Skip to content
stealthmode

Docs

How the desk works

Everything the desk does, in the order you meet it. If you only read one part, read Hidden and public.

The short version

Stealth Mode is an OTC desk. Two wallets that already agree on a price swap a coin for SOL in one Solana transaction, built on Helius Privacy Rings. The chain records that the two wallets made a deal. It does not record the coin, the size or the price.

  1. Make an account. One click. The desk makes a new Solana wallet in your browser.
  2. Fund it and shield. Send it what you want to trade, then move that into your stealth balance.
  3. Make a deal, or open one. The maker sets the terms and sends a link. The taker opens it and presses Take deal.
  4. Unshield. Move what you received to any wallet, whenever you like.

Once the taker presses the button, the swap takes a few seconds.

Your stealth account

A stealth account is an ordinary Solana wallet with one difference: its key is made in your browser and stays there. The desk has no server-side wallet and no copy of your key.

You need one because Privacy Rings uses a new Solana transaction format that wallet extensions such as Phantom cannot sign yet. So the desk signs with this wallet. You fund it like any other address.

It holds two balances

  • Wallet. Normal, public Solana balances. This is where deposits arrive and where network fees are paid from.
  • Stealth. What you have shielded into the Privacy Rings pool. Deals are paid from here and paid into here.

Back up the key first

The key exists only in this browser. Clear the browser data without a backup and the account is gone, with everything in it. Nobody can restore it.

Open Key and security in the account panel, press Show key and store it in a password manager. It is a standard Solana secret key, so you can import it into Phantom and reach the wallet balance from there.

Lock it with a passphrase

Optional. With a passphrase set, the key is stored encrypted and the desk asks for the passphrase each time you open it. Use this on a computer other people can reach. The passphrase is not a backup. It only protects the copy in this browser.

Shielding

Shielding moves SOL or a coin from your wallet balance into your stealth balance. Unshielding moves it back out, to your own wallet or straight to another address.

  1. Copy the deposit address from the account panel and send funds to it from any wallet or exchange.
  2. Press Shield next to the asset and pick an amount.
  3. The stealth balance updates once Solana confirms it, usually within a few seconds.
Shielding and unshielding are public. Anyone can see which wallet moved which coin and how much, in or out of the pool. What happens between a shield and an unshield is the private part.

Keep about 0.005 SOL unshielded. Network fees are paid from the wallet balance, and the desk leaves that much behind when you press Max.

If you are short when you make or take a deal, the desk offers to shield the missing amount for you as part of the same button press.

Making a deal

You are the maker when you set the terms.

  1. You give. Pick the asset and the amount. It has to be in your stealth balance, or in your wallet so the desk can shield it.
  2. You get. Pick the asset and the amount you want back. For a coin you do not hold, paste its address from pump.fun or Solscan.
  3. Open for. One hour, six hours or a day. After that the deal expires by itself.
  4. Note. Optional, up to 140 characters. It is sealed with the deal.
  5. Press Create deal, copy the link and send it in a private chat.

The form shows the price your two amounts imply and, when the coin is listed somewhere, how that compares with the market. That line is there to catch a typo. A missing or extra zero is the most common way to lose money in an OTC deal.

Keep the deal room open

Your browser signs your half the moment someone takes the deal, so the deal room tab has to be open when they do. It can sit in the background. If it is closed, the taker's attempt times out after a minute and nothing moves.

Cancelling

Press Cancel deal at any time before someone takes it. Nothing is locked while a deal is open: your funds stay in your stealth balance and you can spend them elsewhere. If you do, the deal can no longer settle, so cancel it.

Taking a deal

You are the taker when you open a link someone sent you. The first person to take the deal gets it.

  1. Open the link. If you have no account in this browser, the deal room makes one.
  2. Read the terms. Check the coin address against the one you expect, character for character. Anyone can make a coin with the same name and picture.
  3. Clear the two checks: the amount you pay is in your stealth balance, and there is a little SOL in the wallet for the fee. The room tells you exactly what is missing and can shield it for you.
  4. Press Take deal and keep the tab open until it says Settled on Solana.
If the room says a coin is not listed anywhere it can see, slow down. It may be new, or it may be a copy. The desk cannot tell you which.

The taker pays the network fee for the swap, about 0.00002 SOL. The maker pays nothing.

The swap

There is no escrow and nobody sends first. Each browser builds a private transfer for its own half, the two halves are joined into one transaction, and that transaction needs both signatures.

Maker's half2,000,000 BAGfrom the maker's stealth balance to the taker's
Taker's half0.75 SOLfrom the taker's stealth balance to the maker's
One Solana transaction, two signaturesBoth halves land, or neither does
Example terms. Neither amount and neither coin appears in the transaction.

What happens after Take deal

  1. The taker proves their half. A private transfer of the agreed payment to the maker.
  2. The maker's browser checks it. It reads the taker's half and refuses unless it pays the agreed asset and amount. Then it adds its own half and signs.
  3. The taker's browser checks the result. Its own half must be untouched, the maker's half must pay exactly what the terms say, and nothing else may be added. Then it signs and sends.
  4. Solana confirms. Both stealth balances change in the same instant.

If a check fails, that browser stops and says why. A half that was never joined and signed by both sides is worth nothing to the other side, so walking away costs you nothing.

