SolanaPrivacy PoolsBurn to speak
Pass it under your breath.Burn it to be heard.
Sotto is the currency of quiet rooms. Zip it and nobody can tell which deposit paid. Burn it and the whole square hears you.
How it works
Three steps, and nobody can connect them.
- 1
Zip
Move tokens or SOL from your wallet into the pool. In your browser you get a private note; on-chain, only a deposit.
- 2
Wait
The pool checks the deposit in a few minutes. The longer you wait, the more people zip after you, and the bigger the crowd you hide in.
- 3
Unzip
Send any part to any address. Your browser proves you own a note without saying which; a relayer pays the fee, so the recipient needs nothing.
Live on the network
Every number on this page can be recomputed from the chain. Nothing is hidden, except who you are.
- …
- Tokens zipped
- …
- Tokens burned
- …
- Notes an unzip hides among
- …
- Messages spoken
Latest burns
All messages ›No one has spoken yet. Be the first.
Why Sotto
Privacy is normal. Only thieves have to worry.
Paying someone used to leave no record anyone could search. On a public chain it leaves one for everyone, forever. Sotto gives the old default back, with no backdoor and no list of users: it only keeps known hacks and thefts out of the crowd. Who sees what
Private by proof
Unzipping proves in your browser that you own an approved note, without saying which. Built on 0xbow's Privacy Pools and their production trusted setup.
Loud by burn
Every message burns tokens for good. The supply only shrinks, and the loudest voices are the ones that paid the most.
Exit always open
Whatever the vetting service decides, the wallet that zipped can always take its note back. Upgrades wait 48 hours behind a multisig.
Future-proof
Built for the day the curves break.
Quantum computers, or mathematics found with the help of AI, may one day break the elliptic curves most of crypto relies on. Sotto is built so that day does not undo your privacy. What it would and would not mean
Nothing to decrypt later
Your notes are never stored on-chain, not even encrypted: they come from your 12 words, and your browser finds them itself. There is no ciphertext waiting for a future machine.
Proofs that tell nothing
The proofs are perfectly zero-knowledge: they say nothing about which deposit you spend, even to someone who can break any curve. Your past unzips stay unlinkable.
A brake on the pool
What a broken curve could threaten is the pool's funds, so the program caps how much can leave per hour and can pause private withdrawals. Ragequit never stops.
Clean by design
Six layers keep stolen money out of the crowd you hide in.
A private pool is only worth joining if thieves cannot join it. Every layer is public, and none of them can trap you: ragequit always takes your own deposit back.
01Public blocklist
Sanctioned addresses and the wallets behind publicly reported hacks, each with its public source. A deposit from one is refused.
02Who paid the depositor
A wallet funded by a blocklisted address before its deposit is refused too. Dust and spam tokens someone sent you do not count.
03Behavioural holdNew
Money that only just moved waits: fresh wallets, fresh funders, bursts, one funder behind many wallets, a wave of new wallets. Measured against what is normal in this pool, learned from its own history. Two days or a week, then checked again.
04Checked again, every run
An approval is withdrawn if a later report ties the deposit to a hack, and given back if the report is withdrawn. Every change is public, with its reason.
05Recipients checked on your deviceNew
Before an unzip, your browser checks the recipient against the same public list and refuses a blocklisted one. The address never leaves your device.
06Regional blockNew
The site and its relayer are not served in regions under comprehensive sanctions. The country is looked up in memory and never stored.
Don't trust, verify
Every claim comes with a way to check it.
Source on this site
The full history of the programs, services and this site: download it here, no account anywhere.
Verifiable builds
Rebuild the programs and the site yourself: same bytes, same hashes.
Upgrades wait
2 of 3 multisig signers and a time lock before any program change.
Exit always open
Ragequit needs only your words, your wallet and any RPC. Not us.
Public vetting
Every approval and revocation, with its reason, on-chain root included.
Audit, honestly
Internal so far, and labelled as such; independent audit before large deposits.
Ready to go quiet?
Read how it works, then zip your first tokens.