The Loch zk-SNARK trusted setup ceremony is now open.
We're inviting anyone to contribute randomness to the cryptographic keys used to verify private transactions in Loch.
As long as even one participant contributes honestly and destroys their secret randomness, nobody can use the setup to forge proofs.
It takes about a minute to contribute.
https://t.co/uuwRA1vm2G
Loch v2 is now available on the Chrome Web Store.
If you already have Loch installed, it should update automatically. If it hasn't, please update it manually.
New users can install it directly from the store.
https://t.co/O2ViTojqx7
Once the public ceremony is complete, we'll upgrade the pools to use the new keys.
The goal is simple: nobody should have to trust us alone with the security of Loch's proof system.
The Loch zk-SNARK trusted setup ceremony is now open.
We're inviting anyone to contribute randomness to the cryptographic keys used to verify private transactions in Loch.
As long as even one participant contributes honestly and destroys their secret randomness, nobody can use the setup to forge proofs.
It takes about a minute to contribute.
https://t.co/uuwRA1vm2G
Want to participate? You'll need Node.js 22 or later.
We're using snarkjs, a JavaScript library for zk-SNARKs, to run the ceremony.
curl -fsSO https://t.co/MgDO41P3iL
npm install [email protected]
node contribute.mjs --name "your handle"
Once you're done, share the hashes it prints.
Loch doesn't charge any additional transaction fees.
you pay 0.0014 SOL or 0.20 USDC per private transaction, just enough to cover the relayer's costs. nothing added on top.
it's all paid directly from your shielded balance, so you don't need SOL in your public wallet to cover gas.
did you know you can keep Loch open in a separate browser tab?
just open the wallet dropdown and click "Open in a tab."
that way, you can use Loch without having to reopen the extension every time.
Loch v0.2.0 is available for manual installation now.
The Chrome Web Store update is still under review. If you installed Loch through the store, it'll update automatically once approved.
For now, you can get the latest version at https://t.co/u0WO7tUmxR.
Loch v2 is now live on Solana.
Here's what's new in v0.2.0:
- SOL and USDC now share one shielded pool
- Private transfers hide which token was sent
- Swap SOL and USDC inside Loch through Jupiter
- Each payment code gets its own stealth address
- Viewing keys let you share activity without giving up control of your funds
Install v0.2.0: https://t.co/R6Z5n66pw4
You can now prove what you hold or receive without giving anyone access to your wallet.
Just share a viewing key and they can verify it at https://t.co/uuwRA1vm2G.
A full viewing key shows your balance and transaction history. An incoming-only key shows what you've received.
Both are read-only. Nobody holding these keys can spend your funds.
Loch v2 is on the way.
We're adding quite a few things in v0.2.0, but the idea stays the same. A private balance inside the Solana wallet you already use, whether that's Phantom, Solflare, or Backpack. No new wallet or seed phrase needed.
Here's what we're working on:
1. Multi-token privacy
SOL and USDC will share the same private pool. When you make a private transfer, the sender, receiver, amount, and even which token was sent will be hidden.
2. Private swaps
You'll be able to swap SOL and USDC directly from your Loch balance through Jupiter, without withdrawing first.
The swap happens in one transaction. The trade is visible on chain, but your wallet isn't linked to it.
3. Stealth receiving
Each payment code gets its own address. You can create and share as many as you want, and nobody can tell those addresses belong to the same person.
4. Viewing keys
Need to share your transaction history with an accountant or auditor? You can give them read-only access to everything or just incoming payments.
They can see the activity you allow, but they can't move your funds.
5. Better pay links
Pay links will work with the new payment codes, so anyone can send you a private payment through a simple link.
6. A much larger private pool
We're increasing capacity from around 524,000 transactions to 16.7 million.
7. Easy migration from v1
Nothing happens to your existing private balance. It stays where it is and remains spendable. When you're ready, you can move it to v2 with one tap.
We're also changing how transaction fees work. Gas will be paid from your private balance, so your public wallet won't need to cover it.
All of this is coming in Loch v0.2.0.
The Chrome Web Store is currently serving Loch v0.1.4, while v0.1.5 is already available through manual installation at https://t.co/R6Z5n65RGw.
Chrome Web Store updates usually take about a day longer due to the review process, so manual installs will generally be one version ahead.
If you want the latest fixes, you can install v0.1.5 manually. Otherwise, the Web Store will update automatically once approved.
being able to verify transactions is one of the best things about blockchains. but that doesn't mean everyone needs to see who you're paying or how much you hold.
with zero-knowledge proofs, transactions can still be verified without exposing all those details.
that's a big part of what we're building with Loch.
solana is fast and cheap, but anyone can still look up your wallet and see where your money comes from, who you pay, and how much you hold.
we built Loch so you can keep using the same Solana wallet, but with a shielded SOL balance for private transfers.
you shouldn't have to make your entire financial activity public just to use solana.
The Phantom warning when diving in is finally fixed in Loch v0.1.5.
You can install the update manually for now. Download the latest version and follow the installation steps at https://t.co/u0WO7tUmxR
Loch is still a desktop extension, so we haven't tested proof generation on phones yet. Mobile is on our roadmap, and we know performance is going to matter a lot there.
On desktop, generating a proof takes around a second, all on your own device. The circuit is pretty small at 12.7k constraints, so that's a good start for mobile. We just don't want to make any claims until we've actually tested it on phones.
For the trusted setup, Phase 1 uses Hermez's public Powers of Tau, which had many contributors. Phase 2 is a dev setup we ran ourselves for testing. We still need to replace that with a public multi-party ceremony. As long as one participant is honest and destroys their secret contribution, the setup remains secure.
@lochlayer 256 byte groth16 proofs made on device with the spending key never leaving is the right call. how long does proving take on a mid range phone tho? that's usually where private payments lose normal users lol. and who ran the trusted setup?
we've been brainstorming with the team on how to bring Loch to mobile.
still figuring out the best way to make it work, but we want the same privacy experience you get on desktop, right on your phone.
nothing to announce yet, just something we're working through.