Solana · Token-2022 confidential balances
Your balance is nobody else's business.
Every ordinary Solana token publishes what you hold and every amount you move, in plain text, permanently, for anyone to read. ZK ElGamal ($GAMAL) encrypts those numbers on-chain — and Solana still proves every transfer is valid without ever learning a single figure.
- 13,370,000 Fixed forever. The mint authority is revoked, so no more can ever exist.
- No auditor key This mint carries no master decryption key. Not the issuer, not us, nobody.
- No freeze authority Nobody can freeze your account or block a transfer. There is no such power.
- Liquidity locked The Orca position is permanently locked. Nobody, including us, can withdraw it.
- Verify it yourself Every claim on this line is a field on-chain, readable without trusting this page.
What $GAMAL hides
The thing worth protecting is value — your position, and the size of everything you do with it. That is precisely what this token encrypts, and it encrypts it completely.
Encrypted — unreadable to everyone but you
- Your balance. Stored on-chain as ciphertext. No explorer, no indexer, no bot can price your wallet.
- Every private transfer amount. Encrypted twice over — once for you, once for the recipient — and for nobody else.
- How much of your position you moved privately. Whether you sent a dust test or your entire stack looks identical on the explorer.
Public, as on all of Solana
- That a transfer happened, and when
- The addresses a transfer touches
- Amounts moved in and back out of your private balance
- Total supply, and every trade on an exchange
We would rather tell you the shape of this than oversell it. $GAMAL is confidentiality of value, not anonymity. The chain still records that you transacted; it no longer records what you are worth or how much you moved. Nothing at the token layer — on any chain — hides counterparties as well as it hides amounts, and any project telling you otherwise is selling something.
A token like this could not have existed last year
This is not a wrapper, a mixer, or a clever contract. It is Solana's own confidential balances extension — and it has only been usable on mainnet since 17 June 2026.
Built for privacy from block one
A mint either carries the confidential balances extension from the instant it is created, or it never can. There is no upgrade path, no migration, no governance vote: the tens of thousands of tokens already on Solana are permanently locked out of this. $GAMAL was created with it enabled, in its very first transaction.
Verified by Solana itself
The zero-knowledge proofs are checked by a native program built into the validator — not by a contract someone deployed and could upgrade tomorrow. Your privacy rests on the same code every Solana validator runs, audited after a public bug hunt and re-enabled only once independently reviewed.
Nothing to trust, nothing to ask
No bridge, no wrapper, no custodian, no permission. The mint auto-approves any holder who wants a private balance, the mint authority is revoked, there is no freeze authority, no auditor key exists, and no remaining mint-level authority can add one. There is nobody in this system with power over your tokens — by construction, not by promise.
Use it
Most wallets can hold $GAMAL and show your public balance, but very few can read or send a private one yet. This app does that part, in your browser.
- Shield — move tokens from your public balance into an encrypted one.
- Send privately — transfer an amount nobody else can read.
- Accept — take in private funds someone sent you.
- Unshield — move value back out when you want to trade.
Your encryption keys are derived from a single wallet signature, in your browser. They are never transmitted, never stored on a server, and the same wallet always reproduces the same keys.
Open the appHow it works
One token account, two balances. A normal public one that behaves like any Solana token, and an encrypted one that only you can read. Moving value between the two is called shielding and unshielding, and you decide what sits where.
Public balance
Anyone can read it1,250.000000 GAMAL
Plain numbers on the ledger. This is the balance wallets show, and the only balance an exchange can trade against.
Private balance
Only you can read it8f2c·a41d·07be·… ciphertext
Stored on-chain as encrypted text. It splits in two: a pending part holding what just arrived, and an available part you can spend. Private transfers move value from one person's available balance straight into another's pending balance, and the amount is never written down in the clear.
-
1
Turn on privacy, once
Your device derives an encryption key from a signature by your own wallet — nothing new to write down, and nothing secret ever leaves your machine. Only the public half gets published on your token account, which is what lets other people encrypt amounts addressed to you. It adds about 295 bytes to the account, roughly 0.0015 SOL of rent, and it needs your signature: no issuer, exchange or website can switch this on for you.
Visible: that this account is now able to hold private amounts.
-
2
Shield — move tokens in
You deposit some of your public balance into your private one. Be clear about this step: the amount is written in the clear, because it is leaving a balance everyone can already read. Shielding is the door into privacy, not part of it. What you do with the value afterwards is hidden; the size of your first deposit is not.
Visible: the exact amount you shielded.
-
3
Send privately
Your own device does the real work. It encrypts the amount twice — once so the recipient can read it, once so you still can — and builds three short mathematical proofs: that the two encryptions agree, that they were formed correctly for both parties, and that both the amount and the balance you have left are genuine non-negative numbers. Solana verifies the proofs and updates both encrypted balances without ever learning a single figure.
