TongomainnetLaunch demo
[ live on starknet mainnet ]

Confidential payments.Purely on-chain.

no trusted setup. no oracles. no TEEs. no external servers.

ElGamal encryption and zero-knowledge proofs wrap any ERC-20. Proven client-side, fees paid in-protocol — no blockchain account needed.

Try demoRead docs
relayed transfer
import { Account, RelayerAccount } from "@fatsolutions/tongo-sdk" const account = new Account(tongoKey, tongoAddress, provider)const relayer = new RelayerAccount(  tongoAddress, relayerAddress, paymasterUrl, provider,) const op        = account.transfer(to, amount, { feeToSender })const prepared  = relayer.buildTransactionToSign(op, snip9Nonce)const signature = account.signMessage(prepared)await relayer.execute(prepared, signature) // proven in-browser · fee paid in the transferred asset
~1s
to prove, in your browser
0
trusted parties — all client-side
[ execution flow ]

Five operations.

fund()

Move ERC-20 into an encrypted balance.

transfer()

Send a hidden amount.

withdraw()

Convert back to standard ERC-20.

rollover()

Move pending funds into your spendable balance.

ragequit()

Exit your full balance, revealing it.

[ architecture ]

Vault, Ledger, Relayer.

A Vault holds the reserve, Tongo Ledgers hold encrypted state and verify proofs, and an optional Relayer covers gas.

How a payment moves
  1. 01

    You

    in your browser

    A Tongo key — fresh or derived from one you hold — encrypts the amount, builds the proof, and signs. All in your browser.

  2. 02

    Relayer

    optional

    Submits the operation on-chain and pays gas, taking its fee from the operation itself. Skip it and submit directly instead.

  3. 03

    Tongo Ledger

    always

    Checks the proof and updates encrypted balances. Invalid proofs are rejected.

  4. 04

    Vault

    fund / withdraw only

    Moves the real ERC-20 in or out of the reserve.

Vault

per asset
  • Custodies the ERC-20 reserve and shared config
  • Deploys ledgers via deploy_tongo(owner, tag, auditorKey?)
  • Enables confidential transfers between its ledgers

Tongo Ledger

per instance
  • Holds encrypted balances and audit data
  • Verifies the proof of every operation

Relayer

optional, gasless
  • Executes via SNIP-9, gas paid by the AVNU paymaster
  • Reimbursed in ERC-20 from the operation fee

Replay is prevented by a SNIP-9 nonce derived from the account’s current nonce.

[ mainnet instances ]

Mainnet assets.

AssetTongo ledgerDecimalsRate
USDCnative0x00b32618c4…0faad4d361e3
STRK0x07e3601b8a…674c5691181e16
ETH0x04bd49a293…9bd91ab7181e12
USDT0x00f7caef02…04a82c9461e3
WBTC0x01c20dc3b0…711917e181e1
Mainnet relayer0x038aa8efb4e76b524c4a49b92284187b229174de5f431f288bbd7c8e0e441c12

Sepolia, Vault and ERC-20 addresses, and the class hashes live in the docs.

[ ready ]

Client-side confidentiality.

Try the demo or understand the protocol.

Try demoRead docs