The shielded account
Encrypted note balances for stablecoins and tokenized stocks. Holdings, sizes, and cost basis stay hidden. Yield, payments, and proofs are designed to keep working.
Status: design. XEROPAY is being built. These pages describe intended behaviour. Nothing here is claimed as live mainnet. Details can change. See What's live.
A XEROPAY account looks like a neobank account: a handle, a balance, statements. The difference is where the balance lives. Instead of a public wallet address, it is a set of encrypted notes that only your spending key can open.
What's in the account
| Surface | What it does | Docs |
|---|---|---|
| Shielded balance | Stablecoins and tokenized stocks as encrypted notes | this page |
| Shield / unshield | Screened entry and exit, identity-separated ramps | Shield and unshield |
| Private yield | Pooled routing, credited per note when venues are live | Yield |
| Spend rails | Everyday spend from notes, with limits and a kill switch | Spend rails |
| Payments | Stealth handles, recurring, escrow, invoicing | Payments |
| Vaults | Sub-accounts and note consolidation | Vaults |
| Tokenized stocks | Corporate actions for shielded holders | Stocks |
| Keys | Spending key, passkeys, hardware, guardians, gas | Keys |
| Disclosure | Viewing keys and attestations | Compliance |
Linked pages live under Account, Spend, and Compliance in the sidebar.
What the explorer sees
| Public wallet | XEROPAY | |
|---|---|---|
| Balance | Exact, to the cent, for anyone | Encrypted notes; nothing to read |
| Positions | Every token and every size | Hidden, including tokenized stocks |
| Cost basis | Every fill, timestamped | Each buy can settle into a fresh note |
| Salary | Every incoming payment | One line inside a shielded payroll batch |
| Who you pay | Every counterparty, forever | A one-time stealth address |
| Yield | Every deposit and every claim | Credited inside the pool |
Client-side by design
Notes decrypt in your browser with your spending key. The dashboard, statements, and tax export are generated locally. The server is not supposed to see positions. See What XEROPAY sees.
Encrypted memos
Every transaction can carry a private bookkeeping label. Memos are encrypted with the note, readable only by you or by a viewing-key holder whose scope covers them.
Self-custodial
Your spending key is generated and kept on your device. XEROPAY cannot move funds, cannot decrypt notes, and cannot issue a viewing key on your behalf. Recovery goes through your guardians, not through us.