How it works
A slower last step for every swap
zkSwap is a proof-aware swap interface. It helps you and your tools compare routes, read costs, understand token permissions and review a transaction before the wallet asks for approval.
The product has no pool, no router and no balance of yours. It reads quotes the venues already offer, reads the allowances you already gave, and shows you the bytes before you sign them. The one contract of ours keeps a public book of access groups, and it is never in a swap's path.
//01
venues
Route comparison
Uniswap v2, v3, v4 and Pons curves, all quoted at one block.
//02
layers
Permission check
The token allowance, and Permit2 with its expiry where a route uses it.
//03
simulation
Transaction review
Decoded from the raw bytes, then run once against the newest block.
//04
public inputs
Access proof
Root, scope, epoch, nullifier and wallet. Everything else stays in your browser.
What runs today
Real means you can use it now
Everything in the left list works on this site. Everything in the right list does not exist yet, and says so wherever it comes up.
Route comparison RUNS TODAY
Quotes through eth_call on Uniswap v2, v3, v4 and Pons, with fee, cost and minimum.
Permission check RUNS TODAY
Current allowance, spender identity, exact approve by default, unlimited only by your choice.
Transaction review RUNS TODAY
Decoded calldata and an eth_call simulation before the wallet prompt. You sign a direct venue transaction.
Access proof RUNS TODAY
A Noir circuit proved in a browser worker, in a practice group until the book is deployed. A group-gated desk opens in this interface.
Access book RUNS TODAY
ZkswapAccessBook: per-group admin, roots, per-epoch nullifiers. Live on Robinhood Chain with verified source.
Gated pools PLANNED
Pools that enforce a proof on chain. Today the gate is only in this interface.
Developer API PLANNED
Routes and checks as an API for other builders.
$ZKSWAP utility PLANNED
Any use of the token inside the product. It has none today.
An access proof does not make a swap anonymous. On an EVM chain, your address, the tokens, the amounts and your activity stay visible.
The proof, briefly
What is proved, and what is not
The circuit proves one sentence: I know a secret for an entry in the tree under this root, the entry has not expired at this epoch, this nullifier belongs to my secret, this group and this epoch, and this wallet is the one recording it. The book checks the proof, refuses a repeated nullifier, and records the wallet.
It does not prove that you are a person, that the curator was honest, or anything at all about the swap you make next.
Try it with a practice group. A real proof, no wallet needed.
Open access proof