SECURITY & PRIVACY

The backend operates. The protocol constrains.

Privora selects backend-dependent liveness without trusting the backend for authorization, custody, conservation, margin, or liquidation correctness.

Hidden from the public chain

Wallet-to-order ownership and links between a user's trading actions.
Private net position, aggregate exposure, collateral, leverage, and Cross grouping.
The exact liquidation level and every approximate threshold, bucket, or band while a position is live.

Known to the backend

The supported backend receives the encrypted authorized package and learns the private workflow linkage needed to prove, settle, and monitor risk. It never receives the user's shielded signing secret.

Enforced on Solana

Groth16 proofs bind private authorization, authenticated membership, nullifiers, current market and risk state, conservation, margin, liquidation eligibility, output ownership, and the complete public effect manifest.

A proof is accepted only after every public input is bound to live on-chain state. Proof verification without that binding is not considered security.

Production safeguards

Production uses ceremony-generated proving keys, externally audited circuits and programs, calibrated outage controls, independent backend replicas, and bounded insurance risk.