Live on Canton· Confidential payouts, proven

One batch.
Four kinds of eyes.

Pay every contributor in one confidential transaction on Canton. Each keeps their own wallet and sees only their own line — privacy enforced by the ledger, not the app.

Nova DAO. You see every contributor, role and amount before it leaves the treasury.

Reveals · wallets · roles · amounts · total

AE
amara.eth
Core protocol
4,200.00 USDCx
TE
tobi.eth
Smart contracts
3,850.00 USDCx
CE
chen.eth
Frontend
5,500.00 USDCx
LE
luca.eth
DevRel
2,900.00 USDCx
FE
fatima.eth
Governance
4,100.00 USDCx
ME
mert.eth
Protocol V2 · milestone
32,000.00 USDCx
Batch total
6 contributors · 1 confidential transfer
52,550.00 USDCx
How it works

Treasury payouts that don't leak

Three steps from a funded treasury to your whole guild paid — each contributor seeing only their own line, and keeping their own keys.

Step 1

Set the rail

Fund a treasury and encode the mandate — per-cycle cap, approval threshold, the signer and auditor who can see it. The rules live on the ledger, not in a Notion doc.

Step 2

Pay the batch at once

One confidential transaction pays the whole guild. Small lines settle atomically; a milestone grant holds for a second signer — all of it, or none.

Step 3

Everyone keeps their keys

Each contributor is paid to their own wallet — Sotto never holds their keys. They see their line; another DAO sees nothing at all. The asymmetry is the product.

The four lenses

One ledger, four truths

The same batch, viewed by four parties. Switch the lens in the demo above and watch the rows redact in real time.

Treasury

Nova DAO

Runs the mandate and the batch. Sees every contributor, role and amount before it leaves the treasury.

Contributor

amara.eth

Sees their own line — paid to their own wallet — and nothing else. The other five payments simply aren't there.

Auditor

Sable Audit

Read-only visibility into every receipt in the batch. Granted on purpose, never assumed.

Signer

jules.eth

Second signer on the treasury. Sees only what crosses the threshold — the 32,000 milestone needs their key; the rest settle untouched.

On Canton

Not a mockup. A real ledger.

Every payment is a real contract on a Canton participant node. Privacy isn’t a UI trick — a contributor’s token is refused at the ledgerwhen it reaches for anyone else’s line. The numbers below are on-chain, not made up.

Provably realMaker–checkerExplicit disclosureAuditable
participant · sandboxoffset 56 · live
settletreasury 312,480.00 → 291,930.00atomic
receiptamara.eth · +4,200.00on-chain
denycontributor → another’s line403 refused
authper-party tokenRS256 · JWKS
Holding · 00066642fdb1… · owner amara.eth::1220df30…

Stop leaking your treasury.

Pay every contributor at once. Show no one the others.