# Introduction

You worked hard for what you have.

Late nights. Calculated risks. Years of learning a space most people still don't understand. And somewhere along the way — it paid off.

But the moment it did, something changed.

Your wallet became a window. Anyone with a browser can see exactly what you hold, what you've done, and what you're worth. Not your bank. Not your government. Anyone. The person sitting across from you at a conference. The stranger who found your ENS name. The analytics firm that's been tracking wallets like yours for years.

This is the part nobody told you about DeFi.

The freedom was real. The transparency was the price. And for a long time, there was no way to have one without the other.

This changes here.

Redacted is a private DeFi execution layer built on [Rujira](https://rujira.network), THORChain's omnichain app layer. Trade, swap, borrow, provide liquidity — with native BTC, ETH, XRP, and every asset THORChain supports — without anyone being able to trace it back to you.

Everything you already do in DeFi. Just finally, actually, without your life story attached to every transaction.

> Trade privately. Bank on-chain. Stay in control.

***

## Links

* **Website:** [redacted.money](https://www.redacted.money)
* **Telegram:** [t.me/redactedFND](https://t.me/redactedFND)
* **X (Twitter):** [@redacted\_money](https://x.com/redacted_money)
* **Ronin NFT Claim:** [redacted.money/nft](https://www.redacted.money/nft)
* **Built on:** [Rujira](https://rujira.network) — THORChain's omnichain app layer


# Why Redacted

In 2008, the world was burning.

Banks had gambled with everything — savings, pensions, homes — and lost. Governments printed money to cover the wreckage. Trust in the financial system had collapsed so completely that a pseudonymous cryptographer decided to build a replacement from scratch.

No banks. No gatekeepers. No permission required.

It was radical. It worked. And it changed everything.

But Satoshi knew it wasn't perfect. The public ledger — the very mechanism that made Bitcoin trustless — was also its most dangerous feature. Every wallet. Every balance. Every transaction. Permanently visible to anyone, anywhere, forever.

In 2008, that was the only way to build trustless consensus. There was no alternative.

There is now.

Sixteen years of cryptographic research later, zero-knowledge proofs have matured to the point where you can prove ownership, prove authorization, prove you're not a bad actor — without revealing anything else. The trade-off Satoshi accepted out of necessity no longer has to exist.

Redacted was built on that realization. And on the mounting evidence that the public ledger isn't just a philosophical problem — it's getting people hurt.

***

## The Public Ledger Problem

Every wallet. Every balance. Every transaction. Permanently visible. Permanently traceable. Permanently public.

In traditional finance, your bank balance is private by default. In DeFi, it's the opposite — your entire financial history is open to anyone with an internet connection. Chain explorers, analytics tools, wallet trackers — the infrastructure to profile you already exists and is being used.

This isn't theoretical. The consequences are real — and they're getting worse.

***

## What Happens When Your Balance Is Public

[**270,000 home addresses. One database. One breach.**](https://www.bitdefender.com/en-us/blog/hotforsecurity/hacker-publishes-stolen-email-and-mailing-addresses-of-270000-ledger-cryptocurrency-wallet-users)

In 2020, Ledger's customer database was breached and published publicly. Names, phone numbers, and home addresses of 272,000 hardware wallet owners were dumped on a hacking forum. The data was cross-referenced with on-chain balances. Suddenly, thousands of people with significant crypto holdings had their home address attached to their net worth — for anyone to see.

The threats started immediately. Extortion emails. Fake home invasion warnings. Phishing sites. The breach didn't touch a single private key — but it made every affected user a physical target.

[**Ledger Co-Founder David Balland. Finger severed. €10M ransom demanded.**](https://www.coindesk.com/policy/2025/01/24/ledger-co-founder-s-kidnapping-sheds-light-on-soaring-crypto-robberies)

In January 2025, David Balland — co-founder of Ledger — was abducted from his home in France with his wife. Before police could intervene, his captors severed one of his fingers and sent video footage demanding a ransom of 100 BTC. The attackers knew who he was, where he lived, and what he was worth. The GIGN special forces eventually rescued him — but the message was clear: public wealth is a public target.

