Different markets. Clear boundaries.

Trade predictions, stocks and crypto from shielded ZEC.

Zcash-funded wallets for supported venues, and public Robinhood-chain swaps with your connected EVM wallet. Know which privacy model applies before trading.

Read the guideOpen Umbra Trade

Live on Zcash mainnet · no account · your keys stay in your browser

Prediction markets in Umbra Trade.
Umbra Trade markets.
The NVIDIA perps terminal in Umbra Trade with one-hour candles.
01 One trade, start to finish

A wallet nobody has seen, for every position.

On a public venue your wallet is your track record. Umbra Trade gives each position a brand-new wallet, funded from Zcash's shielded pool through NEAR Intents, so the trail stops at the pool.

  1. 01A private balance24 words, made and kept in your browser. Deposit shielded ZEC from Zodl to a fresh address.
  2. 02Pick a marketNVIDIA on Polymarket Perps: $25 at 5× is a $125.00 position, fee $0.05.
  3. 03A wallet nobody has seenA new key for this position, funded with one standard amount at a random moment: a dry quote for 0.05 ZEC came back at ≈ 61.43 USDC.
  4. 04TradeThe order goes to the venue's real book from that wallet, and only that wallet.
  5. 05What a copy trader would seeOne funding from a NEAR swap, one position, no history, no link to your other wallets.
  6. 06Come homeClose, then send home: the proceeds swap back to ZEC at a fresh shielded address.

The app, its Zcash wallet and every venue's live data run on mainnet today; the full round trip (fund, trade, close, come home) has not run there yet. What is verified →

ZCASH SHIELDED POOLYour balanceOrchard, Ironwood notesAmounts stay hiddenpublic hop0.01–1 ZEC only,random start20 s–3 min later,no memoNEAR INTENTS1Click depositSigned quote, checkedRefunds: fresh address~8 minUSDC or SOL;Polymarket'sbridge adds pUSDNEW KEY, NEVER USEDFresh venue wallet…/6874'/venue'/index'Trades, then goes homeon Polymarket,Perps, Hyperliquidor SolanaTHE VENUE'S MARKETTradeSigned by its own key(on Perps, by its proxy)trip homeclose, then oneswap to ZEC;under ~$1 staysas dustNEAR INTENTS1Click homeQuote to a freshshielded addresspublic hopa new addressevery tripSHIELDED POOLBack homeFresh address; rests2–6 h before it's spentjoins yourbalanceEvery quote's signature and terms are checked before any ZEC is sent.NEAR's confidential mode covers every funding and every trip home except Polymarket's.ZCASH SHIELDED POOLYour balanceOrchard and Ironwood notes,amounts and addresses hidden0.01–1 ZEC · random startNEAR INTENTS1Click deposit addressThe one public hop in. Signed quote,checked; refunds to a fresh addressabout 8 minNEW KEY, NEVER USEDFresh venue walletm/44'/coin'/6874'/venue'/index'USDC or SOL arrives (Polymarket: pUSD)tradeTHE VENUE'S OWN MARKETTradeSigned by its key (Perps: its proxy);under ~$1 left at close stays as dustclose, then send homeNEAR INTENTS1Click, the way homeSigned quote to a fresh shieldedaddress: the one public hop outZEC payoutFRESH SHIELDED ADDRESSBack homeRests 2–6 h before it is spent,then joins your balanceEvery quote is checked before ZEC is sent.
The money's whole route. Two hops go through NEAR: the funding, always at a standard size, and the trip home, at whatever the wallet holds. The wallet in between holds one position and no history.
The money's whole route. Two hops go through NEAR: the funding, always at a standard size, and the trip home, at whatever the wallet holds.
02 Every screen

Four venues, one private balance.

Predictions, crypto perps and public Robinhood token swaps. Supported venues use Zcash funding; Robinhood uses a connected EVM wallet.

Perps terminal

NVIDIA, gold or BTC with leverage, take-profit and stop-loss. The ticket starts with the amount.

Read
The NVIDIA perps terminal with one-hour candles and the ticket.

Predict

Polymarket's events, with live odds and a Yes/No ticket.

Read
A Polymarket event on a phone.

Tokens

Public Robinhood-chain swaps through Uniswap v2.

Read
Robinhood token swap screen.

Private wallets

One per position, funded at a standard size, kept ready if you like, sent home when you're done.