Hidden: the amount. Visible: that you sent to that address, and when.
-
4
Accept what you receive
Anything sent to you lands in the pending part of your private balance, and one confirmation from you moves it across into the spendable part. This is not bureaucracy: it means nobody can change your balance while your device is in the middle of proving something about it, so a stranger cannot make your transfers fail by spamming you with dust.
Hidden: the amount you accepted.
-
5
Unshield when you need to
Withdraw back to your public balance whenever you want to trade, pay something that doesn't understand encryption, or simply prove what you hold. Your device proves you really have what you are taking out. Like shielding, the amount becomes public at this point — so if you shield a number and later unshield the same number, an observer can join the dots.
Visible: the exact amount you unshielded.
Note what this shape means in practice. Privacy here is a place you keep value, not a coat you throw over a single payment. The longer value stays shielded and the more people who hold it that way, the less any one deposit or withdrawal tells anybody.
The idea behind the encryption
The scheme is called twisted ElGamal encryption, and it has a property ordinary encryption doesn't: you can do arithmetic on the locked values. Two encrypted balances can be added together without unlocking either one. That is what lets the network subtract an encrypted amount from the sender and add the very same encrypted amount to the receiver while remaining blind to it.
Encryption alone isn't enough, though. If nobody can read the numbers, what stops someone claiming to send more than they have, or writing a negative amount to conjure tokens out of thin air? That is the job of the zero-knowledge proofs. Alongside each transfer your device produces three short mathematical arguments: that the encrypted figures are consistent with each other, that they were formed correctly for both parties, and — most importantly — that the amount and your remaining balance are genuine non-negative numbers within range.
Solana verifies those proofs in a dedicated on-chain program. A proof either checks out or the transfer is rejected. So the network never has to trust anyone's word about hidden numbers; it confirms the arithmetic is honest without learning the arithmetic.
None of this is a bolt-on or a custom contract, and it is worth knowing its history. The proof verifier is a native Solana program. In June 2025 a researcher found a flaw in it — a missing component in a hash function that could have allowed forged proofs — and the network's response was to switch the whole feature off rather than patch around it. No exploit ever happened and no funds were at risk, because no token was using it for real users yet. It stayed off for a year while the fix was written and independently audited, and confidential transfers returned to Solana mainnet on 17 June 2026.
We mention that openly for two reasons. It is the reason a token like this could not have existed twelve months ago, and it tells you something about the code path your money would sit in: it has been broken once, in public, and repaired under audit.
Read it from the source
Everything above is our plain-language account of a public, documented standard. You do not have to take our word for any of it — here is Solana's own documentation, so you can check the mechanism yourself rather than trusting a token's marketing page.
-
Confidential Balances
Solana docs
The starting point. What the extension is, why only amounts are private while addresses stay public, a sequence diagram of the whole deposit → apply → transfer → withdraw flow, and the complete list of instructions it adds to the token program.
-
Protocol overview
Solana program docs
The cryptography itself, and the best single explanation of why this works: why an ordinary encryption scheme is useless here, what it means for ElGamal to be homomorphic so the program can add and subtract locked values, what the twisted variant saves, and why each of the three proofs is required.
-
Deposit tokens
Solana docs
Shielding, step by step — moving a public balance into the encrypted pending balance.
-
Apply pending balance
Solana docs
Why incoming funds arrive as pending, and what accepting them actually does.
-
Transfer tokens
Solana docs
A private send in full detail: the equality, ciphertext-validity and range proofs built on your own device, verified into temporary accounts, referenced by the transfer, then closed to reclaim the rent.
-
Withdraw tokens
Solana docs
Unshielding — proving you hold what you are taking back out into a public balance.
-
Integration guide
Solana docs
Written for wallets, explorers and exchanges. Worth a look if you want to know exactly what a wallet has to implement before it can show you a private balance — and why one that hasn't still displays your public balance safely.
-
ZK ElGamal Proof Program
Anza — Agave client docs
The reference for the native program that verifies the proofs, maintained by Anza rather than the Solana Foundation. This is the component the token's privacy ultimately rests on.
Where to buy
$GAMAL trades on Orca. Liquidity is live, permanently locked, and the pool is open to anyone.
Orca
LiveThe $GAMAL/SOL pool, with a 0.30% swap fee. Connect any Solana wallet and trade directly.
Jupiter
RoutingJupiter aggregates across Solana exchanges and routes into the Orca pool, so wallets with a built-in swap can find $GAMAL through that route.
Buying and selling are public. An exchange has to do arithmetic on its own reserves, so it cannot price a trade against a number it can't read. Trades use your public balance: shield after you buy, unshield before you sell. Privacy protects what you hold and what you send — not what you paid.
