Cryptography behind the veil.
Hystrix requires zero custom token hooks or custodial pools. It pairs standard Curve25519 elliptic-curve Diffie–Hellman stealth derivation with a gas-sponsoring relayer and blind holder passes.
How a One-Time Quill is born.
Every recipient holds two independent Curve25519 keypairs: a scanning key (v, V = v·G) and a spending key (s, S = s·G). Together, (V, S) form their public Quill ID.
When a sender pays that Quill ID, their browser generates a fresh ephemeral scalar r, computes an ECDH shared secret c = H(r·V), and derives the one-time destination public key P = S + c·G.
On Solscan, funds arrive at P—an address that has never existed before and will never be reused. Using a 1-byte view tag, the recipient scans thousands of announcements in milliseconds and computes the matching private key p = s + H(v·R) locally.
// 1. Recipient publishes Meta-Address (Quill ID)
QuillID = encodeBase58(V_pub || S_pub)
// 2. Sender derives unlinkable One-Time Quill
r = randomScalar()
R_pub = r * G
shared = SHA256(r * V_pub)
viewTag = shared[0] // fast 1-byte filter
P_dest = S_pub + shared * G // fresh Solana address
// 3. Recipient detects & unlocks locally
if (SHA256(v_priv * R_pub)[0] == viewTag) {
p_spend = s_priv + SHA256(v_priv * R_pub)
}Solving the gas-funding leak.
Stealth addresses fail if you send 0.005 SOL from your main wallet to pay transaction gas—because that gas transfer immediately links the stealth address back to you.
Veil Relay
You sign the withdrawal instruction locally with p_spend. A Hystrix Veil Relayer wraps the transaction as fee-payer on Solana, pays the lamport fee, and deducts its relay fee directly from the transferred SOL or USDC.
Split Sweep
Available to Quill and Veil holders: split a stealth balance across 2–5 randomized sub-transfers dispatched over staggered intervals so amount-correlation heuristics break down.
Quill Drop Links
Lock SOL or USDC into a zero-address claim vault keyed by a secret fragment in the URL hash (#secret never touches HTTP servers). Drop the link in Telegram or X DM; recipient sweeps to any wallet.
// Unlinkable Holder Tier Verification (Blind Veil Pass)
// Step A — Prove $HSTX balance with Phantom
balance = getSplBalance(walletPub, HSTX_MINT)
blinded = blind(randomPassId, blindingFactor)
sig_b = issuerSign(blinded, tierOf(balance))
// Step B — Unblind locally & redeem later on Veil Relay
veilPass = unblind(sig_b, blindingFactor)
// Relayer verifies 0% fee tier mathematically
// Zero knowledge of which $HSTX wallet minted itProve you hold $HSTX without doxxing your wallet.
If you connected your main Phantom wallet directly to a relayer while sweeping a stealth address, the relayer could correlate the two. Hystrix eliminates that risk with Blind Veil Passes.
You sign once with the Phantom wallet holding your $HSTX to obtain a blind-signed tier credential stored in your browser. Later, when sweeping any stealth address, you attach the unblinded token: the relayer verifies your 0% fee right without knowing which holder wallet issued it.
Mint a Blind Veil Pass in Console →