01
Shield
Deposit ETH, USDC or xXMR. The pool turns your deposit into a note — a commitment only your key can open — and adds it to a tree with everyone else's.
Shielded pool on Base
Your balance
is your business.
Every chain built on Ethereum shares the same flaw: your wallet is a glass house. OBSCURA is a shielded pool on Base. Funds go in, amounts and parties go dark, and the chain keeps only proofs — never your history.
What the chain sees
The same payment, written two ways.
On Base today
- from
0x9f4…206 - to
0x8e3…383 - amount
4,200.00 USDC - balance after
18,431.77 USDC - history
every payment you ever made
Through OBSCURA
- from
— - to
— - amount
— - balance after
— - proof
valid
Three moves
That is the whole protocol.
02
Move
Pay anyone inside the pool. Your wallet proves it owns notes worth what it is spending, without saying which ones. The chain records two nullifiers and two new notes. Nothing else.
03
Unshield
Withdraw to any fresh address, whenever you want. A relayer can submit it so the gas payer is never you, and the link between your deposit and that address is gone.
Private, and still able to prove it
Private does not have to mean opaque. You decide who reads what.
View keys
Hand a read-only key to an accountant, an auditor or a counterparty. They see that one wallet's history. Nobody else does, and you can take it back.
Association sets
When you withdraw, you prove your funds come from a set of deposits that excludes flagged ones — without revealing which deposit is yours. Honest users keep their privacy and the pool stays clean.
An exit nobody controls
If every set leaves you out, you can still walk out: reveal which deposit was yours and the pool pays it back to the address that made it. A set filters. It cannot lock.
xXMR — Monero, on Base
One xXMR, one XMR, held in reserve wallets whose view keys are published.
The supply can never exceed the reserve that was last attested — the contract refuses the mint, and refuses it again if the attestation has gone stale. Redemption is never gated: burn xXMR, name a Monero address, and the reserve pays out.
$OBSCURA
The token of the protocol. Fixed supply, no mint function, no owner.
Fees
The pool charges a small fee on shielding and unshielding. It lands in the staking contract, in whatever asset it was charged in, and stakers split it. No fixed returns — what stakers earn is what the pool actually collected.
Relayers
Relayers submit transactions so a user's own wallet never appears next to their withdrawal. They stake $OBSCURA to operate and earn the relay fee the user set inside the proof.
Governance
Stakers vote on supported assets, fee levels and who publishes association sets. The fee ceiling lives in the pool's code, not in a vote, and the fee destination cannot be moved at all.
The bigger the crowd, the deeper the shadow.
A pool of ten hides a withdrawal among ten deposits. A pool of ten thousand hides it among ten thousand. Every deposit protects everyone already inside — which is why OBSCURA is shared infrastructure on Base, not a closed product.