Who bought?
Nobody knows.
A token launchpad where you buy from one wallet and collect from another. A zero-knowledge proof shows you paid without showing which payment was yours, and Tor keeps your IP out of it too. The buyer stays classified.
Snipers can't copy a wallet they can't find.
Prove it without saying it
A zero-knowledge proof lets you convince someone a statement is true while telling them nothing else. On Shroud the statement is: “I know the secret behind one of the notes in this launch.”
When you pay, your browser makes two random numbers and sends only their hash. That hash joins a Merkle tree with everyone else's. To claim, your browser builds a Groth16 proof from your secret and the tree. The contract checks the math on-chain and pays out, but the proof never reveals which note is yours, so the wallet that paid and the wallet that receives can't be connected.
Each proof is tied to the receiving address, so nobody can copy it and redirect your tokens, and each note can only be claimed once.
Hide where you are, too
Zero-knowledge hides the link on-chain. It doesn't hide your internet connection: a website or RPC can still see the IP that asked for a proof or sent a claim. Tor routes your traffic through three relays so nobody sees both who you are and what you visited.
Shroud has no accounts, no cookies and no server holding your notes, so it works in Tor Browser as-is. For the strongest setup: open Shroud in Tor Browser, pay from your usual wallet, then claim from a fresh one in a new Tor identity.
A Shroud .onion address isn't live yet.
Pay in notes
Pay in 0.01, 0.1 or 1 ETH notes. Each one goes in as a hash in the launch's tree. Every note of a size looks identical, and the key to yours never leaves your browser.
One price
When the window closes, everyone fills at the same price: ETH raised ÷ 500M tokens. No first block. No bots. No bonding curve to front-run.
Claim privately
Your browser proves “I hold one of these notes” without saying which. Tokens go to any wallet you name. The paper trail ends at the tree.
Trade
The raise seeds a pool that's locked forever and opens at the sale price. Leftover pool tokens are burned. Nobody can pull the liquidity.
Open now
All launches →The contract isn't deployed on this network yet.