Compliance

Every trade on the record. Only the name is missing.

WiSP is not a place where money disappears. Every step on Solana is public: the shield, every position wallet and its every buy and sell, the withdrawal. Arrive from or leave to another chain and the swap that carries you is on record with the service that runs it. What the chain does not show is that they are all yours, and you can prove exactly that, to exactly whom you choose, whenever you need to.

What is public

More is on the record than you might expect. That is the design.

A vault hides the trade. WiSP hides the trader. The difference is what an auditor, an exchange or an investigator can read without asking anyone.

StepOn the public chainNot recorded on the chain

Shieldyour wallet → the pool, the amount, the timewhich wallet it funds next

Fund a positionthe pool → a fresh wallet, a standard amountwhich deposit it came from; your other wallets

Buy and sellthe wallet, the token, the amounts, the venue, the fee to our treasury and buyback wallet: like any tradethat the wallet is yours

Sweepthe wallet → the pool, the amountwhich wallet it funds next

Exitthe pool → the address you chose, the amountwhich deposits it came from

Arrive from another chaina swap solver → your funding wallet on Solana, the amount; on Bitcoin, Ether or USDC, your send to the swap addresson Zcash, a shielded send shows no amount and no sender

Withdraw to another chainthe pool → the swap address on Solana, the amount; a Bitcoin, Ether or USDC payout on its own chainon Zcash, a shielded payout shows no amount and no balance

A cross-chain arrival or payout is a swap through NEAR Intents, made from your browser. The service records the swap (amount, addresses, time), applies its own screening, and answers questions about a swap address. WiSP adds no server and no key to that path, and shows on screen which payouts are public and which are shielded.

Provable on your terms

Your history is yours to show. Nobody else can show it for you.

Prove a wallet is yours

Every position wallet is derived from your phrase at a published path. To show that a wallet, and therefore its whole public history, belongs to you, sign a message from it. The signature is checkable by anyone with the public wallet address, and it reveals nothing about your other wallets.

Howin the appKeys → any wallet → Sign a statement. Write your words, enter your password, and share three lines: the address, the statement and the signature. Verification needs only Solana's standard signature check; change one character and it fails.

Show your complete record

Your activity log and wallet map live in the encrypted vault on your device and in the backup you export. Every entry resolves to a public transaction on Solana, which anyone you show it to can confirm independently. Nothing in it depends on a WiSP server, so nothing in it can be altered by us or lost with us. The backup itself is full control of the account, phrase included: never hand it to anyone. Show the record instead.

HowActivity: each submitted entry names its public transaction, which an accountant or an auditor checks on any Solana explorer; a prepared or cancelled entry that never reached the chain has none. Keys → Sign a statement proves the wallet is yours. Keep the encrypted backup to yourself: it restores the whole account.

Trace a deposit to an exit

Shield and exit are public, and your log names which notes link them. For a tax return, an exchange's source-of-funds request or an investigation you choose to cooperate with, the proof is the pair of public transactions plus your log. If you arrived from or left to another chain, the swap record in the app joins the two chains and the swap service can confirm it. It is the same evidence a plain wallet would give, with one difference: the link comes from your log, which only you hold.

Who else couldNot from WiSP: it has no copy of your log, and the pool stores encrypted notes it cannot read. Public data (amounts, timing, the fee transfers, a swap's public status) can still be correlated by someone who tries.

Non-custodial, in the strict sense

We never hold it, so we cannot hold it back.

What WiSP is

A web application that runs in your browser.
A set of wallets derived on your device from your own phrase.
An interface to a shielded pool run by another team, with its own published controls.
Fee transfers, inside the transaction you sign, to a public multisig treasury and a public buyback wallet.

What WiSP is not

Not a custodian: no key, phrase, balance or deposit address of ours ever holds your funds.
Not an exchange: trades execute on Pump or through Jupiter, from your wallet.
Not a mixer we operate: the pool is Privacy Cash, used through its public program and SDK.
Not an account: there is no sign-up, no email, no KYC, no user list.

Safeguards

Built into the code, not written into a policy.