[**£4.3M crypto home invasion. Wallet traced. Address found.**](https://cryptoslate.com/the-uks-4-3m-crypto-home-invasion-shows-how-a-single-data-leak-can-put-anyones-wallet-and-safety-at-risk/)

A UK crypto holder with a £4.3M on-chain balance was targeted in a violent home invasion. Investigators later confirmed the attackers had used a data breach to cross-reference wallet holdings with a physical address — they didn't pick their target at random. They checked the balance first, then knocked on the door.

[**$66M crypto robbery plot. Teens. Scottsdale. Fully coordinated.**](https://www.ainvest.com/news/crypto-crimes-day-66m-theft-plot-6m-ransom-2602/)

Two teenagers were arrested in Scottsdale, Arizona, after planning a targeted home invasion to steal $66 million in cryptocurrency. The operation was coordinated in advance — the target's address, identity, and holdings were known before a single step was taken.

**The $5 Wrench Attack.**

The concept is brutally simple: your wallet balance is public. Anyone can look it up. A bad actor with $5 worth of hardware and no technical skill can find out exactly what you hold — and decide whether it's worth paying you a visit. No code required. No exploit needed. Just a public ledger and a decision.

***

## The Pattern Is Clear

Across every incident, the mechanism is the same:

1. On-chain balance is visible
2. Identity or address is linked — through a breach, a purchase record, a KYC leak, or social media
3. Target is selected, located, and approached

The blockchain didn't cause these attacks. But the public ledger made them possible.

In traditional banking, no one can look up your account balance from a public URL. In DeFi, anyone can. That asymmetry — between financial access and financial exposure — is the problem Redacted was built to solve.

***

## Privacy Is Not a Feature. It's a Right.

In 2008, Satoshi gave the world permissionless money. The public ledger was a necessary trade-off — transparency for trust, in the absence of any other mechanism.

But that trade-off was never meant to be permanent.

The tools exist. The cryptography is proven. The infrastructure is ready.

You can prove you're not a bad actor without revealing everything you own. You can transact freely without publishing your net worth to the world.

Redacted is what happens when you refuse to accept the trade-off.

> Private Banking for DeFi. On-chain. Compliant. Yours.


# Our Story

## From Terra to THORChain — Forged Through Adversity

Redacted's journey begins in early **2022** under our former name **TerraBay**, building on the Terra blockchain. In February 2022, we launched the **Ronin NFT** collection — 2,968 Ronin-inspired NFTs that sold out and raised 742,000 UST, funding the development of our privacy protocol.

Then came the storm. In **May 2022**, the Terra ecosystem collapsed — UST and LUNA imploded in one of crypto's most devastating events. But our vision and commitment never wavered. The protocol was largely completed before the crash, and the team pressed forward.

In **July 2022**, we seamlessly transitioned the Ronin NFTs and the project to **Terra V2**, where we successfully launched our first privacy-centric protocol — proving our adaptability under the most hostile conditions.

But we knew Terra V2 wasn't the long-term home for what we were building. We needed a foundation as decentralized and resilient as our mission demanded.

## Why THORChain and Rujira

We chose **THORChain** and its application layer **Rujira** for two reasons: **true decentralization** and **any asset, best liquidity**.

THORChain is one of the most decentralized cross-chain protocols in existence — no multisigs, no centralized bridges, no single points of failure. It settles native assets (real BTC, real ETH, real XRP) without wrapping or custodians. This is the kind of infrastructure that a privacy protocol must be built on — because privacy is only as strong as the base layer it runs on.

But decentralization alone wasn't enough. Our vision is **programmable privacy for any asset** — and THORChain is the only protocol that gives us native access to every major chain's assets with the deepest cross-chain liquidity in DeFi. No wrapped tokens, no bridging risk, no liquidity fragmentation. When you trade privately through Redacted, you're trading real assets with real depth.

