Private money,
public proof.
Issue, transfer, and burn shielded assets on Zcash. Confidential balances, supply anyone can audit. Three primitives, one ledger.
Transparent chains leak everything. Private chains can't prove anything. Zcash Shielded Assets give you both — existence, issuer, and total supply public; balances and transfers shielded.
Issue
Mint a custom shielded asset. Supply is public and auditable; finalization caps it for good.
Transfer
Move units between shielded addresses. Amount, asset, sender, receiver — all hidden.
Burn
Destroy units, reduce public supply. The off-board signal a bridge or auditor keys on.
Public supply, private balances
Prove exactly how much exists while every holder's balance stays shielded. Impossible on a transparent chain.
Selective disclosure
Viewing keys turn private into private with an audit hatch — disclose a scoped view to a bank or regulator on demand.
Proof-of-reserves, native
Public supply makes the on-chain half of reserves trustless and real-time — wrapped supply provably ≤ collateral.
Authority, separated
Issuance keys are distinct from spend keys. A compromised mint key can't move funds; FROST / HSM custody fits day one.
One circuit, any asset
Custom assets move with the same privacy as ZEC through one proving circuit — no per-asset cryptography to trust.
We wrap the protocol
No node to run, no halo2 to implement. A stable API over the audited Zcash stack that outlives the alpha churn.
anon.garden isn't only the base layer — we build the apps on it. Each one is issue, transfer, and burn composed with product logic and custody, sequenced by what's realistic on today's tooling.
Pay salaries in a stablecoin on a schedule, per-employee amounts hidden. Why ZSA: no public salary ledger.
Publish that on-chain supply is fully backed by attested reserves. Why ZSA: public supply makes the on-chain half trustless.
Send a USD-denominated shielded asset with amounts hidden — the "private USDC". Why ZSA: confidential transfers, auditable supply.
Large asset-for-asset swaps settling in one atomic tx. Why ZSA: the swap primitive works today; no leaked size or counterparties.
Lock on origin, mint a wrapped shielded asset, burn to redeem. Why ZSA: auditable wrapped supply against locked reserves.
Issuer mints points, users hold privately, redemption burns. Why ZSA: private balances, provable float, lowest complexity.
A thin, durable service over the Zcash reference stack. It encodes every consensus obligation so your product never has to. Only the middle tier is ours.
Base layer
Issue / transfer / burn API, key management, wallet sync, supply indexer, asset registry.
First product
A narrow, high-value back-office product — private payroll — end-to-end with a design partner.
Bridge
Custodial lock-and-mint with FROST custody and continuous proof-of-reserves, behind audit.
Composition
Open the platform: launchpad and a private DEX / OTC layer on the matured base.
The reference tooling is alpha, the consumer wallet layer is still hardening, and Zcash Shielded Assets are pre-mainnet — activation in NU7 is subject to an active coinholder vote. We build on testnet, keep the boundary portable, and treat mainnet as a milestone, not a dependency. Privacy here is a boundary, not a blanket: issuance, supply, and burns are public; balances and transfers are private.
Build private money on Zcash.
Request access to the base layer, or read the full architecture and application catalog. Invite-only while it hardens on testnet.