Public entry and exit on Solana

Every shield comes from a wallet that signed it in public, and every withdrawal lands at a public address through the pool's relayer. A cross-chain arrival or payout adds one named counterparty, the swap service, which keeps its own record and screening. There is no side door: no way in or out of the pool that an analyst cannot see.

WhereThe pool's program on Solana; the swap service's status record for a cross-chain leg.

Screening at the pool's edge

Exits from the pool are signed by the pool's relayer, which applies its own screening and can refuse a destination. The zero-knowledge proof binds the amount and the recipient, so the relayer can decline a withdrawal but never redirect one. WiSP adds no screening of its own and has no list.

WhereThe pool's own documentation

Issuer controls respected

Positions are ordinary wallets, so a token issuer's own powers apply as they would anywhere: a freezable token can be frozen by its issuer, a fee-on-transfer token charges its fee. WiSP flags both before you buy and never removes or bypasses them.

WhereThe token's own program; shown on the buy receipt.

Standard sizes, no hidden amounts

Positions are funded at standard sizes so wallets look alike, which protects you from being singled out. It also means there is no mechanism for moving an unusual amount quietly: every funding is a public transfer of a visible, standard amount.

WhereThe pool → wallet transfers, on chain.

Acceptable use

What WiSP is for, and what it is not.

Use WiSP to

Trade without a bot reading your main wallet as it happens.
Keep your entries, exits and sizes out of a copy trader's feed.
Stop one wallet from being the public record of everything you have ever held.
Hold a position as its holder of record, for airdrops, tiers and gates, without tying it to the rest of you.
Show your own history to the people you choose, with proof.

Never use WiSP to

Move proceeds of crime or disguise where funds came from.
Evade sanctions, or act for a sanctioned person, entity or jurisdiction.
Finance terrorism or any other unlawful activity.
Commit fraud, theft or market manipulation, or trade on information you may not use.
Use it where the law of your place forbids it, or to avoid taxes you owe.

By using WiSP you confirm that you are not a sanctioned person and are not acting for one, that you are old enough to enter a binding agreement where you live, and that your legal and tax obligations are yours to meet. WiSP is a tool for privacy from the crowd, not from the law.

For investigators and exchanges

What we can do, and what the design makes impossible.

We can

Explain how WiSP works and which transactions are public, in detail and on the record.
Point to the public shield, funding, trade and withdrawal transactions on Solana, which exist whether or not we help, and name the swap service a cross-chain transfer went through.
Confirm the published treasury and referral addresses and what they receive.
Produce, under valid legal process, the only records we hold: referral codes and the public addresses attached to them, described on the Privacy page.

We cannot

Say which wallets belong to which person. We never hold the map.
Freeze, seize, pause or move anyone's funds. There is no key, program or switch of ours that could.
Produce request or IP logs. The server writes none.
Open an encrypted backup or recover a phrase. Only its owner can.

Questions

Straight answers.

Is this a mixer?

WiSP uses an existing shielded pool to separate funding from position wallets; it does not run a pool of its own. Unlike a mixer, your full history survives: your log links every deposit to every position and exit, and you can prove any of it on demand. The chain keeps the trades; you keep the key to the link.

Can WiSP block or freeze a user?

No. There is no program, admin key or list of ours in the money path. The pool's relayer can decline a withdrawal under its own screening, and the swap service can hold or refund a cross-chain transfer under its own; WiSP cannot ask either to, and cannot act on positions, which are your wallets.

Where is my transaction history kept?

On your device, encrypted, and in any backup you export. WiSP's server never receives it. The public half of every entry is on Solana permanently.

An exchange asks where my funds came from. What do I send?

The public exit transaction from the pool to your exchange address, the public shield transaction that funded the pool, and the entries from your log that connect them. If you left to another chain, add the swap record from the app and your receiving wallet's record on that chain. If they need to know a position wallet was yours, sign a message from it.

Do I owe taxes on trades made through WiSP?

Whatever you would owe on the same trades from a plain wallet. WiSP changes who can see your wallets, not what the trades are. Your log is built to make the return easier, not harder.

Where is WiSP available?

WiSP is a web application with no account and no geographic gate. It is your responsibility to use it only where that is lawful.

Hides the trader. Not the trade.

Security Privacy Home

last reviewed 2026-10-20 · this page explains how WiSP works and the rules for using it