Cryptography

Zero-Knowledge
Privacy

Ghostfi doesn't hide your transactions behind obscurity. It uses zero-knowledge cryptographic proofs to make them mathematically untraceable. Even we can't see where your funds went.

The basics

What is a zero-knowledge proof?

A way to prove you know something without revealing what you know. In crypto, this means proving you own funds without revealing which funds are yours.

1
The Commitment
When you deposit into the privacy pool, you create a cryptographic commitment — a hash that represents your deposit. This commitment is added to a Merkle tree alongside thousands of others. Nobody can tell which commitment is yours.
2
The Nullifier
Each deposit has a unique nullifier — a one-time key that prevents double-spending. When you withdraw, the nullifier is published on-chain. It proves a deposit was consumed, but reveals nothing about which one.
3
The Proof
To withdraw, you generate a ZK-SNARK proof. This proof says: "I know a commitment in this tree and its nullifier" — without revealing which commitment. The smart contract verifies the math and releases the funds.
4
The Result
On-chain, there's a deposit to the pool and a withdrawal from the pool. No link exists between them. Not probabilistically hidden — mathematically impossible to connect.

The flow

How your transfer stays private

Every Ghostfi transfer passes through multiple privacy layers. Here's the complete path your funds take.

Your Wallet
Relay (disposable)
ZK Privacy Pool
Ephemeral (new)
Destination
🛡
Layer 1: Relay Isolation
Your wallet sends to a one-time relay address. This breaks the direct transaction link. The relay is used once and destroyed.
Address Isolation
🔒
Layer 2: ZK Pool
The relay deposits into a zero-knowledge privacy pool. Deposits and withdrawals are cryptographically unlinkable. This is the core privacy guarantee.
Mathematical Privacy
💣
Layer 3: Ephemeral Delivery
Clean funds are withdrawn to a brand new wallet with zero transaction history. This wallet transfers to your destination, then self-destructs.
Clean Delivery

Trust model

Don't trust us. Verify.

Can Ghostfi see where my funds went?
No. The ZK proof is generated client-side. Even if our servers were compromised, the cryptographic link between your deposit and withdrawal doesn't exist. It's not stored anywhere — it was never created.
Can blockchain analytics trace it?
They can see a deposit into the pool and a withdrawal from the pool. But they cannot determine which deposit corresponds to which withdrawal. This is guaranteed by the zero-knowledge proof, not by obscurity.
What about timing analysis?
The privacy pool has many deposits and withdrawals from many users. Your transaction is mixed with the entire anonymity set. The more users, the stronger the privacy. Timing alone cannot link specific deposits to withdrawals.
Is this the same as a mixer?
No. Traditional mixers shuffle transactions — with enough analysis, the shuffle can be reversed. ZK proofs provide information-theoretic privacy: the link literally does not exist on-chain. There's nothing to reverse.

Privacy is math,
not a promise.

Every Ghostfi transfer is backed by zero-knowledge cryptography. Try it yourself — no sign-up needed.