The privacy model
A private claim, not a public address exchange.
Hushlink coordinates a payment handoff around Umbra's encrypted UTXOs. The link unlocks the claim; the recipient supplies the final address.
What the chain sees
Deposit
Fresh claim
Encrypted state and a later claim are visible. The protocol is designed to reduce the direct on-chain link between the two endpoints.
Fund
The sender signs a deposit that creates an encrypted, self-claimable Umbra UTXO for the selected asset and amount.
Share
Hushlink puts the claim capability in the URL fragment. Browsers do not send that fragment in the normal HTTP request.
Claim
The recipient unlocks the encrypted UTXO and chooses a destination. A relayer can cover the network fee.
Be precise about privacy
What this protects—and what it does not.
Protocol layer
Umbra encrypts UTXO data and uses zero-knowledge proofs for valid private state transitions.
Link security
Anyone who receives the complete claim link may be able to claim it. Treat it like cash and use a secure channel.
Metadata boundary
Wallet providers, RPC services, browsers, devices, and message delivery can still expose metadata outside the protocol.
Current network
The present product configuration is for Solana devnet testing, not production custody or financial advice.
Ready to test the complete handoff on devnet.
Create private link