Trade, swap, stake and borrow from a private account with no visible link to your wallet. Bitcoin, Ether, XRP, Zcash and more.
ETH0
Any coin, from the wallets you already know
The problem
Anyone with a browser can see what you hold and what you've done. One leak puts your name on it.
The fix
Redacted cuts the link. Your trades still happen on-chain, they just don't lead back to your wallet.
BitcoinEthereum
THORChainWhy it matters
2020 · Data breach
home addresses of hardware-wallet owners were published.
Names, phone numbers and addresses from Ledger's customer database landed on a hacking forum, ready to cross-reference with on-chain balances. The breach never touched a private key.
2025 · Kidnapping
was the ransom demanded for a crypto founder taken from his home.
The attackers knew who he was, where he lived and what he was worth. Special forces rescued him.
UK · Home invasion
taken after attackers matched leaked data to on-chain holdings.
They checked the balance first. Then they knocked on the door.
Every public wallet shows what it holds to anyone who looks.
Redacted breaks it hereThrough a breach, a purchase record, a KYC leak or a social post.
No exploit needed. A $5 wrench and a block explorer will do.
How it works
Your coins rest in a shared Reserve among everyone else's. You act from Spending, a private account with no visible tie to your wallet.
MetaMask, Rabby, Keplr, Trust. The wallet you already have.
Encrypted notes only your keys can read. A proof shows you own a note, never which one.
Everything on Rujira, from one private account.
Connect the wallet you already have and sign one message. Your private account is derived from it. No new seed phrase, no sign-up.
Deposit any supported coin. It joins the shared Reserve, where your share is indistinguishable from everyone else’s.
Trade, swap, stake, lend and borrow from Spending. Your browser builds a proof for each action and a node carries it on-chain.
Everything you need, nothing you don't. Real on-chain execution with the feel of a web app.
Execute any interaction privately. Swap native coins, trade the orderbook, borrow against your Bitcoin. Atomic: it runs completely or not at all.
Sign once when you open Private Mode. After that your wallet stays in the background, nothing more to sign.
"I've been working on a new electronic cash system that's fully peer-to-peer, with no trusted third party."
— Satoshi Nakamoto, 2008
A node carries every action on-chain and pays the network fee. The fee shows up in your quote. Nothing to top up.
Every balance and position in one place, updated live from the chain.
Open it on a desktop, a phone or a fresh browser after losing your laptop. Same balances, same history. It rebuilds from the chain and your keys alone.
Your account lives on-chain as encrypted notes that only your keys can read. Any browser can rebuild it from the chain alone, and no server ever holds your funds.
Any coin, settled by THORChainNative Bitcoin, Ether, XRP, Zcash, Dogecoin and more. THORChain holds every coin in vaults on its own chain and swaps it directly, so there is no bridge and no wrapped token in between. Move them in, and everything you do next stays yours.
Products
Swap, trade, borrow, lend and stake from one private account, with the same markets and liquidity as everyone else and no visible link to your wallet. Each product has its own page with live data.
Native coinsNative coins across chains, with no bridge and no wrapped token.
Private swaps →56 marketsLimit orders with live prices, charts and orderbooks.
Private trading →DCABuy or sell in equal parts on a schedule.
Private recurring orders →11 coins as collateralLoans against your coins, with no fixed term.
Private loans →27 vaultsEarn interest paid by borrowers, coin by coin.
Private lending →4 poolsStake RUJI, TCY and more at their current rates.
Private staking →15 marketsEarn a share of the trading fees on a market.
Private liquidity →Up to 30% offBid on collateral from liquidated loans at a discount.
Private liquidation bids →Under the hood it runs on Rujira and THORChain, with native coins and no bridges. What is Rujira and what is THORChain.
Security
Your keys stay on your device, every action is sealed before it leaves, and nobody can stop you taking your money out.
Every action is authorized by a zero-knowledge proof your browser builds locally. Your keys never leave your device.
The proof seals amounts, destination, fee, the node that may carry it and expiry. A node delivers it exactly as proved, or not at all.
Each action runs completely or not at all. Your funds are never caught halfway through a trade.
No one’s approval is needed to take your money out. No vote or switch applies to withdrawals.
Your account rebuilds from the chain and your wallet’s signature. An encrypted backup covers the day the wallet is gone.
Private access locks after 15 minutes of inactivity. One signature reopens it.
Open to anyone
The rules are public and apply the same way to every user. New money waits about two hours before it can be used privately, so a deposit can’t be matched to what you do minutes later.
No sign-up, no KYC, no identity check. Anyone with a wallet can start, and withdrawals are always open, without anyone’s approval.
Independent nodes carry your actions and approve deposits by public rules. The core contributors can’t turn anyone away.
Money tied to known hacks or sanctions lists is sent back to its sender before it can join. A clean crowd is a better one to hide in.
A wallet you already have, such as Keplr, MetaMask, Rabby or Trust. Connect it, tap the ghost icon and sign one message. Registration is sponsored, so you can start without sending anything.
No. Your private account is derived from a signature of your existing wallet, and one backup file makes it independent even of that wallet. There is nothing new to write down.
No. The node that carries your action pays the network fee and is reimbursed through the privacy fee that you see in every quote, so there is nothing to top up.
No. Every action is sealed by a proof that binds the destination, the amounts, the fee, the node that may submit it and the expiry. A node delivers your sealed action exactly as proved or not at all, and it can’t open it, edit it or write its own.
Your Spending account’s activity is on-chain like any smart account’s, but it is a fresh identity with no connection to your public wallet. What observers can’t look up is whose it is.
Restore your encrypted backup from any supported wallet and your balances, positions and history come back, because your account lives on-chain and not on a device.
New money waits about two hours. The wait means a deposit can’t be matched to what you do with it a few minutes later, and it gives the nodes time to send back money they decide not to accept. Money already in your Reserve is always usable at once.
It is designed to be, and it stays permissionless. Every deposit is approved by a node, and each node chooses what it checks first. Selective disclosure lets you prove what you choose without exposing everything.
Opening soon on Rujira. Until then, the docs explain how it all works.
