Swirl

A privacy-preserving fixed-denomination MNT pool using Tornado-style commit/withdraw, Poseidon hashing, and Noir ZK proofs.

[Swirl @swirlprotocol]

1/9 Revolutionizing privacy on the Mantle Network 🌊 Swirl is a ZK-powered private pool inspired by Tornado-style systems, but built with a modern stack: Noir + Poseidon + non-custodial design. This thread breaks down the architecture, usage, and security 👇
@Mantle_Official

[neylan @neylanxyz]

Proud of the work behind this. Swirl brings Tornado-style privacy to Mantle with a modern ZK stack (Noir + Poseidon) and a non-custodial design.

[Swirl @swirlprotocol]

@wallabyxyz_ @heronlancellot Built entirely during the Mantle Global Hackathon.
Grateful to @Mantle_Official and @HackQuest_ for supporting builders.

https://t.co/yXSHilqnwF

[Swirl @swirlprotocol]

7/9 ⚠️ RISKS & LIMITATIONS
• Losing the note = losing funds (non-custodial)
• Timing analysis may reduce privacy
• Anonymity set depends on active users
• Experimental — not production-ready yet

[Swirl @swirlprotocol]

Designed and built by
@wallabyxyz_ and @heronlancellot

[Swirl @swirlprotocol]

6/9 🛡️ SECURITY

• Owner cannot steal user funds
• Owner can: pause (emergencies), manage blacklist, withdraw protocol fees
• Contract uses OpenZeppelin (Ownable, Pausable, ReentrancyGuard)
• Poseidon contract must match the Noir circuit (publicly verifiable)

[Swirl @swirlprotocol]

1/9 Revolutionizing privacy on the Mantle Network 🌊 Swirl is a ZK-powered private pool inspired by Tornado-style systems, but built with a modern stack: Noir + Poseidon + non-custodial design. This thread breaks down the architecture, usage, and security 👇
@Mantle_Official

[Swirl @swirlprotocol]

6/9 ⚙️ TECHNICAL FLOW WITHDRAW:

Submits ZK proof + nullifierHash + recipient
Contract verifies the proof and checks the nullifier is unused
Sends 1 MNT to the recipient

[Swirl @swirlprotocol]

5/9 ⚙️ TECHNICAL FLOW DEPOSIT:

App generates secret + nullifier (locally)
Computes commitment = Poseidon(secret, nullifier) Sends the commitment to the contract Receives a note with (secret, nullifier, leafIndex)

[Swirl @swirlprotocol]

4/9 💰 ECONOMICS
• Denomination: 1 MNT (fixed)
• Protocol fee: 0.1 MNT • Total per deposit: 1.1 MNT Why fixed? If deposits had variable amounts, it would be trivial to correlate deposits and withdrawals by value.

[Swirl @swirlprotocol]

3/9 🔐 CRYPTOGRAPHY • Poseidon Hash: optimized for ZK circuits
• Merkle Tree (depth 20): up to 1,048,576 deposits
• Noir ZK Proofs: prove knowledge of a deposit without revealing which one
• Nullifiers: prevent the same deposit from being withdrawn twice

[Swirl @swirlprotocol]

2/9 📋 THE PROBLEM On the blockchain, everything is public. Anyone can see your balances, transactions, and behavioral patterns. Swirl solves this by allowing users to deposit MNT and withdraw to a different address with no cryptographic link between the operations.