Encifher

Encifher is a confidential computation protocol built on Solana that allows users to swap, transfer, and bridge assets without exposing wallet balances, trade amounts, or transaction details on-chain. The protocol launched in 2024 and has since migrated its primary interface from encifher.io to encrypt.trade, though the Encifher name remains active in its academic publications and ecosystem identity. The platform is backed by Alliance DAO, supported by Solana Foundation and Circle grants, and placed third in the DeFi Track at the Colosseum hackathon.

The Privacy Gap on Solana

Standard Solana transactions are fully transparent. Every balance, swap amount, and wallet address is publicly visible on-chain, which creates problems for traders who want to avoid front-running, institutions that cannot expose portfolio positions, and users who want financial privacy. Projects wrapping assets like Zcash's ZEC onto Solana encountered the same issue: wrapped tokens behave as ordinary SPL tokens and expose the same information as any other transfer.

Encifher addresses this by replacing on-chain data with encrypted handles and moving sensitive computation off-chain into a secure enclave.

How It Works

Encifher uses a trusted execution environment (TEE) as an off-chain coprocessor, a design documented in a July 2026 paper published at the International Association for Cryptologic Research. On-chain Solana programs handle only 128-bit references to encrypted data, not the data itself. When a user initiates a private swap or transfer, the off-chain coprocessor running inside a hardware enclave fetches the corresponding ciphertexts from a public data-availability layer, decrypts and computes on the plaintext within the enclave, re-encrypts the result, and commits an attestation-backed, Merkle-anchored output back on chain.

This architecture is faster than pure fully homomorphic encryption (FHE), which requires performing arithmetic directly on ciphertexts. The TEE approach allows Encifher to settle a confidential swap in a single Solana transaction using approximately 157,000 compute units, completing in roughly 20 to 30 seconds end-to-end.

Key management relies on threshold ElGamal encryption. No single operator holds a complete decryption key; a quorum of trusted parties must cooperate to decrypt any ciphertext, limiting the damage a compromised coprocessor operator could cause. Transaction amounts are validated using zero-knowledge proofs so the on-chain program can confirm a swap is correctly formed without seeing the underlying values. To prevent transaction linkability, the protocol uses ephemeral accounts that exist for a single transaction lifecycle, making it practically impossible for an observer to connect deposits to withdrawals by matching amounts or timing.

Key Features

Private swaps. Users wrap assets into their encrypted counterparts, then execute trades on the platform. Wrapping and swapping are intentionally separated into distinct steps: if the two occurred simultaneously, an observer matching deposit amounts to withdrawal addresses could reconstruct the user's position. Once wrapped, assets can be swapped against Jupiter liquidity with amounts and counterparty addresses hidden.

Private transfers and sends. Users can send encrypted tokens to other Solana wallets. The recipient address and transfer amount are not visible in the public transaction record.

Confidential cross-chain bridge. The protocol includes a cross-chain bridge that maintains confidentiality of bridged assets, extending privacy across networks rather than only within Solana.

eZEC. Encifher introduced eZEC as an encrypted wrapper for Zcash (ZEC) on Solana. When Solana added wrapped ZEC via the Zolana bridge in October 2025, the resulting SPL token offered no privacy properties. Encifher re-wrapped ZEC into eZEC, storing balances in ciphertext and exposing only cryptographic pointers on-chain, restoring the confidentiality that native Zcash provides.

Hardware wallet compatibility. The platform supports Ledger via Phantom and Trezor via Backpack.

Ecosystem Integration

Encifher integrates directly with Jupiter, Solana's primary liquidity aggregator. This allows users to access Jupiter's routing depth while keeping trade details private. The team's 2026 technical paper notes that Solana's account model and parallel transaction scheduler map naturally onto the dependency structure the Encifher coprocessor requires for correctly ordered encrypted operations, without needing custom scheduling infrastructure.

Token

Encifher has no native protocol token. eZEC is a product-level encrypted asset, not a governance or utility token for the protocol itself. Future token plans have not been formally announced.

Security Model

The system's primary trust assumption is TEE integrity: the hardware enclave must correctly attest to its software state and prevent extraction of plaintext or keys by the operator. Threshold decryption provides a second layer of protection by requiring multiple key holders to cooperate for any decryption. Zero-knowledge proofs handle on-chain validation independently of the coprocessor, ensuring logical correctness without relying solely on the enclave's honesty.

No public third-party smart contract audit has been disclosed.

Team

The team is led by Rishabh Gupta, the primary public face of the project. The 2026 IACR paper lists six authors: Nitanshu Lokhande, Rishabh Gupta, Rachit Chahar, Arun Jangra, Aniket Prajapati, and Muskan Kumari. Encifher is backed by Alliance DAO, a Solana Foundation grant, and a Circle grant.

Traction and Current Status

As of the 2026 IACR publication, Encifher has served more than 5,000 users and processed over 50,000 confidential operations in production. The encryption layer runs at over one million operations per second; threshold decryption completes in milliseconds.

The primary application has migrated from v1.app.encifher.io to encrypt.trade, where users access private swaps, transfers, and bridging. The encifher.io domain redirects to encrypt.trade. Users with funds on the old domain are directed to unwrap and re-deposit at the new address.