Private yield routing
Shielded deposits are designed to pool into real venues and come back per note. We will publish rates with the venues, not before.
The shielded account
A bank account the block explorer can't read
Encrypted note balances for stablecoins and tokenized stocks. Holdings, sizes, and cost basis stay hidden. Yield, payments, and proofs are designed to keep working.
Screened at the edge, then encrypted notes.
Four things a bank account does — from a balance nobody else can see.
01 Shield
Money comes in through a licensed ramp or a bridge, can be screened at the edge, and lands as notes tied to your spending key.
02 Hold
Notes can earn in the background and split into vaults. Idle balance is designed to sweep without a public deposit trail.
03 Spend and pay
Payments go to stealth addresses, on a schedule if you want, with nothing repeating on-chain.
04 Prove
Hand an accountant a viewing key scoped to a period, or a lender a proof of funds. Both expire. Both can be pulled early.
What a public wallet publishes — and what this account hides
| Public wallet | XEROPAY | |
|---|---|---|
| Balance | Exact, for anyone | Encrypted notes; nothing to read |
| Positions | Every token and size | Hidden, including tokenized stocks |
| Cost basis | Every fill, timestamped | Each buy can settle into a fresh note |
| Salary | Every incoming payment | One line inside a shielded batch |
| Who you pay | Every counterparty, forever | A one-time stealth address |
| Yield | Every deposit and claim | Credited inside the pool |
Hiding your balance should cost you nothing
Auto-sweep
Idle balance above a threshold can move into the yield pool on its own.
Private DCA
Scheduled buys into tokenized stocks, each fill settling into a fresh note.
Spend from shielded balance
The account is built so everyday spend can settle from notes you control — with per-device limits, freeze, and a kill switch. Card networks and wallets will be listed here when issuance is real.
Pay without leaving a pattern
Stealth handles
A fresh receiving address per payment, so a shared name cannot be scraped for a balance.
Private recurring
Rent, retainers, and subscriptions without a repeating on-chain cadence.
Shielded escrow
Amount and counterparty stay hidden until release.
Time-decorrelated exits
Unshields can be split and staggered so timing does not match them to a shield.
Invoicing
Send a link. Arrival is designed to shield without publishing the amount.
Identity-separated ramps
Licensed partners hold KYC. XEROPAY is not supposed to hold both halves of that link.
Self-custodial, and still recoverable
Spending key on device
XEROPAY cannot move funds or decrypt notes on your behalf.
Guardians and passkeys
A lost device is not designed to be a lost account.
Scoped viewing keys
Read-only, dated, revocable. No master key.
Local tax export
CSV or PDF generated from a viewing key on your machine.