ZERA turns your crypto assets into private, portable & secure digital cash.
Groth16 zero-knowledge proofs over a Poseidon-based Merkle tree. Shielded USDC balances, private P2P transfers, NFC bearer instruments, and an open SDK — live on Solana today.
THE NEW ERA OF DIGITAL CASH
EXPERIENCE THE PERFECT BLEND OF PHYSICAL CASH PRIVACY WITH DIGITAL CONVENIENCE
Every deposit, withdrawal, and transfer is verified by a Groth16 zk-SNARK over BN254. Prove balance conservation and Merkle membership without revealing sender, receiver, or amount.
Notes commit to amount, asset, secret, and blinding factor via Poseidon X5 hashing over the BN254 scalar field. Commitments are Merkle leaves in a 24-level incremental tree — 16M+ capacity.
Nullifier = Poseidon(secret, commitment). Each note produces exactly one spend tag, proven in zero-knowledge. The on-chain program finalizes the first valid nullifier and rejects all duplicates.
NTAG216 NFC tags carry encrypted shielded notes as NDEF payloads. Read and write via ACR122U or PN532 desktop readers. Pass value like physical cash — no internet, no intermediary.
Split any shielded note into two output notes via a 1-input 2-output ZK transfer circuit with value conservation. Spend exact amounts with cryptographic change — perfect divisibility.
On-chain Groth16 verification, Merkle tree insertion, and nullifier finalization — all in a single Solana transaction. Sub-second finality, sub-cent fees. Privacy at consumer scale.
ZERA ECOSYSTEM
LAYERED PRIVACY. SCALABLE TRUST.
- Governance and protocol decisions
- Programmatic buy-back and burns
- Access gates for premium features
- Early access to new products
- Any stablecoin or token with privacy
- Complete transaction anonymity
- Offline payment capability
- Zero-knowledge proof transfers
CRYPTOGRAPHIC INNOVATION
LAYERED PRIVACY. SCALABLE TRUST.
POSEIDON COMMITMENTS
Every shielded note is a Poseidon X5 hash over the BN254 scalar field binding amount, asset, secret, blinding factor, and memo into a single commitment — a leaf in a 24-level incremental Merkle tree with 16M+ capacity. The preimage never leaves the client.
GROTH16 PROOFS ON SOLANA
Four circuit types — deposit, withdraw, relayed withdraw, and shielded transfer — each produce a Groth16 proof via snarkjs. Proofs are formatted into Solana-compatible byte arrays (proofA/B/C) and verified on-chain in a single transaction.
// @zera-labs/sdk — Poseidon Commitmentconst note = createNote(amount, asset, memo)const commitment = Poseidon(amount, secret, blinding, asset, memo[0..3])// Groth16 Proof Generationconst { proof, nullifierHash } =await generateWithdrawProof(note, leafIndex, merkleTree,recipientHash, wasmPath, zkeyPath)// Nullifier (deterministic single-spend tag)nullifier = Poseidon(secret, commitment)// On-chain: verify proof, insert nullifier PDA,// reject duplicates — one Solana transaction
ZERA IS TRUSTWARE
The transition from analog to digital trust is underway. Learn how ZERA powers the core privacy infrastructure for the world.
We shipped the core privacy infrastructure on Solana: an on-chain shielded pool with Groth16 verification, a 24-level Poseidon Merkle tree, deterministic nullifiers, and four ZK circuit types. The web wallet, desktop wallet, SDK, and NFC hardware are all live or in final testing. This isn’t a whitepaper — it’s running code.
The $ZERA Protocol is token-native: deposit USDC, SOL, or any SPL token directly into the shielded pool — no synthetic pegs, no IOUs, no wrapping. Your assets stay yours; the ZK layer just hides who, what, and how much.
The cryptographic core — Poseidon hashing, Groth16 proving, Merkle inclusion, nullifier derivation — lives in a portable Rust crate (zera-core) with no Solana dependency. The same primitives can target any VM or settlement layer. Solana is first because it’s fast, cheap, and battle-tested for on-chain proof verification.
PRODUCTS
$ZERA Wallet is live — privacy for everyday crypto: shielded USDC balances via Groth16 zero-knowledge proofs, private P2P transfers relayed for gasless anonymity, and note splitting for perfect divisibility. Deposit, withdraw, and transfer — all verified on-chain with Poseidon-based Merkle inclusion proofs. Browser-based PWA optimized for mobile wallet browsers.
FOR DEVELOPERS
@zera-labs/sdk — TypeScript SDK with Poseidon hashing, Merkle tree management, Groth16 proof generation (deposit/withdraw/transfer circuits), transaction builders for Solana, and note storage backends. Backed by a portable Rust core (zera-core) with napi-rs bindings for native performance. 144 tests and counting.
@zera-labs/mcp-server — Model Context Protocol server that exposes shielded deposits, withdrawals, and transfers as tools for AI agents. Let Claude, GPT, or any MCP-compatible agent execute private transactions autonomously. Built on the SDK, validated with Zod schemas.
OTHER PRODUCTS & SERVICES
NFC-enabled physical tokens (NTAG216, 888 bytes) and desktop readers (ACR122U, PN532). Load shielded notes as NDEF payloads, pass value by tap. Available now in the store.
On-chain shielded pool on Solana with Groth16 proof verification, Poseidon Merkle tree state, and PDA-based nullifier registry. Two programs deployed: the full ZK shielded pool and a lightweight Keccak-256 private cash voucher system.
Selective disclosure for compliance, OFAC screening via TRM Labs, batch operations, audit key management, and configurable SaaS access tiers. Privacy with institutional-grade controls.