not who you are.
Private positions on a real prediction market — the official Gnosis Conditional Tokens market, byte-for-byte, with a confidential participation layer welded on by iExec Nox.
4 identical transactions.
One dissenter.
Unfindable.
A transparent market can only price the truth people are willing to sign their name to. Everyone else self-censors — and the market loses exactly the information it exists to collect.
The informed
can't afford
to be seen.
A policy analyst is certain the consensus is wrong. A $10k on-chain bet against her employer's public position is a firing offense the second anyone links her wallet. So the market never learns what she knows.
| Wallet | Side | Size | Seen by |
|---|---|---|---|
| 0x71ab…9c | YES | $4,000 | everyone |
| 0x44de…13 | YES | $6,000 | everyone |
| 0xa1c6…dana | NO | $10,000 | her boss, too |
| 0x9f3c…22 | YES | $7,000 | everyone |
Prior privacy attempts rebuild the whole market from scratch — and die without liquidity. Nobody trades where nobody trades.
Two sealed
numbers. Zero
direction.
Keep the real market untouched. Add a confidential layer: every bet is committed as two encrypted amounts — a YES-stake and a NO-stake, one of them an encrypted zero. Direction never exists in plaintext, anywhere.
Bet what you know, not who you are.
→ commitBet(hYes, hNo, pYes, pNo)
✓ sealed in Intel TDX — chain sees two handles
Encrypted in. Aggregate out. Encrypted back.
on this market.
Tell me who bet NO."
The market knows the information — someone dissented with size — but not the informant. Aggregates decrypt. Individuals never do.
NO 500 cUSD — unsealed for her alone
✓ claim paid: exactly the pot
= 1,626.1277 cUSD
commit-private → aggregate → claim-private
Commit — private
4 bettors, each two sealed handles. k = 4. Direction never plaintext.
Execute — public aggregate
Only sums decrypt: YES 1,700 / NO 500, routed through the real FPMM in one batch. NO resolves.
Claim — private
Dana's sealed NO 500 pays exactly the pot — 1,626.1277 cUSD. Even her win stays hers to disclose.
Six Nox primitives. Remove one, the product dies.
| Nox primitive | What it does here | Without it you need… |
|---|---|---|
| aggregation-only allowPublicDecryption | reveals epoch sums only (I2) | a threshold-decryption committee |
| dual encryptInput + fromExternal | direction-free (amtYes, amtNo) | …or a side-bit leaks in calldata |
| per-user ACL (allowThis / addViewer) | decrypt-your-own-position forever | a custodial account database |
| IERC-7984 pooled custody + operator-pull | nothing position-shaped in wallets | positions in wallets = the linkage |
| 2-step unwrap → finalizeUnwrap | plaintext exits ONLY at the FPMM | a trust-me bridge |
| Nox.mul / div (× public scalar) | public-rate confidential claims | leaked stakes at claim time |
Read the contract. Don't take our word.
| NoxOraclePool novel · source-verified ✓ | 0xfFba9520…83d4a2E |
| ConditionalTokens 1.0.3 unmodified · bytecode hash ✓ | 0xCd316D06…62eA734a5 |
| FPMM 1.8.1 instance unmodified · real market | 0xBf4900df…BEEf4cc3 |
| cUSD wrapper ERC-7984 confidential USD | 0x82C281D7…7468991 |
Privacy on the real market — not a fork of it.
Composability others can't have
Privacy-market rivals rebuild the exchange and starve for liquidity. We add confidentiality to the official Gnosis CTF + FPMM, byte-for-byte — the liquidity is already there.
Privacy that survives settlement
Direction and size stay hidden through and after resolution — not just until the reveal. Membership is public; what you believed and how much never is.
Caught live, not in a mock
First Sepolia run reverted in executeEpoch (NotAllowed 0xb87a12a9): the token re-enters TDX under its own identity, so the pool must allowTransient the burn. A permissive mock hid it. Fixed, redeployed, re-ran green — logged in feedback.md #16.
A real product, and honest about its edges.
Run the epoch.
Then ask who bet NO.
built solo · WTF!! Hackathon