Private swap

Swap tokens without broadcasting the trade

Curvy Protocol settles your swap inside the Privacy Aggregator. The amount, the asset, the sender, and the recipient stay hidden from public observers. The privacy layer handles it, so you do not have to.

Encrypted Notes hide the amount and the asset on both sides of the swap

Public observers cannot link the asset you sold to the asset you received

View keys let you disclose a swap to an auditor without making it public

Independently audited and backed by the Ethereum Foundation and Starknet Foundation

What a private swap is

A private swap trades one token for another without putting the trade on a public ledger. On a normal DEX, the swap is visible the moment it lands. Anyone can read the asset you sold, the asset you bought, the size, and the price. A private swap removes that exposure.

Curvy Protocol runs the swap inside the Privacy Aggregator, a zero-knowledge pool on Arbitrum. Your position enters as an encrypted Note. The Note hides the amount and the asset. When the swap settles, public observers see activity in the pool but cannot tie your input to your output.

Private does not mean hidden from everyone. You hold the view key. You decide who sees a swap, and when. An auditor or an accountant can verify it. The public cannot.

Private swap in one call

Settle the swap inside the Privacy Aggregator. Encrypted Notes hide the amount and the asset.

import { CurvyClient } from "@curvy/sdk";

const curvy = new CurvyClient({
  curvyId: "satoshi.curvy.name",
});

// The swap settles inside the Privacy Aggregator.
// Encrypted Notes hide the amount and the asset.
await curvy.swap({
  from: "USDC",
  to: "WBTC",
  amount: "5000",
});

A public swap exposes your whole position

A normal DEX swap is a public broadcast. The chain records the asset you sold, the asset you bought, the amount, and the price. Anyone can link the new asset back to your wallet and its funding source. Searchers can read the trade before it settles and price around you.

Curvy Protocol settles the swap inside the Privacy Aggregator. Encrypted Notes hide the amount and the asset. The link between what you put in and what you take out is broken for public observers. Authorized parties can still reconstruct the swap with a view key.

How a private swap works

Four steps. The privacy layer carries the weight.

  1. 1

    Shield

    Your asset moves into the Privacy Aggregator as an encrypted Note. The Note hides the amount and the asset.

  2. 2

    Swap

    The trade settles inside the pool. The link between the asset you sold and the asset you bought stays broken for public observers.

  3. 3

    Unshield

    The output leaves the pool to a one-time address. Nothing ties it back to your funding source.

  4. 4

    Disclose on your terms

    A view key lets an authorized party reconstruct the swap without exposing it on a public explorer.

Assets you can swap privately

Move between stablecoins, major assets, wrapped tokens, and more, without publishing the trade.

ETH

Private swap ETH into a stablecoin or a wrapped asset without exposing the size.

WETH

Swap WETH privately while the amount stays inside an encrypted Note.

USDC

Private swap USDC for ETH or WBTC without a public trail.

USDT

Move USDT privately between assets and keep the balance off the public ledger.

WBTC

Private swap WBTC and break the link between your bitcoin exposure and your wallet.

UNI

Swap UNI privately without signaling your position to the market.

SOL

Private swap SOL alongside the other supported assets.

PATHUSD

Private swap PATHUSD without putting the trade on a public explorer.

Private swaps across the chains you use

Curvy Protocol is multichain. The Privacy Aggregator lives on Arbitrum. Assets on other supported chains bridge in through LI.FI, so a private swap can start from where your funds already sit.

Ethereum

Private swap on Ethereum with full stealth and Aggregator support.

Arbitrum

Arbitrum hosts the Privacy Aggregator, where every private swap settles.

Base

Private swap on Base with assets bridged into the Aggregator.

Optimism

Private swap on Optimism without leaving a public trade history.

Polygon

Private swap on Polygon across the supported assets.

BNB Smart Chain

Private swap on BNB Smart Chain through the same Aggregator.

Linea

Private swap on Linea with full support.

Gnosis

Private swap on Gnosis across the supported assets.

Stealth-address support is live on Starknet. Solana and Tempo are next.

Threat model

Chain analyst. Links the asset you sold to the asset you bought, then profiles your strategy.

MEV searcher. Reads the pending swap and prices around it before it settles.

Counterparty. Sees the address behind the trade and the history attached to it.

Funding source. Ties the asset you received back to a real identity.

Privacy primitives for swaps

PrimitiveWhat it hidesWhat it costs
Encrypted NotesAmount and assetProof generation
Privacy AggregatorInput-to-output linkA shielded balance to swap from
One-time addressesThe address that receives the outputKey management
View keysPublic trade historyA disclosure process you control

Private swap vs public swap

Public DEX swapPrivate swap
Trade sizeVisible to anyoneHidden in an encrypted Note
Assets tradedVisible to anyoneHidden in an encrypted Note
Input to output linkPublicBroken for public observers
Funding sourceTraceableNot linked to the output
Audit pathForced and publicOptional and key-gated
MEV exposureHighReduced

Frequently asked questions

What is a private swap?

Trading one asset for another while the amount, the asset, the sender, and the recipient stay unlinkable to public observers. You keep the ability to disclose the swap when you choose.

How is this different from a normal DEX swap?

A DEX swap publishes the input asset, the output asset, the amount, and the price. A private swap settles inside the Privacy Aggregator, so public observers cannot link the two sides.

Can I privately swap ETH for a stablecoin?

Yes. Private swap ETH into USDC or USDT, and the amount and the assets stay inside encrypted Notes.

Can I privately swap stablecoins?

Yes. Move between USDC and USDT without publishing the size or tying the balance to your wallet.

Which assets can I swap?

ETH, WETH, USDT, USDC, WBTC, UNI, SOL, and PATHUSD, across the supported chains.

Is a private swap multichain?

Yes. Curvy Protocol is multichain. Swaps settle in the Privacy Aggregator on Arbitrum, and assets from other supported chains bridge in through LI.FI.

Which chains does it work on?

Full support on Ethereum, Arbitrum, Base, Optimism, Polygon, BNB Smart Chain, Linea, and Gnosis. Stealth-address support is live on Starknet.

Is a private swap the same as anonymity?

No. You can hold an identity and still keep your swaps unlinkable to unauthorized observers.

Is a private swap a mixer?

No. A mixer pools funds with no disclosure path. Curvy Protocol gives you a view key, so you can prove a swap to an auditor when you need to.

Can a private swap be audited?

Yes. A view key lets finance or compliance reconstruct a swap without exposing it on a public explorer.

Does a private swap reduce MEV exposure?

It helps. Searchers cannot read the size or the assets of a swap settling inside the Privacy Aggregator, so there is less to price around.

How much does a private swap cost?

Curvy Protocol has no token and charges protocol fees instead. Fees are 0.1% to shield, 0.1% to aggregate, 0.2% to unshield.

Is Curvy Protocol non-custodial?

Yes. You keep your keys. Curvy Protocol never holds your assets.

Swap without leaving a public trail

Trade one asset for another while the swap stays unlinkable for public observers.