Private perpetual trading on Solana.
Shadow keeps trade size, direction, leverage, and margin encrypted while Solana handles settlement and Arcium handles confidential compute.
Three steps. Sensitive trade logic stays private, while the chain only sees the state it actually needs for settlement.
Size, direction, leverage, and margin are encrypted in your browser. You approve a session once, then the relay can handle repeated actions without interrupting every trade with another wallet popup.
Arcium's MPC network checks the trade, margin requirements, and liquidation conditions without any single node seeing the plaintext position data.
Verified results settle on Solana. The public chain gets the minimum settlement state it needs, while the sensitive trade fields stay encrypted through the active position lifecycle.
Privacy by default
On Shadow, the chain can see that a position exists, but not the sensitive details traders usually leak by default. Hover the blurred values to see how little an outside observer can actually learn.
Session Trading
Create a delegated trading session, sign once, and let the relay execute within the limits you approve. It is a calmer trading flow for active traders without giving up control over expiry, action caps, or margin limits.
Features
Orders do not broadcast the usual clues before execution. Size, direction, leverage, and liquidation-related internals stay out of the public mempool narrative.
Liquidation thresholds are hidden from casual observers, so traders are not forced to reveal one of the most exploitable parts of their position.
Approve a bounded session once and keep moving. It is faster for active trading, and clearer about what the relay is actually allowed to do on your behalf.
Trade validation runs through Arcium's MPC network with replay-hardened callbacks. The chain gets a verified outcome, not a plaintext view into your position.
Shadow is built to feel like a trading product first: quicker repeated actions, cleaner state handling, and privacy that stays in the background until you want to inspect it.
Relay-side refreshes, staleness checks, and circuit breakers are designed to fail loudly instead of pretending everything is fine when price freshness drifts.
On adopted devnet markets, one owner-scoped balance can fund multiple pairs. Free and locked collateral stay visible separately, which keeps the UX more honest.
Ready?
Connect your wallet, approve a session, and explore the current devnet build. The privacy model is live. The open lane is still being finished carefully.
Launch App