threshold means no single party can move funds alone. Unaudited research prototype - testnet only.
Zero-knowledge order validity
Each order proves it's well-formed and in-range before the committee ever sees it.
Threshold decryption (Chaum-Pedersen verified partials)
Committee members submit verifiable partial decryptions; no single member holds the whole key.
On-chain proof verification + t-of-n authorization
Soroban verifies the Groth16 proof and checks t-of-n committee signatures before funds move.
Self-run trusted-setup ceremony tooling
Anyone can rerun the trusted-setup ceremony to check the proving key.
Read the code.
Verify it yourself.
Open circuits and contracts. Inspect the circom sources, the Soroban contracts, and the committee services.
Circom circuits
Groth16 circuits proving deposit validity and private redemption.
Soroban contracts
Rust contracts enforcing outcome-gated, replay-safe settlement.
Committee services
Threshold ElGamal decryption and batch relaying.
Verifiable on-chain
Read commitments and contract state on the Stellar explorer.
Backed by the math.
LMSR prices every position continuously from a single automated market maker, no order book and no counterparty to find.
LMSR
Market pricing, LMSR
Trade without
being watched
Deposit privately, back an outcome, and redeem winnings without exposing your position to anyone, including us.
Testnet only, unaudited.









