Hindsight is confidential USDC on Solana that stays sealed after Q-Day, the day a quantum computer can recover private keys.
CA : eDkmQUJkwydcjRYACE68Apa41kda7Z8MfSiAcsgpump
Each payment's amount is a 32-byte commitment on chain.
@PanicN0W@hindsightcash NARRATIVE: PARTLY REAL 50 · COIN: NOT CHECKED
A real mainnet program was upgraded today as the post says, but no payment has been seen working and the app…
Only the narrative was checked, NOT any coin. Send me the CA before you buy so I check both.
https://t.co/vxc9DCmods
Hindsight update, live on mainnet today.
Every payment now goes out in two signing requests, and each one leaves room for your wallet's own protections.
How a payment works now
1. The first transaction checks the range proof into a temporary account your wallet controls: 1,380 bytes.
2. The second carries the note and both 1,208-byte post-quantum envelopes in 3,060 of 4,096 bytes. It uses the checked proof and closes the temporary account, so its rent comes back to you in the same transaction.
Both are v1 transactions signed by you alone. I upgraded the program on mainnet for this, and the earlier one-transaction form still verifies.
Why two requests
Wallets add protections before they sign. Phantom inserts Lighthouse assertions that check your accounts after the transaction runs, 80 to 340 bytes of them, and raises the loaded-data limit. Every Hindsight request now keeps at least 800 bytes free for that.
Before your wallet opens
The app simulates every transaction first, so it never asks you to sign something the chain would reject. If your wallet needs SOL for the fee and the rent, it tells you before any prompt. If a payment stops after its first request, nothing is paid, and your Account page offers to close the temporary account and return its rent.
While I took a short nap, the agent finished a round of debugging, and we’re now deploying the update to mainnet.
Our end goal isn’t just USDC. It’s post-Q-Day privacy for every token.
While I took a short nap, the agent finished a round of debugging, and we’re now deploying the update to mainnet.
Our end goal isn’t just USDC. It’s post-Q-Day privacy for every token.
I kept Hindsight payroll in your browser: a CSV of payee and amount, every note sealed before the first transfer goes out, and the run kept encrypted on your device, so a stopped batch resumes with the same notes.
For anyone whose wallet won’t send transactions:
Most wallets today modify the transaction an app builds before submitting it, in the name of “safer” transactions.
For security, our app also checks any changes made to the transaction before approving it as the final one.
Because of this, some transactions couldn’t be signed.
We’re now testing the full flow against nearly every wallet on the market.
A fixed version is coming soon!
For anyone whose wallet won’t send transactions:
Most wallets today modify the transaction an app builds before submitting it, in the name of “safer” transactions.
For security, our app also checks any changes made to the transaction before approving it as the final one.
Because of this, some transactions couldn’t be signed.
We’re now testing the full flow against nearly every wallet on the market.
A fixed version is coming soon!