mirror of
https://github.com/0xbow-io/privacy-pools-core.git
synced 2026-01-09 01:17:58 -05:00
9e5938fd7c
Add defense-in-depth check to ensure the feeCommitment.withdrawalData matches the actual withdrawal.data being submitted. This prevents a stale fee commitment (quoted for a different amount) from being used with a different withdrawal, which could result in incorrect fees. The frontend had a bug where typing an amount character by character would not refetch the quote, causing mismatched fee commitments. This server-side check ensures such mismatches are rejected.
Privacy Pool Protocol
Privacy Pool is a blockchain protocol that enables private asset transfers. Users can deposit funds publicly and partially withdraw them privately, provided they can prove membership in an approved set of addresses.
Overview
The protocol implements a system of smart contracts and zero-knowledge proofs to enable privacy-preserving transfers while maintaining compliance through approved address sets. It supports both native assets and ERC20 token transfers.
Repository Structure
This is a Yarn workspaces monorepo containing four packages:
├── packages/
│ ├── circuits/ # Zero-knowledge circuits
│ └── contracts/ # Smart contract implementations
│ └── relayer/ # Minimal relayer implementation
│ └── sdk/ # Typescript toolkit
See the README in each package for detailed information about their specific implementations:
Development
To set up the development environment:
# Install dependencies
yarn