Zero-Knowledge Privacy
for Elysium & Hyperliquid
Acheron is a privacy pool for native HYPE on Elysium (Chain ID 99901). By leveraging Groth16 zero-knowledge SNARKs and a 20-level Poseidon Merkle tree, it breaks the deterministic graph between deposit sources and recipient destinations.
Overview & Philosophy
Public blockchains link every balance, transfer, and trade to a persistent address. Even when users attempt multi-wallet hygiene, funding hops leave deterministic breadcrumbs that cluster analyses easily resolve.
Acheron severs this connection at the protocol level. When HYPE enters the shielded pool, the depositor receives a cryptographic commitment (a secret note). When funds leave, the recipient receives them via an automated relayer. On-chain observers only observe deposits into an aggregate pool and relayer payouts out of it — without any cryptographic link connecting the two.
No entity — not the pool contract, not the relayer, not node validators — can deduce which deposit generated a given withdrawal without knowledge of the private note generated solely inside your browser.
Quickstart Guide
-
01
Connect your Web3 Wallet
Connect MetaMask, Rabby, or any EIP-6963 provider to Elysium Mainnet (Chain ID
99901). -
02
Deposit Shielded HYPE
Specify the amount to deposit into the shielded pool. Your browser derives a private nullifier and secret locally. Confirm the on-chain transaction.
-
03
Select Time Delay & Destination
Choose an immediate withdrawal or introduce a 1-hour / 6-hour random window to eliminate temporal heuristics. Specify any recipient address — including fresh trading wallets.
-
04
Client-Side ZK Proving & Relayer Broadcast
snarkjscompiles a Groth16 zero-knowledge proof in WebAssembly. The relayer covers Elysium gas fees and broadcasts the verified withdrawal transaction.
Contracts & Network Details
All Acheron smart contracts are verified and live on Elysium Mainnet:
| Component | Address / Spec | Network |
|---|---|---|
| Chain ID | 99901 (Elysium Mainnet) |
Elysium Layer 1 |
| Native Currency | HYPE (18 decimals) | Elysium |
| Shielded Pool | 0x688671bd3d4fe1cf33ee732485a3619884e8bcf0 |
ElysScan ↗ |
| Primary Relayer | 0xB4f3cef4E783d81E930a69f71649342a1b94E776 |
Automated Executor |
| Relayer Fee | 0.25% + 0.0005 HYPE |
Gas & Maintenance |
| RPC Endpoint | https://rpc.elysium.kinetiq.xyz |
JSON-RPC HTTP |
Groth16 & Poseidon Merkle Tree
Acheron uses the Groth16 proving system paired with the SNARK-friendly Poseidon hash function over the BN254 (alt_bn128) elliptic curve.
Merkle Tree Commitment
The contract maintains a 20-level incremental Merkle tree supporting up to 1,048,576 leaves. When depositing, the leaf inserted into the tree is:
Leaf = Poseidon(Nullifier, Secret, Amount)
The Spend Circuit
When spending, the user proves in zero-knowledge that:
1. They know a private pair (Nullifier, Secret) 2. Leaf = Poseidon(Nullifier, Secret, Amount) exists at path P in the Merkle Tree 3. The root computed from P matches a known historic tree root on Elysium 4. The public nullifier hash equals Poseidon(Nullifier)
The contract verifies the Groth16 proof in constant gas and stores the nullifierHash to irrevocably prevent double-spending.
Option A: Anonymous Perp Funding
Hyperliquid perpetual positions expose critical alpha: trade size, leverage ratio, liquidation threshold, and entry triggers. Tracing a perpetual account back to a main vault unmasks whale positioning and invites front-running or copy-trading.
How Option A Works
Instead of managing volatile ephemeral burner private keys, Option A allows traders to designate any secondary MetaMask or Rabby account that they already control:
- Zero Burner Storage: No raw private keys stored in browser localStorage or at risk of cache deletion.
- Clean Provenance: The funding transaction originates from the Acheron Relayer (
0xB4f3…), not your identity. - Complete Hyperliquid Integration: Once funded on Elysium, bridge HYPE to HyperEVM (Chain ID 999), swap or deposit to Hyperliquid spot, and trade perps with full anonymity.
Privacy Best Practices
Cryptographic proofs ensure mathematical anonymity, but poor operational habits can leak statistical correlation. Follow these principles:
| Attack Vector | Vulnerability | Acheron Countermeasure |
|---|---|---|
| Timing Correlation | Depositing and immediately withdrawing the same balance | Use the 1-hour or 6-hour delay options to mix within block windows |
| Amount Matching | Depositing unique, rare decimal values (e.g., 14.82914 HYPE) | Deposit round amounts or split withdrawals across distinct tranches |
| EVM Address Clustering | Interacting between recipient and original depositor | Never transfer funds directly between the deposit wallet and recipient |
Technical FAQ
Can the relayer censor transactions?
The relayer can choose not to process a withdrawal, but it cannot steal funds or alter the recipient, because the recipient and relayer fee are cryptographically committed inside the public inputs verified by the smart contract. Furthermore, users can submit proofs directly to the contract if gas is paid manually.
Where are proof parameters downloaded from?
The circuit artifacts (spend.wasm and spend.zkey) are served locally from the Acheron static distribution and compiled inside the browser sandbox using WebAssembly.
Does Acheron support tokens other than HYPE?
The core pool handles native HYPE on Elysium. The built-in Private Swap feature spins a single-use funded wallet to automatically accumulate ERC-20 assets (such as OBOL, HELIOS, or NOX) on decentralized exchanges.