glassine
Open the desk

Confidential transfers on Solana

The address shows.
The amount doesn't.

Glassine is a workspace for Token-2022 confidential transfers. Your balance and every amount you send travel encrypted. The proofs are built on your device, and the page always tells you what stays public.

Try the sealing desk See what stays public

Design preview. Nothing on this site signs or sends.

From 4Qp9…Lm2c
ToGm4s…tKrE
TokenGLSD
Amount
Sealed
Readable by you and the recipient
sig 5Kq3…9wPd
  • Public
  • Sealed
  • Postage: the proofs

Example envelope with invented addresses. Only someone holding a key can lift the tint.

Declaration

What's sealed, and what isn't.

Confidential transfers on Solana hide amounts. Most of the rest stays public. Here is the whole list, so you know what you are trusting before you send anything.

Declaration of contentsForm GL-1 · Token-2022
ItemStatusWhat that means
Your confidential balanceSealedStored on chain as ciphertext. Your key decrypts it.
The amount of each transferSealedEncrypted for the sender, the recipient, and the token's auditor if it has one.
Both token account addressesPublicAnyone can see which account sent to which.
Which token movedPublicThe mint is part of the transaction.
That a transfer happened, and whenPublicIt lands in a slot and pays a fee, like any Solana transaction.
Deposits and withdrawalsPublicMoving tokens into or out of a confidential balance shows the amount.
Swaps and other program callsPublicA DEX route shows its amounts. Starting it from this page does not hide it.
The token's auditor keyOptionalSet by whoever created the token. If it is set, that key can read transfer amounts too.

Glassine will show this list before every transfer, with the rows that apply to it.

Route

How a sealed transfer travels.

Four stops, from your wallet to the recipient's key.

  1. Stop 1

    Seal

    Your wallet encrypts the amount for you, for the recipient, and for the token's auditor if there is one.

  2. Stop 2

    Stamp

    Your device builds three proofs: the ciphertexts match, they are well formed, and the amount is in range. The math checks out without the number showing.

  3. Stop 3

    Post

    The transaction lands like any other. The addresses, the token, the slot and the fee are public. The amount is not.

  4. Stop 4

    Open

    The amount waits in the recipient's pending balance. They apply it with their key and read it on their own device.

Sealing desk

Seal an envelope.

Fill it in, seal it, stamp it, post it. All of it happens in this tab: nothing is signed, nothing is sent, and the log is gone when you reload.

Public. Filled in with an invented example.
Who can read what
The amountYou · recipient
Addresses, token, time, feeEveryone

GLSD and GLSA are demo tokens on a pretend network. Nothing here is real money.

From 4Qp9…Lm2c
ToGm4s…tKrE
TokenGLSD
Amount
1,250.00 GLSD
Readable by you and the recipient
sig …
  1. Seal
  2. Stamp
  3. Post

Draft. Change anything on the left and the envelope follows.

Sent log · this tab only 0 envelopes

Nothing posted yet. Seal an envelope above and it shows up here.

The last column is random bytes, to show the shape of a ciphertext. Real ones are made by your wallet.

For builders

Plain code for sealed transfers.

Two sketches of the SDK we are designing, and the command line you can use today.


          
SketchPlanned API. The package is not published.

        

        
    
          
  • 
            
    seal.tsSketch
    
            
    The shape we want for sending: seal, stamp, post, with the public and sealed fields kept apart in the result.
    
          
    • 
          
  • 
            
    open.tsSketch
    
            
    Reading your own balance, including the pending step every recipient goes through.
    
          
    • 
          
  • 
            
    cli.shWorks today
    
            
    Solana's spl-token command line can already make confidential transfers on Token-2022 tokens. Flags change between versions, so check spl-token --help first.
    
          
    • 
        

      

    

  


  

    

      

        
Tracking

        
Where Glassine is right now.

      

      

        
Tracking numberGLS-0001-PREVIEW

        In transit
      

      
    
        
  1. 
          23 Oct 2026
          
          
    DeliveredThis site and the sealing desk
    Everything on this page runs in your browser.
    
        
    2. 
        
  2. 
          23 Oct 2026
          
          
    DeliveredBrand and design notes
    The mark, the envelope and the colours that mean sealed and public.
    
        
    3. 
        
  3. 
          In progress
          
          
    In transitSDK sketch
    The API shape on this page is a draft. No package is published.
    
        
    4. 
        
  4. 
          Not yet
          
          
    Not shippedWallet connection
    The site cannot connect a wallet yet.
    
        
    5. 
        
  5. 
          Not yet
          
          
    Not shippedReal transfers
    Nothing is deployed. No tokens move through Glassine.
    
        
    6. 
        
  6. 
          Not yet
          
          
    Not shippedIndependent security review
    No audit has been done. There is nothing to audit yet.
    
        
    7. 
      

      
Confidential transfers depend on Solana's ZK ElGamal Proof program. Check that it is enabled on the cluster you use before you build on it.