Valon is live on Solana mainnet

What you can do today

• Shield SOL, USDC, USDT or any other SPL / Token-2022 token into a private balance. It takes one wallet signature, and it is the last public trace of you.
• Send privately to any Valon address. Amounts stay hidden, and when the fee is paid in private SOL, so does the token.
• Trade inside your private balance. The Valon vault swaps through Jupiter, so you get its routing across Solana DEXes without your wallet appearing in the trade.
• Earn by lending privately through Jupiter Lend.
• Withdraw to any address, or to a fresh one-time address only your vault controls.

Inside Valon you never sign with your wallet. A relayer pays the network fee and submits each proof, and it never learns whose notes they are.

How it works, briefly

Your private balance is a set of encrypted notes. Every action is a zero-knowledge proof (Groth16 on BN254) built in your browser, and the Valon program on Solana checks it before any funds move. Your keys are created and encrypted in the browser and never reach our servers. The indexer and relayer never see your keys or which notes are yours.

Program FmsMbX…woq9DP. The admin and upgrade authority is a 2-of-2 Squads multisig (9GAzir…Fzfd78). It can pause and set limits, but no instruction lets anyone move a note without its owner's proof.

No deposit limits

Valon launched with per-token limits. Since its audit by ContractWolf they're lifted: no token has a per-deposit limit or a vault cap.

Anyone can open a vault for any other token. A newly opened vault starts with default limits until the multisig lifts them.

Fees: Valon takes 0.3% on shield, withdraw and swap, and sends it to the multisig treasury. Private sends carry only the relayer fee, which covers the network and priority fee and the one-time record each spent note needs. Every fee is shown before you confirm.

Where security stands

External audit: the on-chain program was audited by ContractWolf (October 6, 2026; 95/100, all findings resolved). Alongside it:

• 522 automated checks across 6 suites, including real proofs replayed against the on-chain program and 27 attack scenarios it must refuse.
• Internal adversarial reviews of the program, circuit, app and servers. All fixes are live, the program's through the audited, multisig-approved upgrade of October 6.
• End-to-end runs on a copy of mainnet with the real Jupiter and Jupiter Lend programs, then on mainnet itself.

Next: a verifiable build of the program. Found something? info@valon.xyz. Live status is on the security page.

Who's building it

Valon is developed by ex CLI and GUI team members at Monero. There they were in charge of improving wallet synchronization, node setup and overall usability, and made systems faster, simpler and more reliable while improving wallet recovery, privacy explanations and hardware-wallet support. Valon brings that experience to Solana.