Confidential accounts · Solana
A bank account
for yourSolana agents.trading bots.payroll runs.DAO treasury.AI employees.Solana agents.
Solhaus stores every balance on Solana as an encrypted value that validators can update but never read. Pay any .sol name without revealing the amount, give an agent a budget the program enforces, and open one payment for one reader only when you choose to.
- Settlement
- USDC · ~400 ms slots
- Amounts
- ElGamal on Ristretto255
- Agents
- Allowances, on chain
- Fee
- 0.08%, max 4 USDC
The explorer view
Two names, two curve points, no figure.
Anyone can see that a transfer happened and between which accounts. The amount rides along as a Pedersen commitment and a decryption handle, and Token-2022 folds it into both balances without ever decoding it.
mara.sol → northwind.sol
C 7f3a91…c20e · D 1b84d2…9a07 · amount ▒▒▒
scout-agent.sol → rpc-pool.sol
C a41c0e…57bd · D e09f33…1c6a · amount ▒▒▒
northwind.sol → payroll.sol
C 0d92ff…e4a1 · D 6b2c70…f318 · amount ▒▒▒
kestrel.sol → mara.sol
C c8e417…03fd · D 4a91be…7d25 · amount ▒▒▒
treasury.sol → kestrel.sol
C 39b6a2…aa90 · D d17e05…26cf · amount ▒▒▒
mara.sol → auditor.sol
C e15d7c…4b02 · D 08ca9f…b3e1 · amount ▒▒▒
ops-bot.sol → cloudrent.sol
C 5f20d8…91c7 · D a6e3b4…0f48 · amount ▒▒▒
kestrel.sol → scout-agent.sol
C b70c39…6e5d · D 3f2a81…c90b · amount ▒▒▒
mara.sol → northwind.sol
C 7f3a91…c20e · D 1b84d2…9a07 · amount ▒▒▒
scout-agent.sol → rpc-pool.sol
C a41c0e…57bd · D e09f33…1c6a · amount ▒▒▒
northwind.sol → payroll.sol
C 0d92ff…e4a1 · D 6b2c70…f318 · amount ▒▒▒
kestrel.sol → mara.sol
C c8e417…03fd · D 4a91be…7d25 · amount ▒▒▒
treasury.sol → kestrel.sol
C 39b6a2…aa90 · D d17e05…26cf · amount ▒▒▒
mara.sol → auditor.sol
C e15d7c…4b02 · D 08ca9f…b3e1 · amount ▒▒▒
ops-bot.sol → cloudrent.sol
C 5f20d8…91c7 · D a6e3b4…0f48 · amount ▒▒▒
kestrel.sol → scout-agent.sol
C b70c39…6e5d · D 3f2a81…c90b · amount ▒▒▒
Cipher lab · runs in your browser
Seal a number. Try to read it.
This page just generated two ElGamal keypairs on Ristretto255: one for you, one for a stranger. Type an amount and seal it to your key. Re-randomize it as often as you like; the ciphertext changes completely every time while the value inside stays the same. Then ask both keys to open it.
It’s the same arithmetic Token-2022 uses for confidential balances. To keep it light, the demo leaves out the range and equality proofs.
commitment C = m·G + r·H
—
handle D = r·P
—
Available
••,•••.•• USDC
Pending: •,•••.•• · apply to merge into available
- +•,•••.••
Invoice #0193 paid
northwind.sol · 09:14
- −••.••
RPC credits · allowance
scout-agent.sol · 08:02
- −••.••
Split dinner
kestrel.sol · Yesterday
- +•,•••.••
October salary
payroll.sol · Oct 15
The account
An ordinary bank screen, but only on your device.
The balance, the salary deposit and the invoice total all get decrypted locally with a view key derived from your wallet. Anyone else looking at that Solana account sees ciphertext. Incoming payments arrive in a pending bucket, and you merge them into your spendable balance whenever you want.
Hit the button on the card to see it.
What’s inside
Six building blocks, all on Solana.
Encrypted balances
Amounts are stored and moved as twisted ElGamal ciphertexts under Token-2022. Validators check the proofs, not the numbers.
.sol names
Send money to kestrel.sol rather than a 44-character address. Names resolve through Solana Name Service.
Agent allowances
Spin up a sub-account for an AI agent with per-payment caps, daily budgets and an allowlist. The program says no on its own.
Auditor receipts
Open exactly one transfer for an accountant or a counterparty. A scoped receipt reveals that payment and nothing else.
Solana Pay links
Request a payment with a link or QR code. The payer's wallet seals the amount before it ever leaves their device.
Keys that travel
Your view key is derived from your wallet signature. Move to any device or client and your history decrypts the same way.
Agent allowances
Hand your agent a card with limits it can’t argue with.
Each agent gets its own confidential sub-account, funded from yours. The Solhaus program checks the policy inside the same transaction as the transfer, so if a prompt injection or a buggy loop asks for more, the payment simply fails. Payments go through x402 or Solana Pay, and the amounts stay encrypted.
policy scout-agent.sol {
per_payment_max 50 USDC
daily_budget 200 USDC // rolling 216,000 slots
cosign_above 25 USDC
allowlist [rpc-pool.sol, cloudrent.sol, openmesh.sol]
}Try a payment
The program evaluates this against the agent’s encrypted running total. Nobody sees the figures, but everyone can verify the outcome.
The token
$SOLHAUS
An SPL token on Solana mainnet, tradable through any Jupiter-routed venue. Always check the mint address against this page before you swap.
Mint address
bBKZ1xdueSq6d9SmSesgcEnAUtkRxEurjDkeyMEpump
Pricing
One fee. Paid on transfers you send.
No monthly plan, no spread on deposits, nothing extra for agents or receipts. Solana network fees still apply and usually land well under a cent.
0.08%
per outgoing transfer, never above 4 USDC
- ReceivingFree
- Agent sub-accountsFree
- Auditor receiptsFree
- Deposit / withdrawNetwork fee only
Questions
Asked often.
What can people actually see about my account?+
The fact that your Solana account exists, which accounts you've transacted with, and when. Balances and transfer amounts are ciphertexts. Moving USDC in or out of the confidential balance is a public step, so deposits and withdrawals show their amounts.
Can Solhaus read my balance?+
No. The view key comes from a signature that only your wallet can produce, and decryption happens on your device. We run the interface and the policy program, but we never hold your keys.
Why use Token-2022 rather than a custom privacy pool?+
Confidential transfers come built into Solana's token program. It's audited, maintained by the core teams, and supported by wallets and explorers. Using it means we ship less novel cryptography and tie into the rest of the ecosystem.
How do agent limits work if the amounts are encrypted?+
The agent includes zero-knowledge proofs that the payment is under the cap and that its encrypted running total stays inside the daily budget. The program checks those proofs, so it enforces the policy without ever learning the numbers.
What does an auditor receipt reveal?+
A single transfer, meaning its amount and both parties, along with a proof that the decryption is correct. Your other payments and your balance stay sealed, and every receipt you hand out is a separate grant.
Is it audited?+
The Token-2022 confidential transfer extension and its ZK ElGamal proof program have been through several independent audits. The Solhaus policy program is being audited now, and we'll publish the reports here before mainnet limits go up.