Self-custody wallet · post-quantum private balance

Private now. Private after quantum.

KemLock is a self-custody wallet for Base and Ethereum with a private balance sealed by quantum-resistant cryptography. Shield, send and swap without putting your history on display.

Open wallet How it works

Beta Mainnet beta on Base and Ethereum. Unaudited, with per-asset caps: use small amounts.

Everything a wallet does, with a private balance.

  • A1

    Shield

    Move public funds into your private balance.

  • A2

    Private send

    Pay a private address. Who paid whom, and how much, stays encrypted.

  • A3

    Private swap

    Trade between assets through LI.FI's aggregated liquidity.

  • A4

    Private yield Soon

    Earn on your private balance. After the audit.

  • A5

    Unshield

    Move funds back to any public address.

  • A6

    Receipts

    Prove one payment to someone, without showing the rest.

01 Harvest now, decrypt later

Public chains never forget.

Everything you put on a public chain stays there, encrypted data included. Most on-chain privacy today relies on elliptic-curve cryptography to hide who paid whom. A large enough quantum computer, running Shor's algorithm, would break that math, and anyone who saved the data could read years of history at once.

KemLock encrypts every note with ML-KEM, the key-encapsulation standard NIST published as FIPS 203. The ciphertext you leave on-chain is built to stay sealed, now and later.

Elliptic-curve encrypted note Readable
ML-KEM encrypted note Sealed
Recorded today, attacked later. Once Q-day arrives, an elliptic-curve note can be opened and its sender, recipient and amount read. An ML-KEM note stays sealed.

02 How a private transfer works

Four steps. The hard one runs on your device.

  1. 01 — Shield

    Move funds into your private balance.

    Tokens go from your public address into the pool and become a note: an amount and an owner, committed on-chain and encrypted so only you can open it.

  2. 02 — Prove in your browser

    Your browser builds the proof.

    To spend a note, your device proves you own it and that the amounts balance, without revealing which note is yours. Multi-threaded WebAssembly does it in about five seconds. Your keys never leave the device.

  3. 03 — Relayer submits

    A relayer posts it, not your address.

    A relayer pays the gas and submits the transaction, so it isn't tied to your public address. Relayers form an open network. KemLock's own relayer charges only the network cost, and every fee is shown before you sign.

  4. 04 — Only you can read it

    The note opens for its owner alone.

    The new note is encrypted with ML-KEM to the recipient's private address. Anyone can see that a transaction happened; only the recipient can read what it holds. A receipt lets you show a payment to someone you choose.

03 Private swap

Swap without stepping into the open.

Trade one private asset for another. The swap is paid from your private balance, filled through LI.FI's aggregated liquidity, and the output lands back in your private balance as a new note.

Proven In the mainnet beta on Base. Proven end to end with real proofs before launch. The route is chosen at submission; your minimum output and deadline are fixed by the proof.

04 Networks

On Base and Ethereum.

Public swaps and bridges across both networks run through LI.FI, and WalletConnect links you to apps. The wallet takes on each network's colours, so you can see where you are before you sign.

Base

chain 8453
Private balance
Mainnet beta 16 assets, among them USDC, ETH, cbBTC, EURC and ZEN. About $100 per shield while in beta.
Private swap
Through LI.FI, from your private balance.
Public
Send, swap and bridge through LI.FI.
Apps
WalletConnect.

Ethereum

chain 1
Private balance
Mainnet beta USDC and ETH. Up to 250 USDC or 0.1 ETH per shield while in beta.
Public
Send, swap and bridge through LI.FI.
Apps
WalletConnect.

05 Security and compliance

Fewer things to trust. More you can check.

Note encryption
ML-KEM-1024 (NIST FIPS 203), combined with X25519. Each note is sealed to its owner's private address.
Proofs
Hash-based proofs, verified on-chain by the pool contract.
Trust
No trusted setup. No trusted hardware.
Keys
Created and kept on your device. Proving runs locally, in the browser.
Relayers
An open network. KemLock's relayer charges network cost only, shown before you sign.
Compliance, designed in
Sanctions screening, plus association-set proofs: a way to prove your funds don't come from flagged sources without revealing which deposit is yours.
Receipts
Show a specific payment to someone you choose, and nothing else.

06 Status

Where things stand.

  1. Beta Mainnet on Base and Ethereum

    Shield, private send, private swap (Base) and unshield, with caps on each shield and on what each pool holds while it is in beta. Pay the relayer fee in the asset you move: it charges network cost only, shown before you sign.

  2. Pending Independent security audit

    Until it is done, treat KemLock as unaudited beta software. The caps rise after it.

07 Who builds it

KemLock is built by Kotav Labs, a security engineering studio in Portugal.

Go private.

Open wallet How it works

Beta Unaudited. Don't move more than you can afford to lose.