A perp DEX with dark pools.

[ enter the dark ]

A perp DEX
with dark pools.

A perpetual futures DEX with dark pool execution and zero-knowledge privacy. Orders sealed by zkPrivacy, matched through Orderly Network, settled on Ethereum mainnet. The chain only sees the net.

Mission

To remove the
trader from the trade.

Every public exchange leaks. Order book, mempool, settlement trail, somewhere along the path, your intent becomes someone else's edge. DarkX collapses that surface by stacking the zkPrivacy protocol over Orderly Network's omnichain perp engine. The book sees aggregate flow. The chain sees net positions. Nothing in between is recoverable.

Protocol Architecture

Inside the pool.

01
Stage One, Commit

Sign a hash. Nothing else.

You build a commitment locally: size, side, leverage, limit, salt. The hash is what we see. The parameters never leave your client. The relayer cannot read it, and neither can the chain.

poseidon_254·EIP-712 signature
02
Stage Two, Seal

Indistinguishable in the mempool.

Sealed commitments are uniform-size blobs. Snipers, MEV searchers, and rival market-makers all see the same noise. Order books are obsolete here, there is nothing to scrape and nothing to outbid.

uniform-size payload·no priority lane
03
Stage Three, Match

Cleared inside the circuit.

At the close of every two-second epoch, all sealed orders enter a Halo2 circuit. Uniform-price clearing happens entirely inside the proof. No party, including the operator, learns the inputs. The output is a single succinct attestation.

halo2 + kzg·340ms proving
04
Stage Four, Settle

Out of the dark.

Net cleared positions leave the pool and route through Orderly Network's omnichain orderbook for execution. The dark pool's aggregate flow disappears into the broader liquidity, indistinguishable from any other counterparty. Fills, funding, and liquidations return to your stealth margin account on Ethereum.

orderly network·ethereum mainnet
Live Stream

Every order, sealed in flight.

EPOCH 88413
RELAYER darkx-relay-04
EUROPE-WEST-1
$ stream --watch encrypted --epoch 88413 --tail
22:14:080x7a4f…c3d913payload 248BSEALED
22:14:090x1c2e…f088afpayload 248BSEALED
22:14:090xff03…2a4471payload 248BMATCHED
22:14:110x9b8d…7102e7payload 248BSEALED
22:14:120x4612…d0a0c1payload 248BMATCHED
22:14:130xe8aa…0a59f4payload 248BSEALED
22:14:130x3d51…77b2c4payload 248BSEALED
22:14:140x0d77…91bb12payload 248BSEALED
Protocol Stack

DarkX, and what runs underneath.

Two production-grade primitives do the heavy lifting. zkPrivacy handles the cryptography, Orderly Network handles the matching and liquidity. DarkX is the integration that makes them private end-to-end.

00
DarkX
The perp DEX. Where orders are sealed, batched, matched against the curve, and settled. Dark pool execution and zk privacy by default, the product surface from wallet to trading to positions.
Dark Pool
01
zkPrivacy.
Halo2 circuits and Poseidon commitments. Wraps every order in a zero-knowledge proof before it ever hits the pool. The relayer is blind; the chain learns only the net.
Crypto Layer
02
Orderly Network
Omnichain perpetual orderbook with CEX-grade execution and shared cross-chain liquidity. The dark pool's cleared net positions route here for execution against real depth.
Perp Engine
03
Ethereum
Mainnet settlement and margin. Twelve-second epochs, USDC-native margin accounts, ERC-4337 account abstraction. Where the proofs land on the most battle-tested chain and the books close with finality nothing can roll back.
Chain
Privacy Doctrine

Private, by construction.

