Shield any asset into one private pool. Once inside, deposits and withdrawals can’t be linked.
Every payment you receive is public.
Your freelance invoice. Visible.
Your donation. Traced.
Your salary. Searchable.
Blockchains are transparent by design. That transparency comes at a cost: your financial privacy.
Umbra makes payments private on Stellar.
Shield
Move funds into the pool — a deposit no one can link to you later.
Send
Transfer a shielded note privately — the amount hidden on-chain — or cash out, unlinkable from where the money came.
Disclose
Export an encrypted audit packet. Private by default, accountable by choice.
Non-custodial. No trusted relayers. Our own zero-knowledge circuits — verified by a Stellar smart contract.
Stablecoins. Payroll. Cross-border.
What people actually use Stellar for — without putting your whole financial life on a public ledger.
A freelancer invoices a client abroad and gets paid in USDC — without exposing their rate, their volume, or every other client.
A donor funds a cause without broadcasting their wallet history to anyone who cares to look.
A business pays suppliers privately — then discloses the records to its accountant, by choice, with a viewing key.
Verifiable, yet unlinkable.
What happened
Alice creates a payment link.
Bob pays 100 USDC.
Alice withdraws 100 USDC.
What Stellar sees
Deposit: 100 USDC → Pool
cannot be connected
Withdrawal: 100 USDC → Alice
The blockchain can verify every transaction is valid — without knowing who paid whom.
Built on real cryptography.
Zero-knowledge proofs
Every transaction includes a Groth16 proof: mathematical evidence that the rules were followed, with nothing else revealed.
On-chain verification
The Stellar smart contract verifies each proof before releasing funds. No trusted servers. No relayers.
Confidential transfers
Send a shielded note with the amount hidden on-chain — our own zero-knowledge circuit, not a third-party token. The chain sees a nullifier and a commitment, never a number.
Poseidon commitments
Your funds become sealed commitments — cryptographic locks that only you can open.
Nullifier protection
One-time nullifiers prevent double-spending. The math enforces it, not a company.
Circom circuits. BLS12-381. Soroban smart contracts. Verified on Stellar.
Private finance for Stellar.
Freelance payments
Send an invoice link. Get paid without exposing your income on-chain.
Donations
Accept contributions privately. Donors stay anonymous. Amounts stay hidden.
Payroll
Pay your team without publishing every salary to the world.
Commerce
Accept payments at checkout. Customers don't become public records.
Treasury
Move organizational funds without broadcasting your strategy.
Creator payments
Fans support creators privately. No public ledger of who paid what.
Any application on Stellar can integrate Umbra.
Get paid privately.
Create your first payment link in 30 seconds.
CBWIV33FQ27LOTA2LGM5SVL2WHAMBFLZTYOZXWKEMDBFCLU4BNIUQOLU