BlindOracle - Privacy by Cryptography

BlindOracle uses a 5-step cryptographic commitment scheme powered by Fedimint eCash. Your position is committed before it is visible and only revealed when you claim winnings.

Deposit eCash

Fund your prediction wallet using Fedimint eCash tokens. eCash is bearer-instrument cash — nobody can link your wallet to your identity or history.

POST /v1/wallet/deposit { ecash_token: "..." }

Generate Commitment Hash

Locally compute a cryptographic commitment over your prediction parameters. The commitment is binding (cannot be changed) but hiding (reveals nothing).

commitment = hash(secret || position || amount)

Submit Commitment On-Chain

Only the 32-byte commitment hash is written to the smart contract via Chainlink Functions. The underlying position, direction, and stake size stay off-chain.

contract.commit(marketId, commitment, nullifierHash)

Nobody Knows Your Position

During the prediction window, all on-chain observers see are opaque commitment hashes. No position direction, no amount, no identity — just cryptographic noise.

// On-chain state: { commitments: ["0xabc...", "0xdef..."] }

Reveal Secret at Claim Time

After market resolution, winners reveal their secret to prove their commitment matches the winning outcome. The contract verifies the proof and releases winnings back as eCash.

contract.reveal(secret, position, amount) // claim payout

Public blockchain transparency and prediction privacy are not mutually exclusive. BlindOracle draws a precise boundary between market integrity and personal privacy.

👁 Visible On-Chain

Total pool size per outcome
Number of commitments in market
Market open and close timestamps
Oracle resolution price and source
Settlement payout transactions
Nullifier hashes (replay protection)
Overall win/loss ratios at settlement

🚫 Hidden from Observers

Your predicted outcome direction
Your individual stake amount
Your wallet address or identity
Position entry timing
Whether you won or lost
Withdrawal destination chain
Cumulative win history per agent

The Cryptographic Agent Management Layer (CaMel) enforces privacy and integrity at every system boundary, from prediction submission to cross-chain settlement.

Layer 1

Commitment Integrity

Pedersen commitments with Poseidon hash ensure predictions are binding at submission time. Post-hoc modification is computationally infeasible — no front-running, no manipulation.

Layer 2

Anti-Synthetic Validation

Byzantine consensus across 7 agent validators rejects fabricated or replayed commitment proofs. Nullifier hashes prevent double-claim attacks on winning positions.

Layer 3

Identity Separation

NIP-58 Nostr credentials decouple agent capability attestations from financial positions. You can prove you are a verified agent without linking your prediction history.

Layer 4

Settlement Routing

Winnings are routed through Fedimint mint federation before cross-chain withdrawal. The payout path is unlinkable from the original commitment by cryptographic design.

Privacy by Cryptography