Acheron Technical Specification

Zero-Knowledge Privacy
for Elysium & Hyperliquid

Acheron is a privacy pool for native HYPE on Elysium (Chain ID 99901). By leveraging Groth16 zero-knowledge SNARKs and a 20-level Poseidon Merkle tree, it breaks the deterministic graph between deposit sources and recipient destinations.

01 · Fundamentals

Overview & Philosophy

Public blockchains link every balance, transfer, and trade to a persistent address. Even when users attempt multi-wallet hygiene, funding hops leave deterministic breadcrumbs that cluster analyses easily resolve.

Acheron severs this connection at the protocol level. When HYPE enters the shielded pool, the depositor receives a cryptographic commitment (a secret note). When funds leave, the recipient receives them via an automated relayer. On-chain observers only observe deposits into an aggregate pool and relayer payouts out of it — without any cryptographic link connecting the two.

Core Invariant

No entity — not the pool contract, not the relayer, not node validators — can deduce which deposit generated a given withdrawal without knowledge of the private note generated solely inside your browser.

02 · Execution

Quickstart Guide

  1. 01
    Connect your Web3 Wallet

    Connect MetaMask, Rabby, or any EIP-6963 provider to Elysium Mainnet (Chain ID 99901).

  2. 02
    Deposit Shielded HYPE

    Specify the amount to deposit into the shielded pool. Your browser derives a private nullifier and secret locally. Confirm the on-chain transaction.

  3. 03
    Select Time Delay & Destination

    Choose an immediate withdrawal or introduce a 1-hour / 6-hour random window to eliminate temporal heuristics. Specify any recipient address — including fresh trading wallets.

  4. 04
    Client-Side ZK Proving & Relayer Broadcast

    snarkjs compiles a Groth16 zero-knowledge proof in WebAssembly. The relayer covers Elysium gas fees and broadcasts the verified withdrawal transaction.

03 · Deployments

Contracts & Network Details

All Acheron smart contracts are verified and live on Elysium Mainnet:

Component Address / Spec Network
Chain ID 99901 (Elysium Mainnet) Elysium Layer 1
Native Currency HYPE (18 decimals) Elysium
Shielded Pool 0x688671bd3d4fe1cf33ee732485a3619884e8bcf0 ElysScan ↗
Primary Relayer 0xB4f3cef4E783d81E930a69f71649342a1b94E776 Automated Executor
Relayer Fee 0.25% + 0.0005 HYPE Gas & Maintenance
RPC Endpoint https://rpc.elysium.kinetiq.xyz JSON-RPC HTTP
04 · Cryptography

Groth16 & Poseidon Merkle Tree

Acheron uses the Groth16 proving system paired with the SNARK-friendly Poseidon hash function over the BN254 (alt_bn128) elliptic curve.

Merkle Tree Commitment

The contract maintains a 20-level incremental Merkle tree supporting up to 1,048,576 leaves. When depositing, the leaf inserted into the tree is:

Leaf = Poseidon(Nullifier, Secret, Amount)

The Spend Circuit

When spending, the user proves in zero-knowledge that:

1. They know a private pair (Nullifier, Secret)
2. Leaf = Poseidon(Nullifier, Secret, Amount) exists at path P in the Merkle Tree
3. The root computed from P matches a known historic tree root on Elysium
4. The public nullifier hash equals Poseidon(Nullifier)

The contract verifies the Groth16 proof in constant gas and stores the nullifierHash to irrevocably prevent double-spending.

05 · Hyperliquid Terminal

Option A: Anonymous Perp Funding

Hyperliquid perpetual positions expose critical alpha: trade size, leverage ratio, liquidation threshold, and entry triggers. Tracing a perpetual account back to a main vault unmasks whale positioning and invites front-running or copy-trading.

How Option A Works

Instead of managing volatile ephemeral burner private keys, Option A allows traders to designate any secondary MetaMask or Rabby account that they already control:

  • Zero Burner Storage: No raw private keys stored in browser localStorage or at risk of cache deletion.
  • Clean Provenance: The funding transaction originates from the Acheron Relayer (0xB4f3…), not your identity.
  • Complete Hyperliquid Integration: Once funded on Elysium, bridge HYPE to HyperEVM (Chain ID 999), swap or deposit to Hyperliquid spot, and trade perps with full anonymity.
06 · Operational Security

Privacy Best Practices

Cryptographic proofs ensure mathematical anonymity, but poor operational habits can leak statistical correlation. Follow these principles:

Attack Vector Vulnerability Acheron Countermeasure
Timing Correlation Depositing and immediately withdrawing the same balance Use the 1-hour or 6-hour delay options to mix within block windows
Amount Matching Depositing unique, rare decimal values (e.g., 14.82914 HYPE) Deposit round amounts or split withdrawals across distinct tranches
EVM Address Clustering Interacting between recipient and original depositor Never transfer funds directly between the deposit wallet and recipient
07 · Reference

Technical FAQ

Can the relayer censor transactions?

The relayer can choose not to process a withdrawal, but it cannot steal funds or alter the recipient, because the recipient and relayer fee are cryptographically committed inside the public inputs verified by the smart contract. Furthermore, users can submit proofs directly to the contract if gas is paid manually.

Where are proof parameters downloaded from?

The circuit artifacts (spend.wasm and spend.zkey) are served locally from the Acheron static distribution and compiled inside the browser sandbox using WebAssembly.

Does Acheron support tokens other than HYPE?

The core pool handles native HYPE on Elysium. The built-in Private Swap feature spins a single-use funded wallet to automatically accumulate ERC-20 assets (such as OBOL, HELIOS, or NOX) on decentralized exchanges.

ACHERON PROTOCOL · ELYSIUM 99901 Documentation verified against mainnet deployment.