Shielded Intents Protocol

███████╗ ██╗ ██████╗
██╔════╝ ██║ ██╔══██╗
███████╗ ██║ ██████╔╝
╚════██║ ██║ ██╔═══╝
███████║ ██║ ██║
╚══════╝ ╚═╝ ╚═╝

Shielded Intents Protocol

Privacy is not a feature. It's a right.

The privacy layer for cross-chain transactions via NEAR Intents + Zcash

One toggle to shield them all • Stealth addresses • Zero-knowledge proofs • Selective disclosure • Multi-chain support

🛡️ What is SIP?

SIP (Shielded Intents Protocol) brings HTTPS-level privacy to cross-chain transactions. Just as HTTPS encrypted the web without changing how users browse, SIP adds privacy to blockchain intents without changing how users swap.

HTTP    → HTTPS   (Web privacy upgrade)
Intents → SIP     (Blockchain privacy upgrade)

Stop exposing your financial activity. Start swapping privately.

🎥 Quick Preview

The Privacy Upgrade

❌ Public Intent (Everyone sees everything)

✅ Shielded Intent (Solvers see only what they need)

{
  from: "0x1234...",
  inputAmount: 10,
  inputToken: "SOL",
  outputToken: "ETH",
  recipient: "0x5678..."
}

Exposed:

🔴 Your wallet address
🔴 Exact amounts
🔴 Recipient address
🔴 Full transaction history

{
  intentId: "abc123",
  outputToken: "ETH",
  minOutput: 0.004,
  inputCommitment: "0xabc...",
  recipientStealth: "0xdef...",
  proof: "0x123..."
}

Protected:

✅ Sender hidden (commitment)
✅ Amount hidden (ZK proof)
✅ Recipient hidden (stealth address)
✅ Unlinkable transactions

Result: Solvers can fulfill your intent without knowing who you are or where the funds are going.

🎯 The Problem

Current cross-chain solutions expose everything about your transactions. This isn't just inconvenient — it's a security risk.

What's Exposed

Data Point	Visibility	Risk
Sender Address	Public	Targeted phishing, social engineering
Transaction Amount	Public	Front-running, MEV extraction
Recipient Address	Public	Surveillance, address clustering
Transaction History	Permanent	Financial profiling, discrimination

Real-World Consequences

Attack Vector	How It Works	Impact
Front-Running	Bots see your pending swap, execute first	You get worse price
MEV Extraction	Validators reorder txs to profit	Value extracted from you
Phishing	Attackers identify high-value wallets	Direct theft attempts
Surveillance	Exchanges/govts track all activity	Privacy violation
Price Discrimination	Services see your balance	Higher fees for wealthy users

The blockchain is a public ledger. Without privacy, it's a surveillance system.

💡 The Solution

SIP wraps cross-chain intents in a cryptographic privacy layer using battle-tested technology from Zcash and cutting-edge stealth address schemes.

