Ethereum Sepolia first — Base Sepolia coming next. Demo mode live in your browser
Confidential allocations on public chains
ShieldAlloc lets organizations distribute tokens to teams and contributors across Ethereum, with L2s and Solana on the roadmap — while recipient identities stay off the public ledger. Amounts are committed, not listed; in v1 a claimed amount becomes visible at claim time.
Demo mode simulates the full flow in your browser (in-browser chain, mock bridge). Wallet mode runs against the live Ethereum Sepolia deployment.
The problem
Payroll, grants and contributor rewards on public ledgers leak everything: who got paid, how much, and when. Competitors, data brokers and attackers can read an organization's entire compensation structure.
The ShieldAlloc model
Commitments go on-chain, recipients stay off-chain. A Merkle root plus nullifiers gives cryptographic proof of fair distribution with double-claim protection — without exposing who received what.
How it works
1. Create an allocation
The organization uploads recipients and amounts. Only a Merkle root ever touches the chain — identities and per-recipient values are not published.
2. Share encrypted tickets
Each recipient gets an AES-GCM encrypted claim ticket: secret, amount, salt and Merkle proof. Encryption happens entirely in your browser.
3. Claim privately
The recipient proves membership with a nullifier and claims to a fresh address. Double claims are blocked by a shared nullifier registry; in this demo the cross-chain relay is a mock bridge.