GHOSTDOCUMENTATIONYour guide to the GHOST wallet preview and the privacy flow we’re building on Ethereum with RAILGUN.
Real deposits and spending are enabled in this experimental build. Full balance synchronization, proof generation, and funded end-to-end transactions still require validation. GHOST has not been independently audited.
Passing automated tests does not establish that GHOST is audited or production-ready.
Open the app and select Connect wallet. Choose an installed wallet and approve the connection in its own prompt. A connection does not transfer funds or make your existing wallet history private.
In Your private wallet, review the Ethereum RPC URL and select Start RAILGUN. The default is a public provider. A custom provider must support Ethereum mainnet over HTTPS.
Choose a strong recovery password and confirm it. This creates a new RAILGUN wallet with its own private address. Never enter your existing wallet’s seed phrase or private key.
Download the encrypted recovery file. Use Restore / verify backup with that file and your password to confirm you can recover the same private address. Keep the file and password safely stored.
Your encrypted GHOST recovery file and its password are the recovery credentials for your private wallet. A connected public wallet cannot replace them.
GHOST cannot reset your password or recover a lost private wallet for you. Do not rely on browser storage as your only backup.
To restore, start the engine, select your encrypted JSON recovery file in Restore / verify backup, enter its password, and select Unlock recovery file. Check that the restored private address matches your saved address.
Lock private wallet unloads the private wallet from the engine. Disconnecting your public wallet is a separate action. Neither action deletes a recovery file you downloaded.
RAILGUN is an on-chain privacy system that uses zero-knowledge proofs. GHOST is a separate interface integrating its SDK; it is not the RAILGUN protocol itself.
The planned flow moves supported tokens into RAILGUN’s smart contracts, then uses proofs to authorize private spending. Your public Ethereum address and your private 0zk address serve different purposes.
Shield deposits and unshield withdrawals have public on-chain details. Privacy does not erase past activity or guarantee anonymity. Timing, amounts, address reuse, and service providers can affect privacy.
Your browser also communicates with RPC, indexer, artifact, proof-of-innocence, and broadcaster services. Those services have availability and metadata considerations.
These experimental flows are enabled. Successful end-to-end operation has not yet been verified.
Move supported tokens from your public wallet into a private RAILGUN balance. The integration prepares native ETH as private WETH, or ERC-20 deposits. Token deposits may need an exact-amount approval. Deposits remain publicly observable.
Send supported ERC-20 tokens to a private 0zk address using a proof and a broadcaster. Spendable balances, proof-of-innocence state, and broadcaster availability must be ready first.
Return supported ERC-20 tokens to a public 0x address. The withdrawal destination and amount are public. Native ETH withdrawal and automatic WETH unwrapping are not implemented.
When enabled after validation, review the network, token contract, recipient, amount, protocol fees, gas, and broadcaster fee before signing. Fees and service availability can change.
Use a browser with a supported injected Ethereum wallet installed and enabled. Unlock the extension and reload the app. Mobile WalletConnect is not currently implemented.
Check your connection and HTTPS Ethereum mainnet RPC URL. Public providers may be unavailable or rate-limited. You can select another trusted mainnet RPC before initialization. Never paste a secret provider credential into a public message.
The initial scan depends on external services and may take time. Full sync validation is still outstanding in this preview. A missing balance is not evidence that funds are absent. Do not treat an incomplete scan as a verified balance.
Check that you selected the correct GHOST JSON backup and entered its matching password. A damaged file or incorrect password cannot be bypassed. Keep your original backup intact.
Verify your recovery backup, select Ethereum mainnet, and review a transaction first. Private spending also requires completed balance and proof-history scans, spendable funds, and a connected broadcaster with a valid fee quote.
GHOST has not been independently audited. Integrating RAILGUN does not make this interface audited.
This integration preview targets Ethereum mainnet. Other chains, bridges, NFTs, and private swaps are not implemented in GHOST.
No GHOST token requirement is implemented. A deployed GHOST token contract has not been configured in the app.
No. Connecting allows the app to read your public wallet information. Existing public balances and transaction history remain public.