Token details
- Name
- ZK ElGamal
- Ticker
- $GAMAL
- Network
- Solana mainnet
- Total supply
- 13,370,000
- Decimals
- 6
- Auditor key
- None — no master key exists
- Mint authority
- Revoked — supply is fixed
- Freeze authority
- None — nobody can freeze you
- Liquidity
- Permanently locked on Orca — cannot be withdrawn
- Pool
- GAMAL/SOL · 0.30% fee
Mint address — always verify this before you buy or receive
A6DwibfWz7muCVZUwokAGQChxNrTwy1asULPav6eqVHr
Anyone can create a token using this name and ticker. The mint address is the only identifier that cannot be faked.
View the token on Solana Explorer · View the pool on Orca · View the liquidity lock · View private transfers
Staying safe
How this site behaves
- This page asks for nothing. The app asks you to connect a wallet, and only ever requests a signature you can read before approving.
- Neither will ever ask for a seed phrase or a private key. Any page that does, using this name, is a fake.
- Your keys are derived in your browser and never sent anywhere.
- No trackers, no analytics, no data collection.
What only you can do
- Your private balance can only be read with keys derived from your own wallet. Lose the wallet and those tokens are unreadable and unspendable — forever, by anyone.
- Back up your wallet's recovery phrase offline, on paper, not in a screenshot.
- Anyone who obtains your wallet can both spend your tokens and read your private balance. Treat it accordingly.
- Verify the mint address above against a block explorer before trusting any offer.
Questions
Can anyone see my balance?
Not your private balance. On-chain it is stored as ciphertext, and it can only be decrypted with keys that come from your own wallet. Your public balance, if you keep one, is visible like any normal token.
Can the creators decrypt my amounts?
No. Solana's confidential balances let a mint carry an optional auditor key that can read every amount on it. $GAMAL carries none: the auditor field on the mint account is empty, and the confidential-transfer authority that could have attached one later has been revoked. You can confirm both on any block explorer right now, without trusting this page.
Is my identity hidden?
No, and we would rather say so plainly. Wallet addresses, senders and recipients all remain public, exactly as on the rest of Solana. What is hidden is the amount. The explorer lists those private sends: you can see that they happened, and you cannot read the size.
Will my wallet show it?
Any Solana wallet will show the token and its public balance, and ordinary transfers keep working. Reading and sending private balances needs a wallet that supports confidential balances, since the decryption and the proof-building happen on your own device. Support is still rolling out across wallets. If your wallet shows no private balance, nothing is lost — the funds are still there and any confidential-aware app can reach them with your keys.
Is this legal or is it for hiding things?
Keeping your salary, your treasury or your net worth off a permanent public billboard is ordinary financial privacy, the same privacy a bank account gives you by default. Counterparties stay visible on-chain, so transactions remain traceable in the way regulators generally care about. Holders can also choose to share their own keys with an accountant or auditor when they need to prove what they did.
Is the liquidity locked?
Yes, permanently. The Orca position that holds the pool's liquidity is locked at the
program level: a withdrawal simulation is rejected with error 6059,
OperationNotAllowedOnLockedPosition. The lock transaction is
on the explorer. Accrued trading fees can still be collected; the liquidity itself cannot be pulled.
Where can I buy it, and is buying private?
On Orca, and through aggregators like Jupiter that route into it. Buying is not private: a swap is an ordinary public trade, visible with its amount and price like any other. What you do afterwards — shield it, hold it, send it to someone — is the private part. Sell the same way in reverse: unshield first, then trade.
If shielding and unshielding are public, what is the point?
A fair question. What you gain is that the public record stops tracking your position. Observers may see you shielded some amount on some day, but not what you hold now, not what you have received since, and not the size of anything you send. It is the difference between someone knowing you once deposited money at a bank and someone watching your current account balance change in real time. It also improves as more people use it: with many holders shielding and unshielding, individual deposits stop standing out.
Why is there a limit on a single private transfer?
The encryption works on amounts below a fixed size, which for this token lands at roughly 281 million $GAMAL per private transfer. That ceiling is deliberately far above the entire 13,370,000 supply, so it never actually restricts anyone — even someone holding every token could move the lot in one private transfer. It is the reason the token uses 6 decimals rather than 9: at 9 the same ceiling would fall to around 281,000, well below the supply.
Does a private transfer cost more?
Slightly. Proving a transfer takes a few linked transactions instead of one, plus a small refundable deposit for temporary accounts, so fees are higher than a normal transfer — still fractions of a cent on Solana. An upcoming Solana upgrade is expected to reduce this to a single transaction.
Is this an investment?
No. This is a technology demonstration of encrypted balances on Solana. Nothing here is financial advice, a solicitation or a promise of value. Assume a token like this can go to zero and only ever use money you can afford to lose entirely.