The privacy layer for Internet Computer assets

Shield your assets.Choose what the world sees.

STSH starts as a shielded asset on the Internet Computer. The same privacy system is built to protect other ICP assets, sit inside wallets, and keep the public books honest.

Shield assets. Transact privately. Settle on-chain.

Launch App Explore the protocol

The privacy layer

Private ownership.Public accountability.Shield assets. Transact privately.Settle on-chain.

Why it exists

Public chains make finances public by default. Most activity does not need to be.

Balances, counterparties and timing are visible to anyone who looks. That is useful for settlement. It is not useful for a treasury, a trading desk, a DAO payroll, or a person who simply does not want their holdings on a billboard.

STSH adds a private layer on top of public assets. Value can move without publishing who holds it or how notes connect. The protocol’s obligations and backing stay readable.

Confidential activity. Verifiable system. No hidden supply.

The story

The token is the first asset. The protocol is the product.

Launch proves the privacy layer with real STSH. From there the same design expands to other Internet Computer assets, into the wallets people already use, and into community governance. The longer horizon is auditable private treasury infrastructure, including Bitcoin, where an organisation can keep activity confidential and still produce the records it chooses to share.

Start with STSH. Prove the privacy layer. Then put that layer under the rest of the ecosystem.

Use

Three steps. Same ledger.

Public asset

Shield

Private note

Private spend

Public payout

Shield

Move a public asset into the pool. The deposit is visible. The note that represents your claim is not.

Transact

Hold privately. When you spend, the protocol checks the spend is valid. It does not need to see which note paid.

Settle

Pay out to a public account when you want the world to see a payment. The amount and recipient are public. The note that funded them is not.

See the full flow

Private where it matters. Public where it must be.

Private

Who owns a shielded note
Shielded balances
How notes connect
Which note funded a later payment

Public

Token supply
Protocol code and deployment
Deposits into escrow
Public payouts
Cryptographic proofs that a spend was valid
Whether the pool’s accounting holds

Future tooling can let an owner disclose information they control. That is a choice, not a launch feature, and not automatic compliance.

Who it is for

Three audiences. One layer.

Holders

Hold and move assets without turning every action into a public record.

Wallets and builders

SDK · roadmap

Privacy should become a feature of the app someone already uses, not a separate island they have to join. A public integration SDK is on the roadmap.

Treasuries and DAOs

Later layer

Confidential operations with books that can still be checked. Enterprise disclosure and policy controls are a later layer, not a launch claim.

Why trust it

Privacy should not require trusting hidden accounting.

Open protocol

The system is meant to be inspected, not believed.

Fixed supply rules

The ledger is the only authority that defines how many tokens exist. The pool cannot mint STSH.

Asset-backed private state

Shielded claims are claims on escrow, not a second money printer.

No double spend

Spent notes cannot be spent again.

You hold the keys

Proofs are built on your device. STSH does not hold a password that can spend your notes.

Named limitations

Your Internet Identity signs each payout, so the sender is public. Private send to another person comes later.

Healthy · certificate-verifiedreserves.stsh.fi ↗

Supply integrity: Holds. No tokens minted after genesis.
Pool holdings: 2,807.5 STSH on the public ledger
Freshness: Fresh · refreshed 3m ago · certificate-verified
Full solvency proof: Pending the pool attestation, which follows the external security review. Until then this proves supply integrity, pool holdings and freshness.

Technical Whitepaper

Token

STSH bootstraps the network. The privacy layer extends beyond it.

STSH is the first native asset of the protocol: the asset you shield at launch, the unit that seeds liquidity, and the economic alignment for later governance.

It is not the final scope. The architecture is built so additional Internet Computer assets can sit in their own isolated privacy pools.

Liquidity and trading details live on the Trade page.

Where it is going

Six phases. Status on every one.

01LaunchA working privacy system with real STSHLive

02GrowDeeper liquidity, more activity, a larger anonymity setNext

03ExpandPrivacy pools for other ICP-native assetsRoadmap

04IntegratePrivacy inside wallets and apps, via a public SDKRoadmap

05DecentraliseCommunity governance through SNSAfter the protocol is proven

06InstitutionaliseAuditable private Bitcoin and treasury infrastructureDirection

Launch the asset. Prove the system. Grow the private economy. Support other assets. Put privacy inside wallets. Hand the protocol to the community. Then commercialise the technology for treasuries.

Full roadmap

FAQ

The short version.

Need implementation detail? Visit the Technical page.

What is STSH?

STSH is an on-chain privacy pool. You shield STSH tokens, hold and transact privately inside the pool, and pay out to a public account with cryptographic proof that every step is valid.

Is STSH a mixer?

No. STSH is a zero-knowledge shielded pool with fixed note sizes and certified on-chain accounting. The pool cannot create tokens; it only moves escrow held on the public ledger between public and private claim states.

What stays public?

Total supply, every deposit and every public payout. So is the account that submits a private spend; that signature is permanent consensus history. What stays private is which note funded the payment, and everything else you hold.

Why use fixed denominations?

Standard note sizes make deposits hard to tell apart. STSH uses five: 1,000 · 10,000 · 100,000 · 1,000,000 · 10,000,000 STSH.

Enter

Enter the pool. Or inspect the protocol first.

Launch App How it works Technical Whitepaper

Live on mainnetSource frozenZK shielded pool