How It Works

┌─────────────────────────────────────────────────────────────────┐
│                          USER                                    │
│                            │                                     │
│                            ▼                                     │
│  ┌─────────────────────────────────────────────────────────┐    │
│  │                      SIP SDK                             │    │
│  │  ┌─────────────┐ ┌─────────────┐ ┌─────────────────┐    │    │
│  │  │ Privacy     │ │ Stealth     │ │ ZK Proof        │    │    │
│  │  │ Toggle      │ │ Address Gen │ │ Generation      │    │    │
│  │  └─────────────┘ └─────────────┘ └─────────────────┘    │    │
│  └─────────────────────────┬───────────────────────────────┘    │
│                            │                                     │
│                            ▼                                     │
│  ┌─────────────────────────────────────────────────────────┐    │
│  │              SHIELDED INTENT LAYER                       │    │
│  │  • Pedersen commitments (hide amounts)                   │    │
│  │  • Stealth addresses (hide recipients)                   │    │
│  │  • ZK proofs (prove validity without revealing data)     │    │
│  └─────────────────────────┬───────────────────────────────┘    │
│                            │                                     │
│                            ▼                                     │
│  ┌─────────────────────────────────────────────────────────┐    │
│  │                 NEAR INTENTS ROUTER                      │    │
│  │  • Intent matching                                       │    │
│  │  • Solver network                                        │    │
│  │  • Cross-chain execution                                 │    │
│  └─────────────────────────┬───────────────────────────────┘    │
│                            │                                     │
│            ┌───────────────┼───────────────┐                    │
│            ▼               ▼               ▼                    │
│  ┌──────────────┐ ┌──────────────┐ ┌──────────────┐            │
│  │    Solana    │ │    Zcash     │ │   Ethereum   │            │
│  │              │ │  (Privacy    │ │              │            │
│  │              │ │   Backbone)  │ │              │            │
│  └──────────────┘ └──────────────┘ └──────────────┘            │
└─────────────────────────────────────────────────────────────────┘

Core Mechanisms

Mechanism	Purpose	Technology
Pedersen Commitments	Hide transaction amounts	`value * G + blinding * H`
Stealth Addresses	One-time recipient addresses	EIP-5564 style, secp256k1
ZK Proofs	Prove validity without revealing data	Zcash proving system
Viewing Keys	Selective disclosure for compliance	Derived key pairs

✨ Key Features

🔒 One-Click Privacy

Toggle between public and shielded modes with a single switch. No complex setup, no key management headaches.

🌐 Multi-Chain Support

Works across Solana, Ethereum, NEAR, and more. Privacy shouldn't be chain-specific.

📊 Three Privacy Levels

Level	Description	Use Case
`TRANSPARENT`	Standard public transaction	When privacy isn't needed
`SHIELDED`	Full privacy via Zcash pool	Personal transactions
`COMPLIANT`	Privacy + viewing key	Institutional/regulatory

👻 Stealth Addresses

Every transaction uses a fresh one-time address. No address reuse, no transaction linkability.

🔑 Viewing Keys

Selective disclosure for audits and compliance. Prove your transaction history without exposing it to everyone.

🛡️ MEV Protection

Hidden amounts and recipients mean front-runners can't extract value from your trades.

⚡ Zero UX Friction

Same swap interface you're used to. Privacy happens under the hood.

📦 Installation

# npm
npm install @sip-protocol/sdk

# pnpm
pnpm add @sip-protocol/sdk

# yarn
yarn add @sip-protocol/sdk

🚀 Quick Start

1. Initialize the SDK

import { SIP, PrivacyLevel } from '@sip-protocol/sdk';

const sip = new SIP({
  network: 'mainnet', // or 'testnet'
});

2. Create a Shielded Intent

const intent = await sip.createIntent({
  input: {
    chain: 'solana',
    token: 'SOL',
    amount: 10,
  },
  output: {
    chain: 'ethereum',
    token: 'ETH',
  },
  privacy: PrivacyLevel.SHIELDED,
});

3. Get Quotes & Execute

// Solvers compete to fill your intent
const quotes = await intent.getQuotes();

// Execute with the best quote
const result = await intent.execute(quotes[0]);

console.log(result.status);  // 'fulfilled'
console.log(result.txHash);  // null (shielded!)
console.log(result.proof);   // ZK proof of execution

4. Choose Your Privacy Level

// Public mode (standard intent, no privacy)
privacy: PrivacyLevel.TRANSPARENT

// Full privacy (via Zcash shielded pool)
privacy: PrivacyLevel.SHIELDED

// Privacy + audit capability (for institutions)
privacy: PrivacyLevel.COMPLIANT,
viewingKey: generateViewingKey()

