Shielded transactions on Zcash and Penumbra. Air-gapped cold signing, FROST threshold multisig, and watch-only mode — in a single Chrome extension.
Zcash Orchard shielded pool and Penumbra shielded DeFi. On-chain privacy without opt-in ceremony.
Pair with a Zigner device to sign transactions offline via QR codes. Keys never touch the internet.
Distributed key generation and co-signing. Require t-of-n signers with no single point of failure.
Import full viewing keys to audit balances and history without spending authority.
Address book stored encrypted in the extension. Reuse named addresses without re-entering them.
Multithreaded WASM transaction proving runs entirely in your browser. No server round-trips, no trusted prover.
Fully auditable. Build from source, verify reproducibility, fork freely. No telemetry.
Zigner turns any spare Android phone into an air-gapped hardware wallet. Zafu generates the unsigned transaction; Zigner signs it offline and returns the result through QR codes — no USB, no Bluetooth.
Zafu builds the unsigned transaction in the browser extension.
The unsigned payload is encoded as a QR code on screen.
Zigner decodes, signs with the private key, and displays the signed QR. No network permission required.
Zafu reads the signed QR and broadcasts the transaction from the online extension.
Distributed key generation across multiple signers with no trusted dealer. Any t participants from an n-member group can co-sign without ever reconstructing the full key.
| Protocol | FROST (Flexible Round-Optimized Schnorr Threshold Signatures) |
| Key gen | Distributed DKG — no trusted dealer, no single key reconstruction |
| Threshold | Configurable t-of-n; any qualified subset can sign |
| Networks | Penumbra, Zcash |
| Coordination | Peer relay via QR or relay server; no central coordinator |
Zafu is built by Rotko Networks and released under the MIT license. Donations fund continued development.
u153khs43zxz6hcnlwnut77knyqmursnutmungxjxd7khruunhj77ea6tmpzxct9wzlgen66jxwc93ea053j22afkktu7hrs9rmsz003h3