How vookeil works
vookeil is a Solana launchpad where each token gets its own private pool, and the pool enforces the hooks its creator chose. Everything here says what is public, what is sealed, and what can go wrong.
How it works
Value moves through three moments. Each hook belongs to one of them.
Notes. A note is a sealed record of a token amount and its owner. Only its commitment, a fingerprint that reveals nothing, goes on-chain. Proofs. To spend a note, your browser builds a zero-knowledge proof that the note exists, that you own it, that the amounts add up, and that the token's hooks are met. Relayers. A relayer submits your proof and pays the network fee, so your wallet never appears. It cannot change the recipient or the fee: both are bound into the proof.
Launching
A launch takes a name, a ticker, an image, your hooks and a curve. You sign four transactions: the metadata upload, the token and its bonding curve, the private pool for that token, and the sealing of your hooks into the pool's verifier. If a step fails, nothing is lost: launch again and it carries on from where it stopped.
Launching is signed with the Veil wallet. Any Solana wallet (Phantom, Solflare, Binance Wallet) can connect to browse the site and to send SOL to your Veil wallet before you launch. That transfer is public and links the two wallets.
Your optional launch buy rides in the transaction that opens trading, so nobody can buy ahead of you. It must pass your own hooks like any other buy.
Open the launcherHooks
Hooks are fixed at launch. Neither the creator nor vookeil can change or remove them afterwards. You can pick one hook, or stack several: stacked hooks are checked together in a single proof.
Some familiar rules are deliberately absent. A cap on how much one wallet holds, or a penalty on a wallet that dumps, depends on knowing who is who. Inside a private pool anyone can split across notes and addresses, so those rules would promise a protection they cannot give.
See all nine hooks →Private balance
Shield moves tokens from your wallet into your vault: that step is public. Send pays another vookeil address with no wallet signature. Withdraw leaves to any address, by default a fresh one-time address only your vault controls. Your app finds payments sent to you by trying to open every new note with your viewing key, so nobody else learns which notes are yours.
Keys and recovery
Your vault holds one random root key, generated in your browser and encrypted with your passphrase. From it come a spending key, a viewing key and every one-time address. It is not derived from your wallet, so a compromised wallet does not expose your vault.
Fees
| Action | Platform fee | Network |
|---|---|---|
| Launch | [FEE] | Rent and network fees |
| Trade on the curve | [FEE] | Relayer fee when private |
| Shield | [FEE] | Paid by your wallet |
| Private send | [FEE] | Relayer fee |
| Withdraw | [FEE] | Relayer fee |
Limits and risks
- Privacy depends on the crowd. A pool few people use is easier to trace from entry to exit. Each token page shows its pool size.
- Public steps stay public. Shielding, the curve price and every exit are visible on Solana.
- Your network address is not hidden. Your internet provider and our host can see you visited, unless you use a network privacy tool.
- Smart contracts and circuits can have bugs. A bug can lose money. See Security for the current review status.
- Rules where you live apply. Some regulated platforms may refuse funds that come from a private pool.
Security
vookeil never asks for your seed phrase or keys, and never messages you first. Anyone who does, in our name, is not us.
SDK
@vookeil/sdk does everything the site does: launching with hooks, the vault and its keys, syncing notes, building proofs and talking to the relayer. Proofs are built in the browser; nothing secret ever leaves it.
PREVIEW · INTERFACE MAY CHANGE BEFORE MAINNETRelayer and indexer API
Plain HTTP, no account and no API key. Neither keeps logs of who asked what, and anyone can run their own relayer or indexer.
| Endpoint | What it does |
|---|---|
| GET /v1/info | Relayer key, the hooks catalog version, allowed programs and fee rates |
| GET /v1/fee?mint&inputs | Relayer fee for a token and a number of spent notes, and the account it is paid to |
| POST /v1/launch/prepare | Builds the unsigned launch transactions (metadata, mint and curve, pool, sealed hooks) |
| POST /v1/relay | Submits a proof (private buy, send, withdraw); the relayer pays the network fee |
| GET /v1/quote | Curve quote for a private buy or sell, after fees |
| GET /v1/hooks | Every hook, its settings and the circuit constraints it adds |
| GET /v1/pools/:mint | A token's pool: notes inside, crowd threshold status, sealed hook settings |
| GET /v1/commitments | Indexer: every note commitment and ciphertext, in order (everyone downloads all) |
| GET /v1/nullifiers · /v1/root | Indexer: spent markers and the current Merkle root |
On-chain programs
| Instruction | Purpose |
|---|---|
| launch | Creates the mint and its bonding curve, with the optional launch buy in the same transaction |
| open_pool | Opens the private pool (vault) for a launched token |
| seal_hooks | Writes the token's hook settings into the pool's verifier; final, cannot be changed |
| transact | Private send or withdrawal with a zero-knowledge proof that also checks the sealed hooks |
| curve_buy_private · curve_sell_private | Private trade against the curve, paid from or into notes |
| set_* · accept_admin | Multisig governance: fees, caps, pause, two-step admin handover |
Circuit: [PROOF SYSTEM] over [CURVE], Merkle tree depth [DEPTH], up to [N] notes in and [M] out, verified on-chain with Solana's native cryptographic syscalls. Each sealed hook adds its own constraints to the same proof.