Privacy-preserving perpetuals on Solana

Trade perps privately via a dark pool.

HUSH lets you manage collateral and trade through private notes (commitments) and zero-knowledge proofs.

Start TradingRead docs
Privacy
Dark pool notes
Private commitments
Proofs
ZK verified
On-chain checks
Custody
Non-custodial
You hold keys
HUSH Flow Preview
Private execution
Dark Pool
Commitment
Note balance
Proof statusVerified
Trade
Collateral source
Private note
Executor
PrivacyProxy
Submit proof
SignatureLocal secret
Identity preserved
TRUST
Built for privacy and verifiability.
Private notes in a dark pool, ZK proofs for authorization, and a minimal on-chain execution surface via PrivacyProxy.
Non-custodial
Zero-knowledge proofs
Dark pool commitments
PrivacyProxy execution
Solana-native
Open-source (planned)
CORE FEATURES

Private collateral. Public execution.

HUSH separates custody and identity from execution. You trade with private notes while the protocol settles positions through a minimal Perp DEX surface.

Dark pool collateral
Deposit into a private pool and hold balance as commitments (private notes).
ZK authorization
Trade and manage collateral using proofs instead of public balances.
PrivacyProxy execution
Positions execute publicly while identity remains private via local-secret signatures.
Composable by design
Minimal execution surface for easier auditing and future integrations.
HOW IT WORKS

Deposit → Prove → Trade.

A privacy-first flow: create private notes, generate proofs, and execute through a minimal on-chain proxy.

01
Create a private note
Deposit collateral into the dark pool to mint a private commitment.
02
Generate proof + signature
Use a locally generated secret to derive signatures and authorize actions privately.
03
Execute via PrivacyProxy
The proxy holds positions publicly while preserving your private identity.
SECURITY & INFRA

Purpose-built for privacy.

Defense-in-depth across circuits, programs, and client-side key management.

ZK circuits
Proofs validate note spending and authorization without revealing the user’s identity.
Minimal execution surface
PrivacyProxy isolates public position management from private user state.
Local-secret identity
User identity derives from a locally generated secret—never shared on-chain.
Oracle-backed pricing
Trades reference reliable price feeds while keeping collateral private.