Reference
Security model
What an observer can and cannot learn, and how to stay private.
What an observer can learn
| An observer on the chain | Plain transfer | Crepus v1 | Crepus Pool (planned) |
|---|---|---|---|
| Can link payments to your main wallet | Yes | No | No |
| Can see your total income | Yes | No | No |
| Can see who sent a payment | Yes | Yes | No |
| Can see the amount | Yes | Yes | No |
| Can link addresses you sweep together | n/a | Only if you merge them | No |
Keys
- Spending key: whoever holds it controls every payment to you. It is derived on your device and never sent anywhere.
- Viewing key: reveals every payment to you but cannot spend. Share it only with people you would show your statements to.
- Recovery: both come from a signature by your main wallet. Lose that wallet and you lose both.
Programs
- No owner, no admin instructions, no pause; upgrade authority revoked after deploy.
- No custody: funds move from sender to one-time address inside one instruction.
- An independent audit is scheduled for the Twilight phase; findings will be published.
Ways people deanonymise themselves
- Sweeping many one-time addresses together into one wallet.
- Funding a one-time address from your main wallet to pay fees.
- Sweeping immediately and always to the same destination.
- Posting a one-time address publicly next to your name.
Not a mixer
Crepus v1 does not pool funds and does not hide senders or amounts. Do not rely on it for more privacy than the table above shows.
Reporting a vulnerability
Email security@crepus.cash with details and a way to reproduce. Please give us reasonable time to fix before publishing.