GHOSTSdocs

Protocol

Private accounts

NFT claims

Ghost NFT ownership and reward claims are public. Privacy engineering does not apply here.

Ghost private accounts

Privacy lives in the Ghost shielded note network:

  • Shield public ETH / $GHOST into private notes
  • Send privately (hidden amounts)
  • Reappear to a fresh public wallet

Users hold spending keys client-side (ghost-wallet). Private send can go through a gas-only relayer (proof + public args — never note secrets). Reappear and swap are submitted from the owner wallet so the operator never sees the packet.

Honest privacy bounds

Ghost hides ownership and amounts inside the shielded set. Still visible: deposits into Ghost (wallet, amount, time — a first shield from a known wallet is a fingerprint), withdrawals from Ghost, aggregate vault balances, protocol fees. A Ghost does not hide exits. Using an active Ghost for a fee discount links that NFT (and its owner) to the exit; the reappear recipient can still be a fresh address. Swaps show GhostSwap as the public curve trader.