Hello everyone
Just wanted to share something we’ve been building — it’s called Whirltrace, a simple and privacy-focused zk app running on the Internet Computer (IC). If you’ve ever wanted to deposit and withdraw tokens anonymously (think Tornado Cash Classic but with a smoother UX), this might be up your alley.
What Is It?
Whirltrace lets you deposit ICRC-2 tokens (like ICP and ckBTC) into a private pool and later withdraw them anonymously. It’s all done on-chain using zero-knowledge cryptography — no gas fees, no installs, no phishing. Just verifiable privacy.
Core Features
Built on the ICRC-2 standard (approve + transfer_from)
Fully on-chain frontend — nothing to install, no shady scripts
Verifiable backend — open source code, reviewable
Private withdrawals — just need a zk note and a receiver principal
Low fees — 0.5% on deposits, free withdrawals
No gas — thanks to ICP
Community-powered anonymity — the more users, the stronger the privacy set
Works right in your browser — plug in Plug wallet and go
Use Cases
Start fresh with a clean wallet
Donate to causes without attention
Gift someone without doxxing your main wallet
Avoid being traced by bots or frontrunners
Add a layer of real-world safety for your funds
Quick Demo
Deposit flow:
Pick an amount (0.0001, 0.001, 0.01 ckBTC or 0.1, 1, 10 ICP)
Optionally add a memo or a subaccount
Approve + deposit (0.5% fee)
Withdraw flow:
Paste your private note
Enter a receiver principal
Optional: subaccount + memo
Done! Instant & gas-free.
Pro tip: Your private note is only used to build the proof entirely in-browser. The private never gets sent anywhere. Only the proof was submitted.
Live Stats
You’ll see real-time deposit/withdrawal activity directly on the site. Once volume grows, the anonymity set becomes even stronger.
Roadmap
Better UI/UX
Full open-source release
Support for more ICRC-2 tokens (ckETH, ckETC20, ckSOL, etc.)
Expanded live stats
More wallet integrations
Eventually: a DAO for full decentralization
Heads-Up
Still in early days — test with small amounts first
No official social media yet — beware of impersonators asking for your private note
This is privacy, not invisibility — always stay informed
Try It Now
Plug in your Plug wallet, deposit an amount, and enjoy that peace of mind
Thanks for reading! Open to feedback, or just curious vibes.
You can now pool ckBTC in Whirltrace!
The lowest amount you can pool is 0.0001 ckBTC (which is 9 USD, if 1 BTC is 90,000 USD).
We’ve also lowered the minimum amount calculation, so now ICP’s lowest poolable amount is 0.1 ICP (which is 60 cents, if 1 ICP is 6 USD).
The source code also is now viewable on the /source page. For now, only the main.mo contract and the verification circuits are uploaded. We’re still exploring on ways to make it easy for you to explore and review them.
check them out now:
Next:
UI/UX improvements
ckETH and ckERCs
Detailed guides with screenshots or videos (how to deposit, how to withdraw, etc.)
Detailed stats (how many deposits, how many withdrawals, etc.)
Note:
The first deposit of a pool will always experience the longest call (>90 seconds). So please be patient after you clicked deposit, as it might take a while due to the caller will be the one to create the anonymity pool.
… but the second deposit and so on will be a lot quicker as the anonymity pool is ready.
we’re not lawyers, so we can’t offer a definitive legal opinion. That said, we can point to Tornado Cash as a comparison. It faced sanctions, which were later lifted by a court, and its developers were released from arrests and charges. To us, this suggests privacy tools are neutral—like a knife or a car, they can be used for good or ill depending on the user. It’s up to individuals to understand the risks and responsibilities that come with using tools like Spinner or Whirltrace.
In our opinion, before we worry about any backlash, it’s worth noting that regulators and blockchain forensics teams typically focus on platforms with significant activity. Right now, our goal should be about building valuable tools and grow ICP’s adoption first, before the praises or backlashes come.
I find pointing to Tornado cash a bad example but fair enough. If this comes to light that it is being used to launder money then this is just bad publicity imo.
Getting adoption not matter what and worry about the repercussions later is an even worse strategy. Lets boot up the dark web cannisters and get the adoption going then
hi do u plan on making social accounts or not? if no, do u guys mind if i create an unofficial telegram or something? it will be about spinner n vetkeys too basically it’ll be “privacy on icp” group
Pardon our ignorance, but what’s the better strategy?
We’re still debating on that, but we’re leaning towards on creating only on decentralized dapps like on openchat, dscvr and taggr, but not on web2 where they violate their users privacy.
Sounds like a general group and could be a good directory. You don’t need our permission, actually. Thanks for the support.
We’ve improved the UI and UX. We’re going for that early-2010s glossy look but still keep it dark themed. The Guide also has been updated to be more detailed along with screenshots.