Balances that stay yours
Funds sit in a shielded pool you alone can spend from. No issuer float, no frozen accounts, no support ticket standing between you and your own money.
A non-custodial payment card that settles on-chain and reveals nothing about you. Shielded balances, one-time addresses, and zero identity fields — checkout looks ordinary, the ledger stays quiet.
CIPHR is a dollar card that spends like any other and settles like none of them — the balance is yours, the route is shielded, and the ledger keeps its mouth shut.
Funds sit in a shielded pool you alone can spend from. No issuer float, no frozen accounts, no support ticket standing between you and your own money.
Hold a dollar-denominated balance with instant access — no lockups, no notice periods, no waiting for a settlement window.
Proofs, nullifiers and rotation happen on-device in the background. You tap the card; the cryptography does the rest.
Send any supported asset from your own wallet into the shielded pool. The deposit is public; everything after it is not.
Your balance becomes a commitment in the Merkle tree. A zero-knowledge proof — not an account name — authorises every later spend.
Each authorisation burns a nullifier and settles from a one-time address, so two payments can never be linked back to one card.
Every authorisation derives a fresh receiving address from your viewing key. Merchants see a payment; chain analysts see noise.
Proofs are generated on-device and relayed in a single batch, so a shielded payment clears in the time an ordinary card takes to beep.
No issuer holds your balance and no server holds your keys. Freeze, rotate or burn a card yourself — the contract takes the instruction, not a support desk.
The same shielded rail carries a coffee, a payroll run and a cross-border settlement. Four ways teams put it to work today.
Take payment in a dollar-denominated asset without asking a customer for identity they would rather not hand over. You see the settlement; the chain does not see the shopper.
Hold reserves without publishing your runway, your counterparties or your payroll dates to anyone with a block explorer. Withdraw the full balance on any day of the week.
Drop shielded card rails into an app with one integration and keep your brand on the front of it. Your users get privacy by default; you never become the custodian of their keys.
Settle between countries without a chain of intermediaries reading every leg of the transfer. One proof, one hop, and the amount stays between the two parties to it.
Built on open cryptography,
not on anyone’s permission.
The network asset for the shielded pool: it pays relayer fees, backs the anonymity set, and carries governance over circuit upgrades. Contract details land here the moment the token is deployed — this panel is the single source of truth, so verify against it before you buy anything.
Connect a wallet, mint a card, and let the cryptography handle the rest. Nothing to apply for, nobody to ask.
Nothing is stored on our side. Connecting only reads your public address so the app can show your shielded balance.