Showing your size before you trade invites front-running, and onchain it's worse: every pending swap sits in the mempool for anyone to see and act on before it settles. Confidential Swap rebuilds the swap for confidentiality, with your trade encrypted end to end.
Encrypted intent
Your amount, direction, and price limit stay encrypted onchain, so your order reveals nothing before it executes.
No front-running
There is no visible order to sandwich and no mempool signal to race. To the bots that feed on public order flow, your trade does not exist.
Deep liquidity
Professional market makers compete in a blind auction to fill your trade, so you get the best available price.
Compliant by design
Confidentiality is built into the protocol, and every market maker is a known, whitelisted, professional entity.
Institutional investors trade at size onchain, with full confidentiality.
A blind auction, run entirely onchain.
No trusted auctioneer. Quotes are submitted, compared, and settled entirely onchain, encrypted end to end. There is no operator who sees the bids, and nothing to leak.
An onchain, RFQ-based venue where your trade is filled through a blind auction, encrypted end to end.
Your amount, price, and direction stay encrypted through the full trade lifecycle. Observers learn only that a swap settled on the pair. Your strategy stays yours.


There is no visible order to sandwich and no mempool signal to race. To the bots that feed on public order flow, your trade does not exist.
Market makers can’t see each other’s quotes, so each has to offer their best price. Your price limit stays hidden, so they can’t simply quote at your limit.


Confidentiality is built into the protocol. Every market maker on the venue is a known, whitelisted, professional entity. Confidential to the market, transparent to compliance.
An RFQ-based swap where your trade's size and direction stay encrypted, and market makers compete in a blind auction to fill it. The best quote settles onchain via confidential transfers.
No one sees it whole. Market makers see only your size, never the direction, so they quote both sides. Only the winning market maker learns the direction, and only to settle. Everyone else sees a bidirectional transfer of a hidden amount on the pair: no amounts, no price, no direction.
Quotes are sealed and fully onchain, so market makers can't anchor to each other and must lead with their best price. Your price limit is hidden, so no one can quote to your limit. And the winner is picked by the contract itself, so there is no auctioneer to trust.
Yes. The csteakUSDC/cUSDC pair lets you move in and out of a yield-bearing vault position confidentially, without unshielding or waiting for a redemption period.
Your deposit is held by the contract for the duration of the order and returned to you in full if the trade doesn't settle.
100% of swap fees go toward buying back and burning $ZAMA, and there are no frontend fees.
cUSDT ↔ cUSDC
cZAMA ↔ cUSDC
csteakcUSDC ↔ cUSDC
More pairs are coming with the public launch, including stablecoin FX, tokens, RWAs, and tokenized stocks, with multi-chain support to follow.
Contact