Receiving
Your inbox
Payments to you arrive as notes in the Inbox. For each note, your browser fetches its two envelopes from the relay, checks them against the hash the note carries on chain, opens the payee envelope with your key, and checks that the opening reproduces the note's commitment:
Only a note that passes shows its amount. The Inbox shows each note in one of these states:
| State | What it means | What you can do |
|---|---|---|
| Waiting for the auditor to attest | The note opened and checked on this device; the pool requires the auditor's attestation first | Wait; it usually takes seconds |
| Opened and checked: ready to accept | Attested (or the pool doesn't require it) | Accept it |
| Its envelope does not open to its commitment | The sender's envelope is wrong | Return it to its sender |
| Returned to its sender | The note went back | Nothing; it is the sender's again |
While the app is open and signed in, a note that lands shows in the inbox at once, and the Inbox link is marked when you are on another page.
Accept
Choose Accept on a note, or Accept all for several. Your wallet signs one transaction: the program adds the notes' commitments to your balance commitment, closes the notes, and refunds their rent to their senders. Your device updates the encrypted record of your balance in the same transaction.
You are never credited with a payment you can't open: the app accepts only notes it has opened and checked.
Return
A note whose envelope doesn't open is returned with Return. The note's recipient becomes its sender again, and the sender, who kept the opening, can accept it back. Returning costs you only the transaction fee.
Withdraw
On the Withdraw page, enter an amount up to your confidential balance. Your browser proves that what stays in your balance is in range, your wallet signs, and the vault pays the amount less the 5 bps ramp fee to your wallet's USDC token account; your balance drops by the full amount (fees). A withdrawal is public, like a deposit; your remaining balance is not.