🏗️ Architecture

Component Overview

sip-protocol/
├── apps/
│   └── demo/                 # Next.js demo application
│       ├── src/app/          # App router pages
│       └── src/components/   # UI components
├── packages/
│   ├── sdk/                  # @sip-protocol/sdk
│   │   ├── src/stealth.ts    # Stealth address generation
│   │   ├── src/intent.ts     # Intent builder
│   │   ├── src/privacy.ts    # Viewing key management
│   │   ├── src/crypto.ts     # Pedersen commitments
│   │   └── src/sip.ts        # Main client class
│   └── types/                # @sip-protocol/types
│       ├── src/intent.ts     # ShieldedIntent interface
│       ├── src/privacy.ts    # PrivacyLevel enum
│       └── src/stealth.ts    # Stealth address types
└── docs/                     # Documentation

Data Flow

User Input → Privacy Layer → Intent Creation → Solver Network → Execution
     │              │              │                 │             │
     │              ▼              │                 │             │
     │       ┌──────────┐         │                 │             │
     │       │ Generate │         │                 │             │
     │       │ Stealth  │         │                 │             │
     │       │ Address  │         │                 │             │
     │       └──────────┘         │                 │             │
     │              │              │                 │             │
     │              ▼              │                 │             │
     │       ┌──────────┐         │                 │             │
     │       │ Create   │         │                 │             │
     │       │ Pedersen │         │                 │             │
     │       │Commitment│         │                 │             │
     │       └──────────┘         │                 │             │
     │              │              │                 │             │
     │              ▼              │                 │             │
     │       ┌──────────┐         │                 │             │
     │       │ Generate │         │                 │             │
     │       │ ZK Proof │         │                 │             │
     │       └──────────┘         │                 │             │
     │              │              │                 │             │
     └──────────────┴──────────────┴─────────────────┴─────────────┘

📚 Packages

Package	Description	Status
`@sip-protocol/sdk`	Core SDK for creating shielded intents	✅ Active
`@sip-protocol/types`	TypeScript type definitions	✅ Active
`apps/demo`	Reference implementation and demo app	✅ Active

🗺️ Roadmap

Phase 1: Foundation ✅ Complete

✅ Core type definitions (ShieldedIntent, PrivacyLevel, StealthAddress)
✅ SDK architecture (SIP client, IntentBuilder)
✅ Stealth address generation (secp256k1, EIP-5564 style)
✅ Pedersen commitment implementation
✅ Demo application with comparison view
✅ Monorepo setup (pnpm + Turborepo)

Phase 2: Core Protocol 🔄 In Progress

✅ Zcash testnet RPC client
✅ Shielded transaction support
✅ Solver interface design
⏳ NEAR 1Click API integration
⏳ End-to-end shielded flow
⏳ Mock ZK proof generation

Phase 3: Integration 📋 Planned

Phase 4: Production 🚀 Future

🛠️ Tech Stack

Category	Technology	Purpose
Framework	Next.js 14 (App Router)	Demo application
Language	TypeScript (strict mode)	Type safety
Styling	Tailwind CSS + shadcn/ui	UI components
State	Zustand	Client state management
Monorepo	pnpm + Turborepo	Package management
Cryptography	@noble/curves, @noble/hashes	Stealth addresses, commitments
Deployment	Vercel	Hosting

💻 Development

Prerequisites

Node.js 18+
pnpm 8+

Setup

# Clone the repository
git clone https://github.com/RECTOR-LABS/sip-protocol.git
cd sip-protocol

# Install dependencies
pnpm install

# Start development
pnpm dev

Commands

pnpm dev        # Start development server (port 3000)
pnpm build      # Build all packages
pnpm lint       # Lint code
pnpm typecheck  # Type check

🤝 Contributing

We welcome contributions! Please see CONTRIBUTING.md for guidelines.

Areas for Contribution

Protocol improvements
SDK features
Documentation
Security audits
Chain integrations

🔐 Security

SIP is experimental software. Use at your own risk.

Zcash RPC Security

CRITICAL: Always use HTTPS/TLS when connecting to Zcash nodes in production.

