Skip to main content
Most bridges record the sending and receiving addresses together on chain, where anyone can see them. Setting privacy: true on a quote limits routing to venues that do not publish that link. 10 of the 38 venues qualify.

​
Which venues qualify

Each venue was assessed against one question, using only its own documentation: does a transfer through it break the on-chain link between the sending and receiving address? If the documentation was unclear, the answer was no. GET /bridge/venues returns each venue’s privacyModel.

​
The four unlinkable venues

Husher routes the swap through a Monero or Zcash shielded transaction. It costs roughly 1% more than a standard route. Husher’s own terms say it is not a mixer, that traceability is reduced rather than eliminated, and that the exchange providers behind it can apply their own compliance checks. Husher needs the end user’s IP address, so send userIp if you call the API from a server. Houdini routes a private swap through two exchange hops with a rotating intermediary, Monero when available, so the deposit and the payout share no on-chain link. BRDG asks it for private routes only. Houdini’s own terms say this is not absolute anonymity: its partner exchanges screen deposits and can see both legs. Privacy Cash pays out of a shielded pool. A zero-knowledge proof made in the browser withdraws from the user’s private balance, so the withdrawal carries nothing about the original deposit. BRDG asks it for private routes only. The deposit into the pool is public, and a distinctive amount withdrawn soon after can still be matched. NEAR Intents settles a private transfer as a confidential intent on a private network with no public explorer. The payout arrives as an ordinary transfer from a solver. That network supports selective disclosure to auditors.

​
Limits of private routing

  • Amount and timing can still link the two sides. A distinctive amount leaving one chain and arriving on another a few minutes later can be matched without looking at the venue at all.
  • An exchange desk keeps a record of which deposit matched which payout, and can ask for identity after funds have moved.
  • Nothing is mixed. Private routing makes a transfer harder to trace; it does not make it anonymous.

​
Using it in the API

  • Send privacy: true on POST /bridge/quote. It carries over to POST /bridge/build.
  • Venues that are not private are skipped before pricing and listed in rejected with the code privacy_venue_required.
  • If no private venue serves the route, the quote has emptyReason: "no_private_route".
  • GET /bridge/routes?privacy=true lists the private venues for a route.
  • Building a non-private venue against a private quote is refused with 409 privacy_venue_required.