GhostRoute

GhostRoute is GhostWare’s private swap and routing system for Solana. It lets users swap tokens and route payments without exposing who they are, where the assets came from, or how the trade was executed.

GhostRoute pairs stealth addresses with ShadowNet relays so trade paths are hidden end to end. The result is a simple swap experience with strong privacy.

Why It Matters

Public DeFi activity reveals strategies and positions. That invites frontrunning, copy trading, and unwanted profiling. GhostRoute protects users by hiding trade intent, path, and settlement addresses. You keep execution quality while removing exposure.

How It Works

1. Prepare The user selects tokens and amount. GhostOS opens a fresh session to avoid linking with past actions.

2. Derive One Time Outputs The client derives one time addresses for intermediate steps. These addresses are not linked to the user’s main wallet.

3. Route Through ShadowNet Orders are fragmented and sent through multiple relays using Multi TX Pathways. Relays only see their local hop and cannot reconstruct the full route.

4. Execute Swaps Swaps are executed across preferred venues. Settlement lands at one time addresses that are later swept to the user’s main wallet.

5. Sweep and Finalize The client verifies outputs, then sweeps to the destination wallet. Only the user can link the steps. Observers see unrelated addresses and hops.

Version 0 Scope

The first version of GhostRoute focuses on a clean, private baseline.

• One time address derivation on the client.

• Simple single hop routing through ShadowNet.

• Private pay and swap flows integrated with GhostPay.

• Auto sweep of settled funds to the user’s wallet.

• Clear success states and simple error messages.

Out of scope for Version 0

• Advanced batching or delay buckets.

• Cross venue best routing with complex order splitting.

• On chain ZK proofs for compliance predicates.

• Relay reputation and slashing.

Fees

GhostRoute is designed to be sustainable and fair.

• Fees are disclosed before confirmation.

• A portion may fund GHOST incentives for payers using GhostPay and for relay operators.

User Flow

1. Open GhostRoute. Choose input and output tokens and amount.

2. Connect wallet inside a GhostOS session.

3. Review fee and route summary.

4. Confirm. The client sends encrypted route data to ShadowNet.

5. Wait for confirmation. Funds appear at a one time address, then sweep to your wallet.

6. View a private receipt with commitments and optional proofs.

Privacy Under the Hood

• Stealth Addresses prevent clustering of settlements.

• ShadowNet breaks input output links across multiple hops.

• HPKE encrypts route data and metadata.

• MPC distributes sensitive operations so no single relay can deanonymize a trade.

Developer Notes

• Client libraries expose helpers for deriving one time addresses, packaging route data, and sweeping outputs.

• Contracts anchor commitments, nullifiers, and minimal events for indexing without leaking user data.

• Indexers observe commitments only and resolve proofs client side.

Safety and Integrity

• No pooled custody. Assets remain in user controlled addresses until settlement.

• Relays produce lightweight attestations of correct handling.

• Optional audits and open specifications support independent verification.

Example

• Sam swaps 500 USDC to SOL. The client derives temporary outputs and fragments the order. ShadowNet relays the route and executes the swap. Settlement lands at a fresh address and is swept to Sam’s main wallet. Observers see unrelated addresses and cannot link Sam to the trade.

GhostRoute brings private execution to Solana without changing how the chain works. Next, continue to GhostMask or jump to Product Flows to see step by step UX for GhostPay and GhostRoute.