**Why this matters for Redacted:**

* **Any asset** — Native BTC, ETH, XRP, BNB, AVAX, ATOM, and every chain THORChain supports. Programmable privacy isn't limited to one chain
* **Best liquidity** — THORChain's deep cross-chain liquidity means better execution, tighter spreads, and real volume for privacy-preserving trades
* **No trusted bridges** — Your BTC is real BTC, your ETH is real ETH. No wrapped tokens, no custodial risk
* **Validator-secured** — THORChain's economic security model ensures no single entity can censor transactions
* **Rujira's composability** — Full CosmWasm smart contract environment with access to THORChain's liquidity and settlement
* **Aligned values** — A community and infrastructure that believes decentralization isn't optional

The team's deep roots in the THORChain ecosystem — built through years of close collaboration — made this a natural homecoming. Redacted isn't just deployed on Rujira; it's woven into the fabric of the THORChain universe.

## An Independent Protocol with a Multichain Vision

Redacted is an **independent protocol** — it operates on top of Rujira with its own governance, its own token ($RED), and its own community. Rujira is our base, our home chain, the foundation everything is built on.

But we're not stopping there. The plan is to deploy **multiple outposts on other chains** — expanding Redacted's privacy layer across the crypto landscape. Every outpost, every integration, every expansion drives value back to where it belongs: **our base on Rujira**.

This is how you build a privacy network effect: one base, many outposts, all flowing home.

## From Self-Reliant to B2B — The Next Chapter

Up until now, Redacted has been fully self-reliant — building our own protocol, our own interface, our own community from the ground up. That independence is core to who we are and it's not going away.

Going forward, we're expanding into **B2B integrations** — embedding Redacted's privacy infrastructure into existing protocols, wallets, and DeFi platforms. Best-in-class privacy as a service, integrated where users already are. Every integration earns revenue that flows back to $RED stakers and Ronin NFT holders.

**Two paths, one mission:**

* **Redacted Interface** — Our own frontend for maximum privacy and full decentralization. No compromises, no middlemen. The purest privacy experience
* **B2B Integrations** — Redacted's privacy layer plugged into existing infrastructure. Partners get programmable privacy for their users; Redacted earns on every interaction

This dual approach means Redacted's privacy layer reaches users everywhere — through our own interface for those who want the full experience, and through partner integrations for those who want privacy built into tools they already use. All revenue flows home.


# How It Works

Redacted gives you a **Private Wallet** with two components — a **Private Reserve** (shielded reserve) and a **Spendable** balance (usable private funds). Together with a **Gas Tank** for swap fees, this creates a clean, simple structure for private DeFi.

## 1. Private Reserve (Shielded Reserve)

The **Private Reserve** is the shared privacy pool where all user deposits are aggregated. When you deposit assets from your public wallet, they enter the Reserve alongside deposits from every other user. This co-mingling of funds creates your **privacy set** — the larger the pool and the more active users, the stronger your privacy.

**What the Private Reserve does:**

* Receives deposits from public wallets
* Tracks balances using encrypted stealth addresses
* Validates zero-knowledge proofs for all operations
* Serves as the single entry and exit point for all funds

> Think of it like a private vault at a bank — many people store funds in the same institution, and an outside observer cannot tell which safe deposit box belongs to whom.

## 2. Spendable (Private Balance)

The **Spendable** balance is your personal, private execution account. When you're ready to interact with DeFi, you move funds from your Private Reserve to Spendable. From here, you can trade, swap, borrow, enter liquidity pools, bid on liquidations, and use any Rujira application — all without revealing your identity.

**What the Spendable balance does:**

* Holds funds ready for DeFi interactions
* Executes transactions privately on your behalf
* Interacts with any Rujira application (Trade, Perps, Liquidations, Index, Launchpad, Strategies)
* Collects results (swap outputs, yields) back into your private balance

**Important:** There is no direct path from Spendable to your Public Wallet. Funds must always return through the Private Reserve first. This enforces the privacy model and ensures compliance.

## 3. Gas Tank

The **Gas Tank** is a dedicated RUNE reserve that pays for swap fees on transactions that route through THORChain's base layer. Other actions within Redacted are gasless.