Read
The New private wallet sheet with a NEAR Intents quote.

Who sees what, in the app

The Privacy screen lists every party and your wallets as a copy trader finds them.

Read
The Privacy screen of the app.

Deposit and withdraw

A fresh shielded address every time; a leak meter on every send.

Read
The Deposit ZEC sheet on a phone with its QR code.
03 Privacy

The market sees the trade, not who made it.

Every call about your wallets is sealed with Oblivious HTTP: the relay knows who asks, the gateway knows what is asked, and neither knows both.

PartySeesNever sees
The venueOne fresh wallet's own trades, sent from Irelandnever · Your other wallets, your balance, your IP
A copy traderA wallet with one funding from a NEAR swap and one positionnever · Whose it is, or any other wallet of yours
Relay · CloudflareYour IP, and which public markets you look atnever · What you ask about your wallets
Gateway · DublinOne decrypted request, from the relaynever · Your IP, or which requests are yours
Every party, what it sees and what stays public →
04 Built on Zcash

A real Zcash wallet, in the browser.

librustzcash in your browserzcash_client_sqlite 0.23 on wasm32-wasip1, in a Web Worker: sync, notes, proofs, sends.
Ironwood and OrchardA fresh Orchard-only address for every deposit; change always to Ironwood; Sapling never spent.
ZIP 318 amounts and timingSeven standard sizes, random starts, exponential refills, no sync right after a send.
A light client over OHTTPEvery lightwalletd call is sealed: even a block range would reveal a wallet's birthday.
Built on Zcash
05 How it's built

A static app, two hops, an allowlist.

No Umbra Trade server holds your keys, balances or the map of your wallets.

YOUR BROWSERAppScreens and ticketsStatic: no app serverWallet workerZcash's wallet in WASMSync, proofs, sendsEngineSizes, rests, timing,and the leak meterVenue adaptersFour venues andNEAR 1Click quotesVaultKeys and wallet list,encrypted on deviceCLOUDFLARERelay/relay/ohttpSees IP, not contentNo IP or cookies sentVERCEL · DUBLINGatewayOpens each requestSees content, not IPNo logs of its ownHolds Polymarket'sBuilder secret; signsonly Deposit Walletrelayer callsALLOWLIST ONLYUpstreamsZcash light serversNEAR Intents 1ClickPolymarket APIsPolymarket Perps APIHyperliquid APIJupiter, Solana RPCPolygon RPCGeckoTerminalDURABLE OBJECTLive feed/relay/live/*One socket per venue,market channels onlyno user channelsPUBLICVenue feedsHyperliquidPolymarketPolymarket PerpsImage proxy/relay/imgPublic, cached 24 hImage fetchChecked on every hopHeld assets: sealedImage hostsLogos and picturesSealed with Oblivious HTTP: every call about youPublic market data and pictures: the relay sees whichYOUR BROWSER · UMBRA TRADE.XYZAppScreens, charts, order ticketsWallet workerZcash's wallet in WASM: sync, proofsEngineSizes, rest rules, timing, leak meterVenue adaptersPolymarket, Perps, Hyperliquid, SolanaVaultKeys and wallet list, encryptedOHTTP · sealedCLOUDFLARE WORKERRelaySees your IP, not the contentNo IP, cookies or agent passed onsame sealed bytesVERCEL FUNCTION · DUBLINGatewaySees the content, not your IPWrites no logs of its ownSigns only Deposit Wallet callsHTTPS, from IrelandALLOWLIST ONLYUpstreamsZcash light servers, NEAR 1ClickPolymarket, Polymarket PerpsHyperliquid, Jupiter, Solana RPCPolygon RPC, GeckoTerminalPUBLIC DATA · NOT SEALEDLive feed and pictures/relay/live/*: one WebSocket per venue,market channels only/relay/img: public pictures, 24 h cachePictures of what you hold go sealedSealed (Oblivious HTTP)Public data, not sealed
Every call about you takes the vermilion path. The relay knows who is asking, the gateway knows what is asked, and neither knows both.
Every user call takes the sealed path. Public prices come through the relay's shared feeds.
1 hostin the browser's resource list in Umbra Trade14 hostson the gateway's API allowlist, nothing else3 sendsproved in the browser, mined on Zcash testnet40 testsengine 25, rails 8, venues 7, all passing

Your next trade, from a wallet nobody has seen.

Read the guideSee the architecture