Time limits

  • The maker's browser has 60 seconds to answer a take.
  • The whole swap has 100 seconds to finish after that.
  • If either runs out, the attempt is dropped and the deal is open again.

Deal statuses

Open
The offer is in the room. Anyone with the link can take it until the timer runs out.
Settling
Someone took it and the two browsers are building the swap. It finishes or drops within about two minutes.
Settled
The swap is confirmed on Solana. It cannot be undone.
Cancelled
The maker closed it. Nothing moved.
Expired
Nobody took it in time. Nothing moved.
Gone
The room was deleted, 48 hours after it was made.

Hidden and public

Stealth Mode hides the deal. It does not hide the dealers. It is not a mixer and it does not make a wallet anonymous. Read this table before you rely on it.

What an observer of the chain can and cannot see
WhatThe chain sees
Which coin was traded
How much of it
What was paid for it
The terms and the note
Both wallet addressesPublic
Deposits into a stealth balancePublic
Withdrawals from a stealth balancePublic
The time and the network feePublic

How a deal can still be guessed

Deposits and withdrawals carry amounts. If your wallet shields 25 million of a coin and, an hour later, the wallet you just dealt with unshields 25 million of the same coin, an observer can put the two together. To make that harder:

  • Shield more than you trade, or shield in advance, so the deposit does not match the deal.
  • Do not unshield right after a deal. Leave it in the stealth balance for a while.
  • Unshield in different amounts from the ones you traded.
  • Remember that the two wallets are linked for good. If either is known to be yours, so is the link.

These habits make guessing harder. They do not make it impossible.

What it costs

The desk takes no fee. You pay Solana network fees, which the desk does not receive.

Network cost of each step
StepNetwork costPaid by
Shield SOL, or a coin the pool already knows0.000005 SOLYou
Shield a coin nobody has shielded beforeAbout 0.0033 SOL, once per coinWhoever is first
The swap0.00002 SOLThe taker
Unshield0.00001 SOLYou
Unshield a coin to a wallet that never held it0.0015 to 0.0021 SOL, depending on the coinYou
Desk feeNone

The two larger numbers are one-time Solana storage costs. The first is the pool registering a coin it has not seen. The second is the token account a wallet needs before it can hold a coin, the same rent you pay on any first transfer.

These were measured on the Privacy Rings program in November 2026. Solana fees can change.

What you trust

The desk is built so that you trust as little as possible. This is the full list of what is left.

  • The Privacy Rings program. Shielded funds sit in Helius' pool program on Solana, under your key. A bug there could affect them. Helius ships the toolkit as an early release.
  • The prover. The proofs for a private transfer are made by Helius' prover, which runs inside a sealed enclave. Your browser verifies the enclave before it sends anything and encrypts what it sends to it. The enclave does see the details of your transfer while it works.
  • This website. The code that holds your key is served by this site, as with any web wallet. Check the address bar says stealthmode.fun.
  • Your browser. A malicious extension can read anything a page can. Use a clean browser profile for larger amounts.
  • The other side, for nothing. You do not trust them to pay. You only choose whether their terms are good.
Stealth Mode is not audited. Start with a small deal, back up your key, and do not keep more in the account than you are trading.

If something goes wrong

This link is missing its key

The part after the # was cut off, usually by a chat app or a copy that stopped early. Ask for the whole link again. The key is 43 characters long.

This link does not open the deal

The room exists but the key does not fit it. Part of the link was changed on the way. Ask for it again.

I took the deal and nothing happened

The maker's browser has to answer within 60 seconds, so their tab must be open. If it is not, the attempt is dropped, nothing moves and the deal opens again. Tell them to open the deal room and try once more.

My deposit does not show up

Press Refresh in the account panel. A deposit from an exchange can take a few minutes to leave the exchange.

The pool does not accept this token

A few tokens have transfer rules the pool refuses. Those cannot be shielded, so they cannot be traded here.

Not enough SOL for the network fee

Fees are paid from the unshielded wallet balance. Keep about 0.005 SOL there. The desk leaves that much behind when you press Max.

I cleared my browser and the account is gone

With the key you saved: choose I already have a key and paste it. Your stealth balance comes back, because it lives on Solana and not in the browser. Without the key nobody can recover it, the desk included.

I forgot my passphrase

The passphrase only locks the copy of the key in this browser. Remove the account, then import the key you backed up.

A deal that is not Settled has moved nothing. There is no state in between.

Reference

Network
Solana mainnet
Pool program
ring1GaLCuJnkUMVkX2JeZLTTX17wKsV4fZmPVzXANW
Registry program
regy3WAeRXMYuMYxr5iK3Bf9Arr3PcxGxyzAddbiqDQ
Assets
SOL, pump.fun coins and most other Solana tokens, on both token programs
Deal encryption
AES-256-GCM, with the key carried in the link. Messages are signed with Ed25519.
Passphrase lock
PBKDF2 with 310,000 rounds, then AES-256-GCM
Offer lifetime
1, 6 or 24 hours
Room lifetime
48 hours
Swap size on chain
One transaction of about 1,700 bytes

Not affiliated with Helius or pump.fun. More short answers are under Questions.

That is the whole desk.

Open the desk