* **RUNE only** — Only accepts RUNE denomination
* **Swaps only** — Covers the \~0.02 RUNE swap fee per transaction
* **Other actions don't require gas** — Deposits, moving to Spendable, moving back to Reserve are gasless
* **Funded from your Public Account** — Deposit RUNE into your Gas Tank directly

> Fund your Gas Tank with RUNE to enable private swaps. Non-swap actions like deposits and internal transfers don't require gas.


# Getting Started

## Setup

1. Connect your wallet
2. Click the ghost icon to enter Privacy Mode
3. Sign \~3 transactions to initialize your Private Wallet

That's it — your Private Wallet is ready.

## The Complete Privacy Flow

```
Public Wallet ──DEPOSIT──→ Private Reserve ──MAKE SPENDABLE──→ Spendable
                                                                    │
                                                          Interact with DeFi
                                                       (Trade, Swap, Borrow, etc.)
                                                                    │
Spendable ──MOVE TO RESERVE──→ Private Reserve ──WITHDRAW──→ Public Wallet
```

## Step 1: Deposit to Private Reserve

Go to **Portfolio** and select an asset to deposit. Your funds enter the shared Private Reserve alongside other users' deposits. The link between your public wallet and your reserved balance is protected by encrypted stealth addresses.

* Any supported asset can be deposited
* No zero-knowledge proof required for deposits
* Your balance is tracked privately via stealth address encryption

## Step 2: Make Spendable

When you're ready to use your funds, move them from the Private Reserve to your Spendable balance. This requires a zero-knowledge proof — proving you own the funds without revealing who you are.

You can freely move between: **Private Reserve ↔ Spendable**

## Step 3: Interact with DeFi

Use your Spendable balance to interact with any Rujira application — exactly like you would with a normal wallet:

| Application          | Description                                                                                          | Status      |
| -------------------- | ---------------------------------------------------------------------------------------------------- | ----------- |
| **Trade**            | RUJI Trade orderbook DEX — market orders, limit orders, staking, and advanced algorithmic strategies | Live        |
| **Cross-chain Swap** | Cross-chain swaps via THORChain                                                                      | Live        |
| **Perps**            | Perpetual futures trading                                                                            | Coming soon |
| **Liquidations**     | Protocol auction participation                                                                       | Live        |
| **Index**            | Diversified asset baskets                                                                            | Live        |
| **Borrow**           | Lending and borrowing                                                                                | Live        |
| **Launchpad**        | Token launches                                                                                       | Coming soon |

All transactions execute privately from your Spendable balance. No one can trace them back to your public wallet.

## Step 4: Move Back to Reserve

When you're done, move your funds (including any profits) back from Spendable to the Private Reserve. This step is required before you can withdraw to a public wallet.

## Step 5: Withdraw

Withdraw from the Private Reserve back to your public wallet. A zero-knowledge proof validates your authorization without revealing which deposits are yours.


# How Privacy Works

## The Privacy Set

Privacy in Redacted comes from the **privacy set** — the pool of all deposits sitting in the Private Reserve at any given time. The more users and the more diverse the deposits, the harder it becomes for anyone to link a specific withdrawal to a specific deposit.

## Best Practices for Stronger Privacy

1. **Deposit to Reserve** — Funds enter the shared pool, breaking the on-chain link to your public wallet
2. **Spend from Private Balance** — Move funds to Spendable when ready and interact with DeFi privately
3. **Wait in Reserve for privacy** — Let funds sit in the Reserve to grow your privacy set. The longer you wait, the stronger your privacy
4. **Vary your amounts** — Move different amounts than you deposited. Example: deposit $1,000 to Reserve, wait 2 days, then move only the $200 you need to Spendable

## What's Visible vs. What's Private

| Data                                                           | Visibility                       |
| -------------------------------------------------------------- | -------------------------------- |
| Deposits into Private Reserve                                  | Public (amount, timestamp)       |
| Total Reserve pool balance                                     | Public                           |
| Spendable account interactions with DeFi                       | Public (standard contract calls) |
| Withdrawal transactions                                        | Public (amount, recipient)       |
| **Link between your public wallet and your Spendable account** | **Not linkable**                 |
| **Link between your deposit and your withdrawal**              | **Not linkable**                 |
| **Which Spendable account belongs to which depositor**         | **Not linkable**                 |

All transactions are visible on-chain. Privacy comes from the inability to link them together — not from hiding them.

