Introducing Whirltrace: Private Transactions for ICRC-2

:ocean: Whirltrace — Private ICRC-2 Deposits & Withdrawals

Hello everyone :waving_hand:
Just wanted to share something we’ve been building — it’s called Whirltrace, a simple and privacy-focused zk app running on the Internet Computer (IC). If you’ve ever wanted to deposit and withdraw tokens anonymously (think Tornado Cash Classic but with a smoother UX), this might be up your alley.


:locked_with_key: What Is It?

Whirltrace lets you deposit ICRC-2 tokens (like ICP and ckBTC) into a private pool and later withdraw them anonymously. It’s all done on-chain using zero-knowledge cryptography — no gas fees, no installs, no phishing. Just verifiable privacy.


:hammer_and_wrench: Core Features

  • :white_check_mark: Built on the ICRC-2 standard (approve + transfer_from)
  • :magnifying_glass_tilted_left: Fully on-chain frontend — nothing to install, no shady scripts
  • :optical_disk: Verifiable backend — open source code, reviewable
  • :receipt: Private withdrawals — just need a zk note and a receiver principal
  • :money_with_wings: Low fees — 0.5% on deposits, free withdrawals
  • :prohibited: No gas — thanks to ICP
  • :people_hugging: Community-powered anonymity — the more users, the stronger the privacy set
  • :globe_with_meridians: Works right in your browser — plug in Plug wallet and go

:sparkles: Use Cases

  • :dove: Start fresh with a clean wallet
  • :heart_hands:t2: Donate to causes without attention
  • :wrapped_gift: Gift someone without doxxing your main wallet
  • :ninja: Avoid being traced by bots or frontrunners
  • :locked_with_key: Add a layer of real-world safety for your funds

:high_voltage: Quick Demo

Deposit flow:

  1. Pick an amount (0.0001, 0.001, 0.01 ckBTC or 0.1, 1, 10 ICP)
  2. Optionally add a memo or a subaccount
  3. Approve + deposit (0.5% fee)

Withdraw flow:

  1. Paste your private note
  2. Enter a receiver principal
  3. Optional: subaccount + memo
  4. Done! Instant & gas-free.

Pro tip: Your private note is only used to build the proof entirely in-browser. The private never gets sent anywhere. Only the proof was submitted.


:bar_chart: Live Stats

You’ll see real-time deposit/withdrawal activity directly on the site. Once volume grows, the anonymity set becomes even stronger.


:motorway: Roadmap

  • :artist_palette: Better UI/UX
  • :open_book: Full open-source release
  • :coin: Support for more ICRC-2 tokens (ckETH, ckETC20, ckSOL, etc.)
  • :bar_chart: Expanded live stats
  • :purse: More wallet integrations
  • :classical_building: Eventually: a DAO for full decentralization

:warning: Heads-Up

  • Still in early days — test with small amounts first
  • No official social media yet — beware of impersonators asking for your private note
  • This is privacy, not invisibility — always stay informed

:test_tube: Try It Now

Plug in your Plug wallet, deposit an amount, and enjoy that peace of mind :relieved_face:


Thanks for reading! Open to feedback, or just curious vibes.

:melting_face: Stay private, stay safe.

5 Likes

awesome tool, will test it later.

a lot of grifters will use it to cover their tracks though :grin:

1 Like

Wow a lot of these sns funding teams could have really benefitted from this tool. :rofl:

Too soon?

1 Like

Maybe hes the grifting product market fit… act fast, but no source code… its coming soon but try it. :rofl:

1 Like

If this is bait to get bad actors to send their icp into the abyss i fully support.

henlo everyone

Some development updates:

  1. You can now pool ckBTC in Whirltrace!
    The lowest amount you can pool is 0.0001 ckBTC (which is 9 USD, if 1 BTC is 90,000 USD).

  2. We’ve also lowered the minimum amount calculation, so now ICP’s lowest poolable amount is 0.1 ICP (which is 60 cents, if 1 ICP is 6 USD).

  3. The source code also is now viewable on the /source page. For now, only the main.mo contract and the verification circuits are uploaded. We’re still exploring on ways to make it easy for you to explore and review them.

check them out now:

Next:

  • UI/UX improvements
  • ckETH and ckERCs
  • Detailed guides with screenshots or videos (how to deposit, how to withdraw, etc.)
  • Detailed stats (how many deposits, how many withdrawals, etc.)

Note:

  • The first deposit of a pool will always experience the longest call (>90 seconds). So please be patient after you clicked deposit, as it might take a while due to the caller will be the one to create the anonymity pool.
  • … but the second deposit and so on will be a lot quicker as the anonymity pool is ready.

Is this legal? Will this cause backlash for the foundation in the future?

we’re not lawyers, so we can’t offer a definitive legal opinion. That said, we can point to Tornado Cash as a comparison. It faced sanctions, which were later lifted by a court, and its developers were released from arrests and charges. To us, this suggests privacy tools are neutral—like a knife or a car, they can be used for good or ill depending on the user. It’s up to individuals to understand the risks and responsibilities that come with using tools like Spinner or Whirltrace.

In our opinion, before we worry about any backlash, it’s worth noting that regulators and blockchain forensics teams typically focus on platforms with significant activity. Right now, our goal should be about building valuable tools and grow ICP’s adoption first, before the praises or backlashes come.

1 Like

I find pointing to Tornado cash a bad example but fair enough. If this comes to light that it is being used to launder money then this is just bad publicity imo.

Getting adoption not matter what and worry about the repercussions later is an even worse strategy. Lets boot up the dark web cannisters and get the adoption going then :sweat_smile:

hi do u plan on making social accounts or not? if no, do u guys mind if i create an unofficial telegram or something? it will be about spinner n vetkeys too basically it’ll be “privacy on icp” group

Pardon our ignorance, but what’s the better strategy?

We’re still debating on that, but we’re leaning towards on creating only on decentralized dapps like on openchat, dscvr and taggr, but not on web2 where they violate their users privacy.

Sounds like a general group and could be a good directory. You don’t need our permission, actually. Thanks for the support.

privacy advocate bros rise up

3 Likes

Hello everyone.

We’ve improved the UI and UX. We’re going for that early-2010s glossy look but still keep it dark themed. The Guide also has been updated to be more detailed along with screenshots.

Have a look and let us know what you think :star_struck:

Hi, please check your inbox