https://github.com/y-pakorn/shroud
Trade with privacy on Sui
https://github.com/y-pakorn/shroud
circom dapp poseidon privacy rust sui wasm zk
Last synced: 23 days ago
JSON representation
Trade with privacy on Sui
- Host: GitHub
- URL: https://github.com/y-pakorn/shroud
- Owner: y-pakorn
- Created: 2025-04-16T16:37:13.000Z (11 months ago)
- Default Branch: main
- Last Pushed: 2025-06-26T03:22:11.000Z (9 months ago)
- Last Synced: 2025-10-25T11:15:16.704Z (5 months ago)
- Topics: circom, dapp, poseidon, privacy, rust, sui, wasm, zk
- Language: Circom
- Homepage: https://zkshroud.xyz
- Size: 14.8 MB
- Stars: 13
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Shroud: Private Trading on Sui with Full Compliance
Shroud is the first fully functional privacy-preserving DApp on the Sui blockchain, enabling confidential and compliant trading by integrating zero-knowledge proofs with public DEX infrastructure.
## 🔒 Key Features:
- Privacy with Compliance: Users can privately deposit, withdraw, and swap assets, but direct hidden-to-hidden transfers are restricted. All trades happen through a public DEX to ensure transparency and auditability.
- Auditable Export: Users can export their full private transaction history for audits and compliance reporting.
- ZK Infrastructure: Zero-knowledge circuits are built in Rust (arkworks) and Circom, with Groth16 verification and Poseidon hash precompile integration.
- Pure Move Primitives: Implements a sparse Merkle tree with historical tracking in pure Move. A Poseidon hash in pure Move was also developed (not used in current version).
- Frontend ↔ Circuit: Full-featured frontend supports native WASM proving, custom trading router, account management, and pool interaction via web workers.
Privacy is achieved by encoding user addresses in UTXO notes, hiding them during swaps while requiring disclosure in deposits and withdrawals. Nullifiers ensure one-time use of notes, preventing double-spending.
## Technical Specs
- Address is also encoded in the UTXO note and enforced when deposit/withdraw to ensure non-mixing
- $B=H(H(A,N),B_1,B_2,...,B_n)$
- A is address, N is random nonce, and B_n is nth asset balance
- ZK checks for note transition from B_n (before) to B_n (after) and consistent A and N
## Contract Addresses (DEVNET)
The contract is deployed to devnet because _Sui's native Poseidon hash is not available in testnet nor mainnet_.
- Package ID: `0xba1993ce8670d2fd5f4ade6322f334a4834f3da09244d553f8c667344f7eb552`
- Shroud Core ID: `0x06ffdbfb65b1cf69c84e63f72b8155f63bcade1d53b03cd4eddf332dd0adf8f1`