Private swap
Swap tokens without broadcasting the trade
Curvy Protocol settles your swap inside the Privacy Aggregator. The amount, the asset, the sender, and the recipient stay hidden from public observers. The privacy layer handles it, so you do not have to.
Encrypted Notes hide the amount and the asset on both sides of the swap
Public observers cannot link the asset you sold to the asset you received
View keys let you disclose a swap to an auditor without making it public
Independently audited and backed by the Ethereum Foundation and Starknet Foundation
What a private swap is
A private swap trades one token for another without putting the trade on a public ledger. On a normal DEX, the swap is visible the moment it lands. Anyone can read the asset you sold, the asset you bought, the size, and the price. A private swap removes that exposure.
Curvy Protocol runs the swap inside the Privacy Aggregator, a zero-knowledge pool on Arbitrum. Your position enters as an encrypted Note. The Note hides the amount and the asset. When the swap settles, public observers see activity in the pool but cannot tie your input to your output.
Private does not mean hidden from everyone. You hold the view key. You decide who sees a swap, and when. An auditor or an accountant can verify it. The public cannot.
Private swap in one call
Settle the swap inside the Privacy Aggregator. Encrypted Notes hide the amount and the asset.
import { CurvyClient } from "@curvy/sdk";
const curvy = new CurvyClient({
curvyId: "satoshi.curvy.name",
});
// The swap settles inside the Privacy Aggregator.
// Encrypted Notes hide the amount and the asset.
await curvy.swap({
from: "USDC",
to: "WBTC",
amount: "5000",
});A public swap exposes your whole position
A normal DEX swap is a public broadcast. The chain records the asset you sold, the asset you bought, the amount, and the price. Anyone can link the new asset back to your wallet and its funding source. Searchers can read the trade before it settles and price around you.
Curvy Protocol settles the swap inside the Privacy Aggregator. Encrypted Notes hide the amount and the asset. The link between what you put in and what you take out is broken for public observers. Authorized parties can still reconstruct the swap with a view key.
How a private swap works
Four steps. The privacy layer carries the weight.
- 1
Shield
Your asset moves into the Privacy Aggregator as an encrypted Note. The Note hides the amount and the asset.
- 2
Swap
The trade settles inside the pool. The link between the asset you sold and the asset you bought stays broken for public observers.
- 3
Unshield
The output leaves the pool to a one-time address. Nothing ties it back to your funding source.
- 4
Disclose on your terms
A view key lets an authorized party reconstruct the swap without exposing it on a public explorer.
Assets you can swap privately
Move between stablecoins, major assets, wrapped tokens, and more, without publishing the trade.
ETH
Private swap ETH into a stablecoin or a wrapped asset without exposing the size.
WETH
Swap WETH privately while the amount stays inside an encrypted Note.
USDC
Private swap USDC for ETH or WBTC without a public trail.
USDT
Move USDT privately between assets and keep the balance off the public ledger.
WBTC
Private swap WBTC and break the link between your bitcoin exposure and your wallet.
UNI
Swap UNI privately without signaling your position to the market.
SOL
Private swap SOL alongside the other supported assets.
PATHUSD
Private swap PATHUSD without putting the trade on a public explorer.
Private swaps across the chains you use
Curvy Protocol is multichain. The Privacy Aggregator lives on Arbitrum. Assets on other supported chains bridge in through LI.FI, so a private swap can start from where your funds already sit.
Ethereum
Private swap on Ethereum with full stealth and Aggregator support.
Arbitrum
Arbitrum hosts the Privacy Aggregator, where every private swap settles.
Base
Private swap on Base with assets bridged into the Aggregator.
Optimism
Private swap on Optimism without leaving a public trade history.
Polygon
Private swap on Polygon across the supported assets.
BNB Smart Chain
Private swap on BNB Smart Chain through the same Aggregator.
Linea
Private swap on Linea with full support.
Gnosis
Private swap on Gnosis across the supported assets.
Stealth-address support is live on Starknet. Solana and Tempo are next.
Threat model
Chain analyst. Links the asset you sold to the asset you bought, then profiles your strategy.
MEV searcher. Reads the pending swap and prices around it before it settles.
Counterparty. Sees the address behind the trade and the history attached to it.
Funding source. Ties the asset you received back to a real identity.
Privacy primitives for swaps
| Primitive | What it hides | What it costs |
|---|---|---|
| Encrypted Notes | Amount and asset | Proof generation |
| Privacy Aggregator | Input-to-output link | A shielded balance to swap from |
| One-time addresses | The address that receives the output | Key management |
| View keys | Public trade history | A disclosure process you control |
Private swap vs public swap
| Public DEX swap | Private swap | |
|---|---|---|
| Trade size | Visible to anyone | Hidden in an encrypted Note |
| Assets traded | Visible to anyone | Hidden in an encrypted Note |
| Input to output link | Public | Broken for public observers |
| Funding source | Traceable | Not linked to the output |
| Audit path | Forced and public | Optional and key-gated |
| MEV exposure | High | Reduced |
Frequently asked questions
What is a private swap?
Trading one asset for another while the amount, the asset, the sender, and the recipient stay unlinkable to public observers. You keep the ability to disclose the swap when you choose.
How is this different from a normal DEX swap?
A DEX swap publishes the input asset, the output asset, the amount, and the price. A private swap settles inside the Privacy Aggregator, so public observers cannot link the two sides.
Can I privately swap ETH for a stablecoin?
Yes. Private swap ETH into USDC or USDT, and the amount and the assets stay inside encrypted Notes.
Can I privately swap stablecoins?
Yes. Move between USDC and USDT without publishing the size or tying the balance to your wallet.
Which assets can I swap?
ETH, WETH, USDT, USDC, WBTC, UNI, SOL, and PATHUSD, across the supported chains.
Is a private swap multichain?
Yes. Curvy Protocol is multichain. Swaps settle in the Privacy Aggregator on Arbitrum, and assets from other supported chains bridge in through LI.FI.
Which chains does it work on?
Full support on Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Smart Chain, Linea, and Gnosis. Stealth-address support is live on Starknet.
Is a private swap the same as anonymity?
No. You can hold an identity and still keep your swaps unlinkable to unauthorized observers.
Is a private swap a mixer?
No. A mixer pools funds with no disclosure path. Curvy Protocol gives you a view key, so you can prove a swap to an auditor when you need to.
Can a private swap be audited?
Yes. A view key lets finance or compliance reconstruct a swap without exposing it on a public explorer.
Does a private swap reduce MEV exposure?
It helps. Searchers cannot read the size or the assets of a swap settling inside the Privacy Aggregator, so there is less to price around.
How much does a private swap cost?
Curvy Protocol has no token and charges protocol fees instead. Fees are 0.1% to shield, 0.1% to aggregate, 0.2% to unshield.
Is Curvy Protocol non-custodial?
Yes. You keep your keys. Curvy Protocol never holds your assets.
Swap without leaving a public trail
Trade one asset for another while the swap stays unlinkable for public observers.