0% 0% 0% 0%

Deposit & withdraw

Index ▾
  1. 01. Concepts
  2. 02. Contracts
  3. 03. pool
  4. 04. policy
  5. 05. viewkeys
  6. 06. verifier
  7. 07. Circuits
  8. 08. Features
  9. 09. Shielded send
  10. 10. Deposit & withdraw
  11. 11. Consolidate & split
  12. 12. Shielded swap & pay
  13. 13. Escrow
  14. 14. Payment channels
  15. 15. Payroll & subscriptions
  16. 16. Auditor disclosure
  17. 17. ASP compliance
  18. 18. Cloud runtimes

Deposit & withdraw

The two edges of the pool: moving value in from your public balance, and back out. These are public Stellar legs by nature, so ozky treats them carefully.

Deposit (shield)

Locks public stablecoin into the asset vault and appends a fresh note commitment for you. From that point the value is private. Onboarding is relayer-funded — your account is created and USDC / EURC trustlines are established for you (live on real Circle testnet USDC; USDT is defined but not yet live), and you never touch a public XLM account.

Withdraw (unshield)

Spends a shielded note — publishing its nullifier and proving membership — and releases public stablecoin from the vault to a public G… destination. dest_bind is enforced on-chain: a withdrawal can’t be redirected, and contract destinations are rejected.

The privacy edge

Deposit and withdraw are visible on Stellar. Timing and amount at the edge can correlate a withdrawal with an earlier deposit. ozky reduces this with a client-side denomination / timing policy — there is no on-chain flag, so the chain stays indistinguishable:

  • Instant — submitted right away.
  • Maximum privacy — held for a randomized client-side delay (cancelable, with a “Send now” override) to decorrelate submission time.
  • Standard-denomination quick-picks on the public edges so visible amounts blend.

See Concepts → the edges for the full trust posture.