The Zcash RPC client uses HTTP Basic Authentication, which transmits credentials in base64-encoded cleartext. Without TLS/HTTPS:

RPC credentials are vulnerable to network sniffing
All transaction data can be intercepted
Man-in-the-middle attacks are possible

Production Requirements:

✅ Use https:// URLs for Zcash RPC endpoints
✅ Configure zcashd with valid TLS certificates
✅ Store credentials in secure environment variables
✅ Use network-level access controls (firewall rules, VPCs)
❌ NEVER use HTTP in production
❌ NEVER hardcode credentials in source code

Example:

// ✅ Production (HTTPS)
const client = new ZcashRPCClient({
  host: 'https://your-node.com',
  port: 8232,
  username: process.env.ZCASH_RPC_USER,
  password: process.env.ZCASH_RPC_PASS,
})

// ⚠️ Development only (HTTP on localhost)
const testClient = new ZcashRPCClient({
  host: '127.0.0.1',
  port: 18232,
  username: 'test',
  password: 'test',
  testnet: true,
})

Reporting Security Issues

If you discover a security vulnerability, please report it responsibly:

Email: security@sip-protocol.xyz
Do NOT open public issues for security vulnerabilities

📄 License

MIT License — see LICENSE file for details.

🙏 Acknowledgments

SIP builds on the shoulders of giants:

Zcash — Privacy-preserving cryptocurrency and proving system
NEAR Protocol — Intent-centric blockchain infrastructure
EIP-5564 — Stealth address standard
@noble/curves — Audited cryptographic primitives
The broader privacy and cryptography research community

Built for the NEAR AI Intents Hackathon

Privacy is not a feature. It's a right.

Documentation · Demo · Report Bug

Name		Name	Last commit message	Last commit date
Latest commit History 109 Commits
.github		.github
packages		packages
.eslintrc.js		.eslintrc.js
.gitignore		.gitignore
CHANGELOG.md		CHANGELOG.md
CLAUDE.md		CLAUDE.md
CONTRIBUTING.md		CONTRIBUTING.md
LICENSE		LICENSE
README.md		README.md
ROADMAP.md		ROADMAP.md
package.json		package.json
pnpm-lock.yaml		pnpm-lock.yaml
pnpm-workspace.yaml		pnpm-workspace.yaml
tsconfig.json		tsconfig.json
turbo.json		turbo.json
typedoc.json		typedoc.json

License

sip-protocol/sip-protocol

Folders and files

Latest commit

History

Repository files navigation

Shielded Intents Protocol

Table of Contents

🛡️ What is SIP?

🎥 Quick Preview

The Privacy Upgrade

🎯 The Problem

What's Exposed

Real-World Consequences

💡 The Solution

How It Works

Core Mechanisms

✨ Key Features

🔒 One-Click Privacy

🌐 Multi-Chain Support

📊 Three Privacy Levels

👻 Stealth Addresses

🔑 Viewing Keys

🛡️ MEV Protection

⚡ Zero UX Friction

📦 Installation

🚀 Quick Start

1. Initialize the SDK

2. Create a Shielded Intent

3. Get Quotes & Execute

4. Choose Your Privacy Level

🏗️ Architecture

Component Overview

Data Flow

📚 Packages

🗺️ Roadmap

Phase 1: Foundation ✅ Complete

Phase 2: Core Protocol 🔄 In Progress

Phase 3: Integration 📋 Planned

Phase 4: Production 🚀 Future

🛠️ Tech Stack

💻 Development

Prerequisites

Setup

Commands

🤝 Contributing

Areas for Contribution

🔐 Security

Zcash RPC Security

Reporting Security Issues

📄 License

🙏 Acknowledgments

About

Topics

Resources

License

Contributing

Uh oh!

Stars

Watchers

Forks

Releases 2

Packages 0

Languages

Packages