## Privacy Guarantees and Limitations

### What Redacted Guarantees

* **Deposit-withdrawal unlinkability** — Probabilistic; depends on pool activity and user diversity
* **Stealth address confidentiality** — Cryptographic; protected by AES-256-CBC encryption
* **Spendable account ownership** — ZK-enforced; requires valid proof to operate
* **Non-custodial control** — Only you can move your funds, always

### What Redacted Does NOT Guarantee

* **Transaction amount privacy** — Deposit and withdrawal amounts are public
* **Transaction timing privacy** — Timestamps are public on-chain
* **Perfect anonymity** — Privacy is probabilistic, not absolute
* **Network-level privacy** — IP addresses, browser fingerprints, and client-side data are outside scope

### Factors That Strengthen Privacy

* More users depositing to the Reserve (larger privacy set)
* Greater diversity of deposit amounts and timing
* Longer wait times in Reserve before making funds spendable
* Varying the amounts you move between Reserve and Spendable

### Factors That Weaken Privacy

* Depositing and withdrawing identical uncommon amounts
* Immediate deposit-to-withdrawal sequences
* Low pool activity periods (fewer concurrent users)
* Consistent behavioral patterns that can be fingerprinted


# Compliance

Redacted is designed to provide privacy while maintaining full regulatory compliance. Privacy and compliance are not enemies — they coexist by design.

## OFAC and Illicit Address Screening

All deposits are screened against OFAC blacklists and known illicit addresses. Deposits from flagged addresses are blocked at the protocol level, ensuring the privacy pool remains clean.

## Proof of Innocence (PoI)

Users can generate a **Proof of Innocence** — a cryptographic proof that demonstrates their funds are not associated with bad actors, without revealing their full transaction history. This allows users to prove compliance without sacrificing privacy.

## Secure Origin Verification

Withdrawals can only be directed to the address that originally deposited the funds. This creates an auditable trail from origin to destination, satisfying Anti-Money Laundering (AML) and Know Your Customer (KYC) frameworks — while keeping individual transactions within the system private.

While transactional privacy is maintained throughout the use of Private Banking Accounts, the starting and end points of the transaction flow are verifiable on the public blockchain.

## Shareable Read-Only Key

Users can optionally generate a **read-only private key** that allows third parties (auditors, tax professionals, regulators) to view transaction history without gaining control over funds. It is exclusively the user's choice to create and distribute this key — ensuring user control and privacy.

## How Compliance and Privacy Coexist

| Aspect                 | Privacy                                   | Compliance                          |
| ---------------------- | ----------------------------------------- | ----------------------------------- |
| Deposit screening      | Transparent                               | OFAC + illicit address blocking     |
| Deposit source         | Recorded on-chain                         | Traceable to origin wallet          |
| Internal activity      | Shielded by stealth addresses + ZK proofs | Viewable via optional read-only key |
| Fund legitimacy        | Private by default                        | Provable via Proof of Innocence     |
| Withdrawal destination | Must match deposit origin                 | Auditable end-to-end flow           |
| Transaction history    | Private by default                        | Shareable at user's discretion      |


