Moros
Building reusable private USDC infrastructure for payments, requests, recovery, and prediction markets on Stellar.
Private money that remains useful after one transaction.
Moros gives users a reusable shielded Circle USDC balance on Stellar. Funds can move through private payments, signed requests, withdrawals, and prediction markets without publishing the owner’s readable balance or activity history.
The product combines zero-knowledge circuits, Soroban contracts, a Rust core, browser cryptography, proof relay, private indexing, encrypted recovery, and two live financial applications on one privacy layer.
Privacy infrastructure and the products around it
- Groth16 payment and market circuits
- Soroban vault and verifier contracts
- Rust and WebAssembly client core
- Relay, indexer, and encrypted sync
- Moros Pay web application
- Moros Predict market application
Privacy had to survive a complete financial workflow.
Hiding one transfer is not enough if account addresses, balances, recipients, recovery data, or later actions reconstruct the same financial history. A private product needed to protect the whole lifecycle while still preventing double spends and invalid settlement.
The system also had to make proof generation, note selection, encrypted discovery, signed requests, cross-device recovery, and public withdrawal understandable to users who should never need to think about circuit shapes.
- 1.
Public accounts exposing payment relationships
- 2.
Private notes becoming difficult to recover
- 3.
Proof complexity leaking into ordinary actions
- 4.
Separate products duplicating privacy logic
What We Were Really Solving
The task was to make privacy reusable, recoverable, and safe enough to become shared financial infrastructure.
-
Protect relationships, not only amounts
Keep recipient identity and private activity outside the public ledger.
-
Make private value reusable
Carry shielded USDC across payments, markets, claims, and withdrawals.
-
Recover without exposing history
Sync padded ciphertext while ownership and decryption remain local.
-
Share one privacy foundation
Let multiple applications reuse identity, notes, proofs, and settlement.
A private payment from identity to reusable balance
The client owns keys and witnesses, the network verifies proofs and state transitions, and supporting services move only encrypted outputs and proof-bound actions.
- 01
Create locally
The client derives spending, viewing, encryption, signing, and recovery material on the user’s device.
- 02
Prove privately
Fixed circuit shapes bind notes, nullifiers, encrypted outputs, amounts, and context without revealing the witness.
- 03
Verify on-chain
Soroban contracts verify proofs, enforce valid state transitions, and settle Circle USDC on Stellar.
- 04
Recover and reuse
Recipients discover encrypted outputs, decrypt owned notes locally, and reuse the private balance across applications.
One privacy rail, two live financial products
The infrastructure stays shared while each product presents a focused financial experience.
- 01
Reusable shielded USDC
Users fund once, receive private change, and continue using notes without returning to a public balance for every action.
- 02
Private payment identity
Rotatable payment codes and signed requests identify recipients without embedding public Stellar accounts.
- 03
Encrypted recovery system
Local ownership recovery and ciphertext-only sync support durable use without creating a readable server ledger.
- 04
Private prediction markets
The same shielded balance supports encrypted orders, pooled liquidity, claims, refunds, and withdrawals.
Cryptography, contracts, services, and product experience
Zero-knowledge proof system
Payment and market circuits prove valid private transitions with registered Groth16 verifier shapes.
Stellar contracts
Vaults, verifiers, market contracts, registries, and liquidity systems settle against Circle USDC.
Private client core
Rust and WebAssembly handle identities, notes, requests, receipts, encryption, and recovery in user clients.
Encrypted data services
Relays, indexers, and padded ciphertext sync support the product without becoming the source of private ownership truth.
Moros Pay
A polished payment application covers private funding, sending, receiving, requesting, activity, contacts, and withdrawal.
Moros Predict
A second live application extends the same infrastructure into private orders, markets, portfolios, and liquidity.
Privacy designed as a product platform
Moros proves the full stack required for usable financial privacy: circuits, client cryptography, contract verification, encrypted services, recovery, and clear application flows.
The strongest proof is reuse. The same private USDC foundation now supports both everyday payments and a live market protocol on Stellar mainnet.
Building a complex product? Let’s make it clear, useful, and shippable.
We design and engineer complex products from strategy through production.