Hold stocks.
Nobody sees what.
The private layer for tokenised stocks on Solana.
Apple. Tesla. NVIDIA. ETFs.
Your portfolio shouldn't be a public wallet. The vault starts with SOL, in fixed amounts, with nobody holding a key to it.
Sign nothing · approve nothingYour portfolio
is public.
On a public chain, anyone with your address reads every position, every trade and every transfer — for as long as the chain exists.
Would you show this
to everyone?
| Asset | Name | Amount | Value |
|---|---|---|---|
| AAPLx | Apple | 120 | $40,639.20 |
| TSLAx | Tesla | 45 | $16,962.75 |
| NVDAx | NVIDIA | 300 | $67,869.00 |
| USDC | USD Coin | 18,250 | $18,246.35 |
| Total | $143,717.30 | ||
| Last transfer | 2,500 USDC → 9fQ…T4a | ||
Keep it sealed.
A vault hides the middle, not the edges. Send, hold the note, withdraw: three things happen, in order, and this site never asks you to approve a transaction.
Send
Send 0.1, 1 or 10 SOL to the program from a wallet you already use. Three sizes and no others, because an unusual amount is a name.
Hold the note
Your browser draws two random numbers and publishes only their fingerprint. That note is the only claim on the deposit — no account, no copy, no recovery.
Withdraw
Paste any address. A proof says you hold a note for one of the deposits, without saying which, and a relayer sends it.
One vault.
One crowd.
A withdrawal proves the note belongs to someone in the vault, and says nothing more. So privacy here is arithmetic: the more deposits of your size are waiting, the less your exit says. That also means the vault is weakest when it is new.
See the tickersTokenised equities already settle on Solana. The vault is designed for them later — it is not built for them yet.
Deposit sizes
0.1 · 1 · 10
SOL, and nothing in between. Fixed amounts make deposits look like each other.
Withdraw to
Any address
A relayer pays the fee, so the destination wallet needs nothing at all.
In the vault
Nothing
Not deployedNo program, no vault, no deposits. When there are, this figure is read from the chain.
Nobody holds
your funds.
Deposits land on a PDA: a Solana address computed from the program itself, with no private key behind it. None was ever possible. There is nothing to steal, leak, seize or walk away with.
■ EMBLEM — the mark of the vault, not a device you need: there is nothing to plug in, pair or sign on.
01
No private key exists for the vault address.
02
One way out a withdrawal with a valid proof.
03
The update authority gets revoked before mainnet.
Hold the token.
Open the vault.
Holding $ZKLEDGER opens the vault pages today, and its creator fees are what pay to put the program on mainnet. That is the whole arrangement until the deploy: you hold, the treasury fills, the program goes up.
Devnet
The program on Solana devnet, where SOL is free test money. Deposit, proof and withdrawal have to work end to end there before anything else happens.
Waiting for the deploy
The token is live. Its creator fees fill the treasury; that pays the rent Solana charges to store the program. Holding the token opens the app.
Mainnet
The program deployed, the three vaults open, and the update authority revoked — the code can no longer be replaced by anyone, us included.
| Item | Detail | Status |
|---|---|---|
| Ticker | $ZKLEDGER | Live |
| Contract | CA : pump | Live |
| Mint authority | Revoked | Done |
| Creator fees | Rent treasury for the program | Filling |
| Claim on deposits | None — notes only | By design |