# Architecture

## System Overview

```
┌──────────────────┐                    ┌──────────────────────────────────┐
│   Public Wallet   │──── Deposit ─────→│        Private Reserve           │
│  (on-chain addr)  │←─── Withdraw ─────│     (Shared Privacy Layer)       │
└──────────────────┘                    │                                  │
                                        │  • Aggregates all deposits       │
                                        │  • Encrypted stealth addresses   │
                                        │  • ZK proof verification         │
                                        │  • Balance ledger                │
                                        └──────────┬───────────────────────┘
                                                   │
                                        Make Spendable / Move to Reserve
                                                   │
                                        ┌──────────▼───────────────────────┐
                                        │    Spendable (Private Balance)    │
                                        │                                  │
                                        │  • Isolated execution env        │
                                        │  • Private DeFi interactions     │
                                        │  • Fee deduction (15 bps)        │
                                        │  • Cannot call Reserve           │
                                        └──────────┬───────────────────────┘
                                                   │
                                          Execute / Interact
                                                   │
                                        ┌──────────▼───────────────────────┐
                                        │     Rujira Applications           │
                                        │                                  │
                                        │  Trade • Perps • Liquidations    │
                                        │  Index • Borrow • Launchpad     │
                                        │  Strategies • Staking            │
                                        └──────────────────────────────────┘

                    ┌──────────────────────────────────────┐
                    │          Gas Tank (RUNE)              │
                    │  • ~0.02 RUNE per swap                │
                    │  • Funded from Public Account         │
                    │  • Only needed for swaps/sends        │
                    └──────────────────────────────────────┘
```

## Smart Contract Architecture

Redacted is built with **CosmWasm** on Rujira and consists of three components:

| Component                            | Role                                                                                                                         |
| ------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------- |
| **Private Reserve** (Proxy Contract) | Central privacy pool. Handles deposits, withdrawals, balance tracking, stealth address encryption, and ZK proof verification |
| **Spendable** (Sub-Wallet Contract)  | Isolated execution environment for each user. Handles DeFi interactions, fee collection, and private transaction execution   |
| **Protocol Package**                 | Shared cryptographic library containing Groth16 ZK verification, elliptic curve operations, and common types                 |

## Security Properties

* **Spendable accounts can only be called by the Private Reserve** — No external contract can trigger your Spendable account
* **Spendable accounts cannot call the Reserve** — Prevents reentrancy attacks
* **Spendable accounts cannot call other Spendable accounts** — Full isolation between users
* **Every sensitive operation requires a ZK proof** — Creating a Spendable account, funding it, executing trades, withdrawing

## Zero-Knowledge Proofs

Redacted uses **Groth16 zk-SNARKs** (on the BN254 elliptic curve) to let you prove you're authorized to perform an action — without revealing who you are.

Every sensitive action requires a proof:

| Action                   | What the Proof Validates                                              |
| ------------------------ | --------------------------------------------------------------------- |
| Create Spendable account | You own the stealth address                                           |
| Fund Spendable           | You own the Reserve balance and are authorized to move it             |
| Execute trade/swap       | You own the Spendable account and authorize this specific transaction |
| Withdraw                 | You own the Reserve balance and authorize withdrawal to this address  |

### What ZK Proofs Do NOT Hide

* **Pool balances** — Total Reserve balances are visible on-chain
* **Trade execution** — Swaps execute through THORChain with standard visibility
* **Transaction timing** — All operations have visible timestamps
* **Transaction amounts** — Deposit and withdrawal amounts are public

ZK proofs enforce **authorization without revealing identity**. They prove "I am allowed to do this" without revealing "I am the person who deposited X at time Y."

## Technical Specifications

| Parameter              | Value                          |
| ---------------------- | ------------------------------ |
| Stealth address length | 64 hex characters (32 bytes)   |
| Encryption algorithm   | AES-256-CBC                    |
| Hash function          | SHA-256                        |
| ZK proof system        | Groth16 (BN254 curve)          |
| Protocol fee           | 15 bps (0.15%) per interaction |
| Gas Tank denomination  | RUNE only                      |
| Swap fee               | \~0.02 RUNE per transaction    |

### Built With

* **CosmWasm** — Smart contract framework for Cosmos-based chains
* **Rust** — Systems programming language for contract development
* **Rujira** — THORChain's omnichain application layer
* **Groth16** — Zero-knowledge proof system for efficient on-chain verification
* **BN254** — Elliptic curve for pairing-based cryptography

## Security Audits

| Audit                       | Auditor          | Date                  | Scope                                                            |
| --------------------------- | ---------------- | --------------------- | ---------------------------------------------------------------- |
| Rujira Smart Contract Audit | **FailSafe**     | January–February 2026 | Proxy contract, Sub-Wallet contracts, Protocol Package on Rujira |
| Terra Mixer Contract Audit  | **SCV-Security** | September 2022        | Original mixer contracts on Terra                                |

The FailSafe audit covered the full Redacted smart contract suite deployed on Rujira — including the Private Reserve (Proxy), Spendable (Sub-Wallet), and shared Protocol Package. 9 findings were identified (1 High, 1 Low, 7 Informational), with all critical issues resolved.

