What is Veilpay and how does it work?

Veilpay is a non-custodial crypto vault that uses EIP-5564 stealth addresses and zero-knowledge proofs to enable private payments across 7+ blockchains including Stellar, Monero, Zcash, Ethereum, Solana, Base, and Arbitrum. Your private keys never leave your device.

What are stealth addresses and how do they provide privacy?

Stealth addresses (EIP-5564) generate a unique, one-time address for every incoming transaction, breaking on-chain linkability. This ensures your public financial history remains private on transparent networks by preventing transaction tracing.

How do zero-knowledge proofs enhance privacy?

Zero-knowledge proofs allow us to mathematically verify that a payment is valid without ever revealing the sender, receiver, or transaction amount to the public ledger. Your transactions remain cryptographically private from end to end.

Is Veilpay non-custodial and does it require KYC?

Yes, Veilpay is fully non-custodial. Your private keys never leave your device, and no KYC (Know Your Customer) verification is required. You maintain complete control over your assets.

Which blockchain networks does Veilpay support?

Veilpay supports privacy-native assets like Stellar, Monero, and Zcash, alongside transparent chains including Ethereum, Solana, Base, Arbitrum, and others. All blockchains are integrated into a single unified interface.

Security model

Veilpay is designed around explicit trust boundaries.

User device boundary

Holds wallet mnemonic material in SecureStore.
Performs transaction signing.
Displays user confirmation.
Must not leak private keys or raw signatures to logs or backend APIs.

Backend boundary

Proxies infrastructure RPC calls while keeping provider credentials server-side.
Runs chain-indexing workers and queues.
Serves fiat-ramp and health endpoints.
Must not receive user mnemonics, private keys, or raw signatures.

Chain boundary

The underlying chain is the source of transaction finality. The app tracks confirmation through chain-specific status polling rather than assuming a single client-side screen is authoritative.

Privacy / ZK boundary

Zero-knowledge pools and circuits introduce additional trust surfaces: deployment integrity, ceremony integrity (SEC-008), independent review (SEC-011), private-state recovery, and incident response. Private XLM is available on Stellar Mainnet in supported releases, but the app still fails closed when required configuration, synchronization, or transaction readiness cannot be verified. Availability is not an assertion that an external audit is complete. See Ceremony and external audit gates.