ΛΗΘΗ
reading

ΛΗΘΗ

an address that forgets

Everything you have ever signed is still sitting on this chain, waiting for a machine nobody has built yet. Privacy that holds only until then is not privacy. It is a delay.

Forget Why it holds
the spring

the spring, read from Ethereum

What it holds now

Reading the chain...

three movements

I

Forget

Hand the spring LETHE in measures of 1M, 10M or 100M, from your wallet or straight from ETH in one transaction. Your browser writes a note for each: two random numbers only you keep. The spring stores a hash of them, and nothing else.

forget
II

Remember elsewhere

Paste a note and name any address. Your browser proves, in about a second, that the note is one of the spring's without saying which. The LETHE goes to that address, or is sold for ETH in the same transaction.

remember
III

Gone

The note is spent once and can never be used again. Nothing on chain points back to the deposit: only the crowd of notes of the same measure, any of which it could have been.

the rules

why it holds

What a quantum computer finds here

A machine that breaks elliptic curves reads every signature, every key exchange, every commitment that rests on one. LETHE puts none of those on chain.

i

No keys to break

Every note is a Poseidon hash. Nothing is encrypted to a public key, and nothing the spring keeps rests on a discrete logarithm. Reversing a hash stays a search of about 2127 steps, even for a quantum computer.

ii

Proofs that say nothing, even then

The proofs use Ethereum's own KZG ceremony. A quantum computer could recover the ceremony's secret. LETHE's proofs are built so that even with it they reveal nothing: every value a proof shows is masked by four random coefficients. Withdrawals made today stay unlinkable after the machine.

iii

A tripwire for the day

The spring holds a point nobody knows the logarithm of. Whoever shows one (only the machine could) takes the jar, and from that block the spring refuses every proof. Notes still leave by the exit, which needs no curve at all, only the hash.

What it does not do

  • Once the machine exists, a forged proof is possible until someone trips the wire. The tripwire marks the day; it is not a wall.
  • Your privacy is the crowd: the notes of your measure still in the spring when yours leaves. Timing, amounts and addresses outside the proof can still link you. Wait, and use the common measures.
  • Proofs trust Ethereum's KZG ceremony: one honest participant among about 141,000 is enough.
  • The pool's only depth is the owner's band, and nothing in the contracts stops the owner removing it.

Check it yourselfThe machine

the obol

Who earns

Every crossing of the pool pays the ferryman one obol: 1% of the ETH a trade moves, buy or sell. It goes to the owner, who also holds the pool's one band. The pool's LP fee is 0%. The spring itself takes nothing; a relayer, if you use one, takes only the fee your proof names.

The pool opens once, at a 2 ETH valuation, with the whole billion in that one band: nothing is set aside. The token itself has no tax, no gate and no owner.

measured on a copy of mainnet

What it costs