* [FailSafe Audit Report (PDF)](https://getfailsafe.com/pdfs/Redacted%20-%20FailSafe%20Security%20Report%20-%20Final.pdf)
* [FailSafe Audit Overview](https://getfailsafe.com/redacted-smart-contract-audit)


# Tokenomics & Revenue

## Revenue Model

Every interaction made through Redacted involves a **15 basis point (0.15%) fee**. While this fee is minimal on an individual level, it forms a significant revenue stream across the multitude of daily transactions on the platform.

### Revenue Split

| Recipient             | Share           |
| --------------------- | --------------- |
| **$RED stakers**      | 50% of all fees |
| **Ronin NFT holders** | 50% of all fees |

Fees are distributed directly — $RED stakers and Ronin NFT holders both receive their share of protocol revenue.

### Revenue Example

* Alice swaps 10,000 USDT to USDC through Redacted
* At 15 bps (0.15%), this costs 15 USDT in fees
* 7.50 USDT is distributed across $RED stakers
* 7.50 USDT is distributed to Ronin NFT holders

### Revenue Projections

At an average of $50M monthly volume in later stages: \~$75,000/month in fees split equally between $RED stakers and Ronin NFT holders.

Starting at $1.5M monthly volume, growing by $500K/month — yields significant cumulative fees within the first two years of operation.

***

## $RED(acted) Token

### Own RED(acted)

Dual-functioning as a **utility and governance token**, $RED emerges from a total supply of exactly **100,000,000 $RED** — offering an opportunity to own a piece of Redacted.

Hold $RED and you're not just a token holder — you're a part-owner of Redacted, entitled to **50% of all protocol fees**, paid directly to your wallet.

The remaining 50% is dedicated to Ronin NFT holders.

$RED is planned to launch via the **RUJI Launchpad**, with a **$50,000 token swap and staking pact** aligning interests between RUJI and RED — keeping Redacted operationally independent while sharing mutual incentives.

### Tokenomics

| Allocation      | TGE Unlock | Cliff (months) | Vesting (months) | Supply % | Tokens     |
| --------------- | ---------- | -------------- | ---------------- | -------- | ---------- |
| Seed            | 5%         | 6              | 18               | 5%       | 5,000,000  |
| Private Sale    | 10%        | 3              | 18               | 2%       | 2,000,000  |
| Public Sale     | 100%       | 0              | 0                | 10%      | 10,000,000 |
| Team & Advisors | 5%         | 6              | 30               | 20%      | 20,000,000 |
| Migration       | 50%        | 0              | 12               | 12.35%   | 12,350,000 |
| Marketing       | 20%        | 0              | 24               | 6%       | 6,000,000  |
| Airdrop         | 25%        | 0              | 12               | 9.65%    | 9,650,000  |
| Treasury        | 0%         | 6              | 12               | 20%      | 20,000,000 |
| Liquidity       | 50%        | 0              | 36               | 15%      | 15,000,000 |

**Total Supply: 100,000,000 $RED**

***

## Ronin NFT

### The OG Community Asset

* **Collection Size:** 2,968 Ronin-inspired NFTs
* **Revenue Sharing:** Each NFT grants its holder a **50% share of all fees** generated by Redacted

Owning a Ronin NFT is synonymous with owning a 50% stake in Redacted's revenue. The remaining 50% of fees are allocated to $RED stakers — creating a balanced, dual-stakeholder ecosystem.

### History

In **February 2022**, under our former name **TerraBay**, we launched the Ronin NFT collection on the Terra blockchain. The collection sold 2,968 units, raising **742,000 UST**. The funds were designated for protocol development, which was largely completed before the collapse of UST and LUNA.

