move the lens
glUSDa private dollarsolana · usdc-backed

Money,
after dark.

Every payment on a public chain is lit up for anyone to read. Gloam turns the lights down: deposit USDC, mint glUSD, shield it, and only your view key can see the amount, the sender or the receiver.

$GLOAM
See what leaks
glUSD price
$—
Collateral ratio
—
USDC in reserve
—
Treasury on-chain
glUSD minted
—
Held unseen
—
CHAPTERi.
what leakswhat a block explorer shows

A USDC payment is a lit window.
A Gloam payment is a drawn curtain.

Type a payment below. The left column is what any Solana explorer shows for an ordinary USDC transfer. The right column is everything Gloam writes down: a nullifier and a commitment, hashed in your browser while you type. Hover a hidden row to see what a view key would show.

usdc on solanapublic forever
from7pYQ…u4A · your wallet
to
amount
memo
balanceanyone can read it
historyevery payment, back to day one
glusd on gloam◉ shielded
fromyou
to
amount
nullifier…
commitment…
notex25519 + aes-256-gcm, to the receiver
CHAPTERii.
the shielded poolanonymity set

Every note goes into one dusk.

Shielded balances are commitments in a single Merkle tree. Spending one reveals a nullifier, never the commitment it came from. Every new person in the pool makes everyone else harder to pick out.

commitments: —
ledger · all an observer gets
CHAPTERiii.
side by sidesender · receiver · amount · peg

Privacy that keeps its dollar.

senderreceiveramountstable $1
USDC on Solanaexposedexposedexposedyes
Fixed-size mixershiddenexposedpool sizeno
Privacy coinshiddenhiddenhiddenvolatile
glUSD on Gloamhiddenhiddenhiddenyes
CHAPTERiv.
how it worksthree steps

Mint. Shield. Send.

1

USDC in, glUSD out.

Deposit USDC on Solana. 90% stays in the reserve as collateral; the other 10% is set aside to buy $GLOAM on the market and burn it. Nothing is minted from thin air.

mint(m)
reserve += 0.90 · m
burn $GLOAM ← 0.10 · m
2

The number goes dark.

Shielding turns public glUSD into a note encrypted to you alone and adds it to the pool as a commitment. Anyone else sees a shimmer where your balance was.

C = SHA-256("cm" ‖ amount ‖ owner ‖ r)
tree.append(C)
3

Sent, unseen.

A private send spends one note and writes a new one for the receiver. The ledger keeps a nullifier and a commitment, and nothing that names a person or an amount.

publish N = SHA-256("nf" ‖ secret ‖ i)
append C′ for the receiver
CHAPTERv.
the appsigned with your wallet

Come in out of the light.

Connect Phantom and sign one message. It's free and moves nothing. Every action below is signed by your wallet, and your shielded balance is shown only to you.

gloam · consolesolana · usdc◉ signed session
USDC on ledger
—
$GLOAM
—
glUSD · public
—
glUSD · unseen
reveallantern
your referral link

Earn 20% of every toll paid by the people you bring in.

referred—
earned—
top referrers
CHAPTERvi.
the roomsscroll →

One dollar, many rooms.

i · the envelopepay links

Pay with a link.

Seal shielded glUSD behind a secret and share the link. The first person to open it claims the money into their own shielded balance. No address is named, and the server stores only a hash of the secret.

ii · the lanternview keys

One person sees. Nobody else.

Create a read-only view key that opens a statement of your shielded balance and history. It can never spend. Give it to an accountant or a partner and nobody else.

iii · the night market1x · pyth prices

Trade in the dark.

Go long or short SOL, BTC and ETH with shielded glUSD. The market, the size and the P&L stay inside the shield.

open
—
volume
—
fees burned
—
notional
iv · bonds & the kiln−20% · −30%

$GLOAM under market.

Bond USDC for $GLOAM at 20% under market, vesting over 5 days, or lock it in the Kiln for 48 hours at 30% under, earning 80% APY. Bonds add to the reserve and mint no glUSD. Opens once $GLOAM trades.

bond price
—
market
—
capacity
—
bonded
—
kiln price
—
in the kiln
—
v · the long nightstaking

Staking with a sunrise.