Privacy on most exchanges is a promise made by the operator. The book lives somewhere, usually inside the venue's own backend, and the operator's word is what keeps it confidential. DarkX rejects that model outright. Privacy here is a cryptographic property of the protocol itself, enforced by the zkPrivacy layer that sits in front of every order.

zkPrivacy is the primitive DarkX is built on. Each order enters the system as a Poseidon commitment salted with a client-side nonce. The relayer cannot read it. The chain cannot read it. We cannot read it. At the close of every two-second epoch, all sealed commitments are fed into a Halo2 circuit that performs uniform-price clearing entirely inside the proof. What the verifier sees is a single succinct attestation, never the inputs that produced it.

The trade settles. The trader does not.

Net cleared positions are then routed to Orderly Network's omnichain orderbook for execution against real liquidity. The dark pool's aggregate flow is indistinguishable from any other counterparty on the book, there is no signature, no metadata, no ledger entry that ties a fill back to a trader. Nullifiers prevent double-spend. Position commitments re-randomize on every interaction. The anonymity set is the entire pool, and it grows with every batch.

This is what we mean when we say DarkX is private by construction. There is no panel we could be subpoenaed for, no log we could be ordered to produce, no kill switch we could be coerced into pulling. The math is the protocol, and the protocol is open. Audit the circuit, verify the proofs, watch the chain, every layer is checkable, and none of them learn you.

Deployment

From shadow to standard.

Phase I
April 2026
Complete

Sealed batch auctions

Commit-reveal order flow, uniform-price clearing engine, and the first three perpetual markets, BTC, ETH, SOL, live on Ethereum mainnet.

Phase II
May 2026
Complete

Halo2 proving layer

Circuit specification finalized, Trail of Bits audit closed, prover infrastructure live at sub-second clearing latency.

Phase III
Live Now
Live

Mainnet on Ethereum

Production deployment shipped, eight markets open, USDC-native margin live, ERC-4337 wallet integration enabling one-click sealed trades. Trade now.

Phase IV
October 2026
Planned

Stealth margin deposits

Stealth address support, privacy-pool integration for margin funding, and cross-margin via an unlinkable aggregator account.

Phase V
Q1 2027
Planned

Permissionless relayers

Open prover network, slashable bonding, decentralized sequencing, and full governance handoff to a token-curated registry.

Security Audit

Eight findings. Eight resolved.

Trail of Bits reviewed the Halo2 circuits and the Base verifier contracts in April 2026. The full log is below, every finding, every fix, every status flag.
$ audit-log --source trail-of-bits --window 2026-04-01..2026-04-28
001CRIT
commitment_salt_reuseSingle-use nonces now enforced with on-chain replay protection.
[ FIXED ]
002HIGH
verifier_auth_driftVerifier rotation gated by upgrade authority + 48h timelock.
[ FIXED ]
003HIGH
circuit_constraint_underflowRange constraints added on size + leverage fields.
[ FIXED ]
004MED
margin_account_confusionIsolated-account references now explicitly required.
[ FIXED ]
005MED
pause_behavior_ambiguityPause preserves user withdrawals; blocks new commits.
[ FIXED ]
006MED
funding_manipulation_windowSwitched to TWAP of prior epoch's pyth aggregated index.
[ FIXED ]
007HIGH
liquidator_position_revealLiquidations now sequenced through the same sealed-batch flow.
[ FIXED ]
008LOW
dependency_hygieneBuild-critical packages pinned, CI gate added for new deps.
[ FIXED ]
8 findings · 0 open · 0 deferred · status CLEAN $

Open a position.
Leave no trace.

DarkX is live on Ethereum mainnet. Bring your own keys, your own size.

Launch App →
Risk Disclosure

Experimental perpetual-exchange software.

DarkX is experimental software built on public blockchain infrastructure. Perpetual contracts involve leverage and can result in the total loss of margin posted. Smart-contract risk, oracle risk, and liquidation risk all apply.

Privacy is enforced cryptographically inside the matching circuit and the verifier contract. No party operating DarkX can recover a user's order contents, position size, or identity from on-chain data. This is a property of the protocol, not a service we provide.

You are responsible for reviewing addresses, approvals, and margin settings before use. DarkX does not provide financial, legal, tax, or investment advice. Access may be restricted in certain jurisdictions.