Composable confidential finance

Financial agreements that compute while encrypted.

Vellum turns Zama confidential assets into investment products and private distributions: wrap assets, compute payoffs on encrypted terms, and reveal only what belongs to each holder.

Open registryLive on Sepolia · Zama FHEVM
The protocol, in one line
Seal
public asset → confidential twin
Compute
payoff on ciphertext
Reveal
only to the holder
01 · Seal · Registry

Every asset has a confidential twin.

Wrap a token from the registry and the balance moves from a public ERC-20 register to a sealed ERC-7984 register. The value remains present and transferable, but unreadable until the holder decrypts.

RegistrySepolia
Public domain
USDC
Seal
Private domain
cUSDC▓▓▓▓▓
Sealed · settled
Products / Capped Call Spread
Illustrative
Payoff shape · demonstrative figures
▓▓▓floorceiling
Strike
▓▓▓▓
Leverage
▓▓▓
02 · Compute · Products

The shape is public. The terms stay sealed.

A Vellum note publishes the solvency bounds while strike and leverage remain encrypted. Settlement computes the capped call-spread payoff directly on ciphertext.

03 · Reveal · Holder decrypt

The warm moment belongs to the holder.

The final payoff is the only warm state: an authorized holder signs an EIP-712 request and decrypts their own value. A non-holder still sees the seal.

Reveal
Illustrative
Your payoff · demonstrative
52.00cUSDT

Only the holder can reveal this value. Everyone else receives an ACL rejection and the payoff remains sealed.

Why FHE

On a public chain, computation used to mean exposure.

Public chain
Strikevisible
Leveragevisible
Counterpartiescan read terms
Vellum · FHE
Strike▓▓▓▓
Leverage▓▓▓
Payoffcomputes sealed
Technical proof · Sepolia · verified on-chain