Stake glUSD for a fixed APY paid in $GLOAM from a fixed pool. It ends on a set date or when the pool is spent, so it can never prop up the peg.

apy
—
staked
—
pool left
—
ends in
—
stakers
—
boost
vi · sundownbuyback & burn

Every toll goes to the fire.

30 bps on shield, send and unshield, 50 bps on redeem, plus the algorithmic share of every mint. Tolls buy $GLOAM on the market and burn it. The burn is public. Who paid never is.

burned
—
bought back
—
next burn
—
epochs
—
vii · embersburn log

Every epoch, written down.

CHAPTERvii.
roadmapledger → program → zero knowledge

From a ledger you trust to a proof you don't have to.

phase i · live

Private ledger

USDC deposits verified on Solana, mint and redeem, shielded balances, signed sessions, automatic withdrawals.

phase ii · live

The rooms

Envelopes, lanterns, the night market, the long night and the sundown burn.

phase iii · next

glUSD as an SPL token

A Solana program that mints and redeems glUSD against the USDC reserve.

phase iv · planned

Zero-knowledge pool

Shielded transfers proved on-chain, so privacy stops depending on the server.

phase v · planned

Audit, then open

Independent audits, then the pool opens to every Solana wallet and app.

CHAPTERviii.
questions

Asked after dark.

What is glUSD?
A dollar you can hold and send privately on Solana. Deposit USDC, mint glUSD at $1, and shield it whenever you like. A shielded balance looks like a shimmer to everyone but you, and a shielded send hides the amount and both people.
What backs glUSD?
USDC. Every mint is paid in full in USDC: 90% stays in the reserve, and 10% is set aside to buy $GLOAM on the market and burn it (it stays in USDC until burns are live). Redeeming pays back the 90% in USDC; the 10% comes back in USDC too until a burn has spent it, and after that in $GLOAM at market. The reserve and the treasury's on-chain USDC balance are shown live at the top of this page.
How do deposits work?
Phantom builds a plain USDC transfer to the treasury and you sign it: one signature, nothing else. The server reads the finalized transaction from Solana, checks that your wallet signed it and how much USDC arrived, and credits exactly that. Minimum 50 USDC. You can also paste the signature of a transfer you already sent.
Why do I sign a message when I connect?
It proves the wallet is yours. The signature is free and moves no funds. Anything that moves value needs it, and your shielded balance is shown only to your own signed session. Pasting someone else's address shows nothing private.
How do I get USDC back out?
Redeem glUSD for USDC on the ledger, then withdraw. The server sends the USDC to your wallet by itself, usually within a minute. Very large withdrawals can be held for a manual check, and payouts can be paused in an emergency; your balance stays on the ledger while they wait.
What are the Envelope and the Lantern?
An Envelope is a pay link: shielded glUSD locked behind a random secret that the first person to open the link can claim. A Lantern is a read-only view key that opens a statement of your shielded balance and history and can never spend.
What is the Night Market?
Private 1x exposure to SOL, BTC and ETH, priced from Pyth. You commit shielded glUSD to a long or a short. Positions are capped per wallet and in total by a house fund; a long can lose at most its stake and a short at most 95%. 30 bps each way goes to the burn.
What are Bonds, the Kiln and the Long Night?
Bonds sell $GLOAM for USDC at 20% under market, vesting over 5 days. The Kiln sells at 30% under with a 48-hour lock and 80% APY while locked. The Long Night pays a fixed APY in $GLOAM on staked glUSD until its end date or until its pool is spent. Bonds and the Kiln open once $GLOAM has a live market price.
Which wallet do I use?
Phantom, or any wallet that injects the Solana provider (Solflare, Backpack). You need USDC on Solana to deposit and a little SOL for the network fee.
What are the risks?
glUSD is a fractional-algorithmic dollar. Its peg is a mechanism backed by the USDC reserve, and algorithmic designs have failed before when the reserve ran thin. Today the ledger runs on the Gloam server and the USDC sits in a treasury wallet the server controls, until the Solana program in phase III. This is custodial. Deposit only what you can afford to lose.
$GLOAM

Your money, off the record.

No Solana wallet found. Open this page in Phantom (or Solflare, Backpack) to deposit, shield or send. To read a wallet's public ledger, paste its address.