Private Swap
Swap tokens without showing your order. It goes to an enclave and reaches the chain only as a hash until it is filled, so there is nothing to front-run or sandwich.
How a swap works
You sign once
The desk prices your order and returns one message to sign. This page rebuilds that message from what you asked for and refuses to sign if any field differs. Paying in a dollar token with EIP-3009 needs no approval and no transaction from you.
The chain sees a hash
Your payment moves into escrow under the order's hash. What you buy, your minimum and your recipient stay in the enclave until the order is filled.
Orders fill in batches
Every few seconds the enclave fills the open orders of each pair as one swap, then pays each recipient after a short random wait.
Not filled? Refunded
An order the desk cannot fill at your minimum is never forced. Once it expires, the contract lets anyone send it back to the wallet that paid, and only there.
What it does not hide
Your payment into escrow
Who paid, which token and how much are public, as with any transfer.
The swap and the payout
Each batch swap and each payout (recipient, token, amount) are on chain. With few orders in a batch, amounts and timing can still link a payment to a payout. A recipient address with no history makes that harder.