PRIVORA
Launch app
CONFIDENTIAL PERPETUALS ·● LIVE ON SOLANA

Lit book.Dark position.

Real price discovery on a continuous central limit order book. Your size, leverage and liquidation level, proven in zero knowledge, never revealed, never farmed.

Start tradingDocumentation
0
trust assumptions
~0ms
local proof
0%
on-chain
SOL-PERPOrder book
65.401,420
65.283,010
65.20880
65.162,240
65.12MARK ▲ +0.8%
65.042,140
64.925,300
64.861,180
64.801,760
Position
SideLONG
Size•••
Leverage•••
Liq. price•••
Entry64.60
◈ commitment only · proven, never revealed
THE MODEL

Public market.
Private position.

A perpetual-futures venue is most useful when the market is transparent and your hand isn't. Privora keeps the book fully lit for real price discovery, and shields everything that's yours.

LIT: public to all◷ visible
  • Order bookevery price & resting size
  • The markoracle-bound, funding-adjusted
  • Fills & tradesprice-time priority, instant
  • Fundingtransparent, per-market
SHIELDED: yours alone◈ hidden
  • Your sizecommitted, never printed
  • Your leverageproven in range, never shown
  • Liquidation levelsealed to a coarse bucket
  • Your identityno account signs a trade
HOW IT WORKS

Sound by construction.

No trusted operator, no hosted prover. The trust root is our own commitments and Groth16 proofs, verified directly on Solana, and the guarantees hold even if every agent goes offline.

01

A continuous lit CLOB

A real central limit order book, price-time priority, instant fills, transparent price discovery. Privacy lives at the position layer, never the matching layer: the book is lit, and what's hidden is who, how big, how levered, and where you get liquidated.

02

Positions proven locally

Your position is a commitment on-chain, your size, leverage and margin are proven correct in zero knowledge, on your own device. The secret never leaves the browser (or the agent). No hosted prover, no trusted operator.

03

Set-and-forget liquidation

Liquidation is automatic and your level stays hidden, only a coarse bucket is revealed, and only once price actually reaches it. It's funding-adjusted so it never drifts. Solvency never depends on you, a bot, or any keeper being online.

04

Unlinkable by default

You never sign a trade and never hold SOL. You prove locally; a relayer pays the gas. Orders are authorized by a proof, not an account, so two of your trades can't be tied together. Only the on- and off-ramp are linkable.

BUILD ON IT

Three ways in.

Trade on the app, build on the SDKs, or hand the keys to an autonomous agent, every path proves locally and stays unlinkable.

FRONTEND

Trade in the browser

Connect a wallet for custody only, it never signs a trade. Deposit, place, manage and withdraw, proving every step locally in the browser.

wallet  →  custody + identity (SIWS)
proof   →  generated in-browser (snarkjs)
relayer →  pays gas, learns nothing
How to trade →
SDKs

Build on the same core

One surface, two backends: @privora/sdk (TypeScript, browser proving) and privora-sdk (Rust, fast ark-circom). Generic SDK, your app's logic.

const px = await PrivoraClient.create(
  { market, relayer, artifacts });
await px.deposit({ amount });
await px.placeOrder({ side, size, price });
await px.cancel({ orderCommit });
Read the SDK docs →
AI AGENTS

Let an agent operate

An MCP server lets Claude (or any agent) run a confidential session end-to-end. The keeper and the market-making quoter are permissionless reference agents.

# MCP tools an agent can call
privora.deposit   privora.place
privora.cancel    privora.positions
privora.withdraw  privora.book
Work with agents →

Trade in the light.
Stay in the dark.

Confidential perpetual futures, fully on-chain on Solana. Live on devnet today.

Launch appRead the docs