Confidential payroll-style distribution with recipient-private reveals.
A sender commits sealed token allocations on-chain through the TokenOps SDK. Recipients open the receipt, sign once, and reveal only their own amount.
The recipient count is visible. Per-recipient amounts and the total stay as encrypted handles.
Define the distribution register.
Load recipient addresses.
Inspect sealed allocations.
Submit the encrypted proof.
Track the on-chain receipt.
Recipient decrypts locally.
Allocation dispersed on-chain. Recipient decrypts locally. Amounts are committed as per-recipient externalEuint64handles under one ZK proof — there is no plaintext total in the calldata, and no recipient can read another's amount.
If you received an allocation, connect the recipient wallet and reveal only your own amount. Everyone else's allocation stays sealed to you.
What is verified
- The recipient belongs to a distribution committed on-chain.
- Each allocation is sealed on-chain as an encrypted amount.
- A recipient decrypts only their own allocation, locally.
- Other recipients — and the committed total — stay hidden.