Docs

Status: live on Solana Mainnet Beta

Shield, Send and Unshield run for real on Solana. Balances and amounts are kept encrypted by an on-chain privacy program. That program holds shielded funds, and your wallet approves every transaction.

How it works

• Shield — deposit SOL, USDC or USDT into an encrypted balance. The deposit and its amount are public; your balance after it isn't. The first time, your wallet also signs a message that derives your privacy keys (it's not a transaction).
• Send — a confidential transfer between private balances. The amount is encrypted, but the sending and receiving wallets are visible on-chain. You can send to any wallet: if they've never received that token privately, Yinsi first opens their private balance with a tiny public deposit (about 0.01 SOL one-time, paid by the sender), and they claim it once the first time they open Yinsi.
• Unshield — withdraw back to your connected wallet. The withdrawal and its amount are public. Waiting between shielding and unshielding makes the two harder to link.

Not available yet

• Anonymous sends that also hide who paid whom.
• Swaps inside the private balance.
• View keys and proofs of funds for selective disclosure.

Fees

The privacy protocol charges a small fee on each shield, send and unshield (about 0.35% in our devnet tests), deducted on-chain. Each step also holds a little SOL as rent while the network processes it and refunds it seconds later, so keep around 0.02 SOL in your wallet for fees.

Safety

Yinsi never asks for a seed phrase or private key and can't move funds without your wallet's approval. Shielded funds are held by a third-party on-chain privacy program, which Yinsi doesn't control. Yinsi has not been independently audited. Privacy tools carry smart-contract risk, and using them may have legal implications depending on where you live.