If you searched for a "Tornado Cash for Solana," you already understand the problem you are trying to solve: every Solana transfer is public, and you want to move funds from one wallet to another without leaving an on-chain link between them. This page explains where that idea came from, why a straight copy of Tornado Cash is the wrong thing to want in 2026, and how SolMask delivers the same privacy with the pieces a modern protocol needs.
What Tornado Cash actually did
Tornado Cash was a set of smart contracts on Ethereum. You deposited a fixed amount — say 1 ETH — into a pool, and the contract recorded a cryptographic commitment to a secret only you held. Later, you could withdraw that 1 ETH to a brand-new address by submitting a zero-knowledge proof that you owned one of the secrets in the pool, without revealing which one. Because hundreds of other people had deposited the same fixed amount, an observer could not tell which deposit your withdrawal corresponded to. The link between your old wallet and your new one was broken.
That core mechanism — a shielded pool built from commitments, nullifiers (to stop double-spends), a Merkle tree, and a zero-knowledge proof — is genuinely good cryptography. It is the foundation that SolMask and every other serious privacy pool still builds on today.
Why you don't want a literal Tornado Cash clone
Two things changed after Tornado Cash launched, and both matter for what you should use now.
First, fixed denominations are clumsy. The original design forced you into fixed amounts (1, 10, 100 ETH). Moving an arbitrary balance meant juggling multiple deposits and withdrawals, and any odd amount stood out. Modern pools use a note model with arbitrary amounts and change, the same way physical cash lets you break a note and get change back.
Second, compliance is now table stakes. In August 2022, the U.S. Office of Foreign Assets Control sanctioned the Tornado Cash contracts, citing their use by sanctioned actors to launder funds. The lesson the industry took away was not "privacy is illegal" — privacy is a legitimate and legal need — but that a pool with no screening and no ability to keep bad actors out becomes a target and a liability for everyone in it. A protocol built today has to be privacy-preserving for ordinary users and able to refuse known-bad addresses.
How SolMask is the Solana alternative
SolMask is a shielded pool on Solana that keeps the proven Tornado Cash mechanism and fixes both of the problems above.
- Arbitrary amounts, not fixed denominations. SolMask uses an atomic join-split: a single zero-knowledge proof can spend up to four of your notes, pay up to two recipients, and write a shielded change note back into the pool — in one transaction, for any amounts. You are never forced into round numbers.
- Compliance built in. SolMask screens addresses with risk intelligence (CipherOwl) and enforces an on-chain banlist at the program boundary, so listed wallets cannot deposit in the first place. Privacy for legitimate users; a door that closes on known-bad actors.
- Non-custodial and client-side. Your note secrets are derived from your wallet signature and never leave your device. SolMask — and the relayer that submits your withdrawal so you don't need gas in the fresh wallet — never holds your spend secret.
- Built for Solana economics. Deposits and withdrawals settle in seconds for a fraction of a cent, and cross-asset withdrawals can route through Jupiter so you can deposit SOL and have a recipient receive USDC.
If you want the deeper mechanics, read what a shielded pool is and how ZK proofs work.
How to make a private transfer on Solana
- Deposit. Connect your wallet, pick SOL, USDC, or USDT, choose an amount and a privacy delay, and sign. Your note is created locally; its commitment goes into the pool.
- Wait. The delay is what grows your anonymity set — every other deposit in the same window becomes a plausible source for your withdrawal. Longer is stronger.
- Withdraw to a fresh wallet. Reconnect, paste a recipient address that has no public link to you, and SolMask builds the proof in your browser. The recipient receives funds with no on-chain edge back to your deposit.
Use privacy responsibly
Financial privacy is legitimate — protecting your salary, your business counterparties, and your safety are normal reasons to not broadcast every transfer. SolMask is built for those uses, which is exactly why it screens addresses and enforces a banlist. It is not a tool for evading sanctions or laundering proceeds of crime, and the compliance layer exists to keep it that way. Read what SolMask cannot protect you from so your expectations match reality.
Ready to try it? Start with the interactive tutorial or open the app and make a small first transfer.