The Ronin NFT, originally minted on Terra Classic, seamlessly transitioned to **Terra V2 in July 2022**. During this transition, we launched our first privacy-centric protocol on Terra V2 — showcasing our adaptability and dedication to delivering value.

Recognizing the need for a more robust ecosystem for our \~1,100 Ronin NFT holders, we migrated to our current home. Ronin NFTs are now on **Arbitrum** and will become tradable through the RUJI Collections interface on Rujira.

**Ronin NFT holders were compensated throughout every transition** — our commitment to their long-term value has never wavered.

### Deployed Contracts (Arbitrum)

| Contract                 | Address                                      |
| ------------------------ | -------------------------------------------- |
| RED (ERC-20)             | `0x83e5Ecd192eAc043B0674A16EEDf96176726A159` |
| RED Staking (ERC-20)     | `0x604FD50e0FDC6A4576d34e5F85aea184C3474001` |
| Redacted Ronin (ERC-721) | `0xe1D676364E525DBF23D3938b05255774c2762E6a` |


# Roadmap

## Live Now

* Private Wallet with Private Reserve + Spendable structure
* Cross-chain swaps (Trade)
* Staking
* Market Orders & Limit Orders
* Borrow
* Index baskets
* Liquidation auctions
* Automated vault strategies
* Gas Tank (RUNE-powered swap fees)
* Compliance (OFAC screening, Proof of Innocence, origin verification, read-only keys)

## Coming Soon

* Perpetual futures trading (Perps)
* Launchpad integration
* $RED token launch via RUJI Launchpad
* Native wallet integrations
* Native off-ramp and Redacted Credit Card
* B2B privacy integrations into existing DeFi infrastructure

## And Beyond

* Multichain outposts across other chains — all driving value back to our Rujira base
* Expanding B2B partnerships — programmable privacy embedded into wallets, protocols, and platforms
* Redacted Interface remains the gold standard for maximum privacy and decentralization


# FAQ

### Is Redacted a mixer?

No. Redacted is a private DeFi execution layer — not a one-way mixer. You deposit, interact with applications privately, and withdraw. Withdrawals are compliance-linked to your deposit address, deposits are screened against OFAC lists, and users can generate Proofs of Innocence.

### Can anyone see my trades?

Your trades execute from your Spendable account, which cannot be linked to your public wallet. The trade itself is visible on-chain (as all THORChain swaps are), but no observer can connect it to your identity.

### What if the pool is small?

Privacy is stronger with more users. If the pool has low activity, the anonymity set is smaller. The best practice is to wait in Reserve for your privacy set to grow.

### Do I need RUNE?

Only for swaps. The Gas Tank requires RUNE (\~0.02 per swap) to pay for transactions that route through THORChain's base layer. Other actions within Redacted — deposits, moving to Spendable, moving to Reserve — are gasless.

### Is Redacted custodial?

No. You always maintain full control of your funds. Every operation is authorized by a zero-knowledge proof that only you can generate.

### How is this different from Tornado Cash?

Redacted is not a mixer. It's a full DeFi execution layer with privacy built in. You can trade, borrow, LP, bid on liquidations, and use automated strategies — all privately. Redacted is compliance-first with OFAC screening, Proof of Innocence, origin-verified withdrawals, and optional audit keys.

### What chains does Redacted support?

Redacted's base is on **Rujira** (THORChain's app layer), giving native access to BTC, ETH, XRP, BNB, AVAX, ATOM, and all THORChain-supported assets. Multichain outposts are planned to expand coverage further.

### How do I earn from Redacted?

Two ways: **Hold $RED** to earn 50% of all protocol fees, or **hold a Ronin NFT** to earn the other 50%. Both receive revenue distributions from every interaction on the platform — whether it comes from the Redacted Interface or B2B integrations.

### Will there still be a Redacted app/interface?

Yes, always. The Redacted Interface is our own frontend for maximum privacy and full decentralization — no compromises. In addition, we're integrating Redacted's privacy layer into existing protocols and wallets via B2B partnerships, so users can access privacy wherever they already are. Both paths generate revenue for $RED stakers and Ronin holders.


