Warptoad Cross-Chain Privacy Token Standard

A crosschain private token standard for aztec and EVM rollups.
Warptoad enables fully shielded transfers for both cross and regular transfers

warptoad.org · open‑source · research in progress

What is Warptoad?

Warptoad is a private cross-chain token standard. It aggregates commitments from multiple chains into a unified "Giga Root" on Ethereum, enabling assets to move between networks without revealing sender, recipient, or origin chain. Integrate it as a composable privacy layer for your dApp, L2, or cross‑chain protocol.

Shielded Transfers

Fully private transfers where everything is private: sender, recipient, which token, amount.

Giga Root

A root that contains all commitments of all chains!

cross-chain transfers

Sending to a warptoad-address will automatically bridge the tokens to the preferred chain while keeping that chainId private!

How it works

Read the source →
1) Commitment Aggregation

Warptoad asynchronously creates a merkle tree with all commitments from all chains using the GigaBridge. Proving against this tree allows us to keep the destination chain private.

2) Nullifiers

Warptoad commitments contain the chainId of the destination chain and the recipient is forced to spend/nullify that commitment only on that chain. This allows us to only bridge the commitment tree roots and we can do that asynchronously.

3) Exit window preserving

The protocol will automatically disconnect from a warptoad instance, if the contract detects that the rollup code changed. The security council can prevent this disconnection if the change is deemed secure, but only before the change goes through.
The user can always exit during the exit window.

Near future Developer Experience
  • Noir circuits and Aztec PXE integration
  • Simple private wallet API (WIP)
  • Composable adapters for L1/L2s bridge interfaces (WIP)
Security Architecture
  • Trustless settlement on Ethereum
  • No custodial bridge contracts
  • Only uses the native rollup bridges

Why it matters

Unified privacy

The size of the anonymity set directly affects how private a system is. A unified Giga Root means users on small chains benefit from the same privacy guarantees as those on Ethereum mainnet.

Invisible, Even Cross-Chain

No more worrying about getting front-run on new chains. With Warptoad, no one can see which chain you came from, or where you're bridging your funds to.

Composable Privacy Layer

Most privacy solutions require a siloed setup or custom logic. Composability allows Warptoad to be added to existing systems.

What's next

Targets/Milestones for the next version.

Track progress →
Task I
Permissionless GigaBridge

Anyone can make their own Warptoad

Task II
Sync Tree

Intents on top of Warptoad to speed up bridging

Task III
Railgun like UX

Shielded transactions and DeFi interactions

Task IV
Exit window preserving bridge

Solving the existential
"what if malicious upgrade"

Follow Warptoad for the latest developments

Follow progress, help test early releases, or read the docs (once they are ready 😉).