What is public

Solana transactions are visible. Lethenymous does not conceal the transaction itself or the current public amount fields.

On-chain public data

• The pool, reserves, LP vaults, shielded custody balances and token mints.
• Transaction existence, slot/time, fee payer and public account list.
• Shield: source wallet, asset, note amount, commitment, root, generation and leaf index; the emitted encrypted note payload is also present.
• Private Swap: pool, direction, amount_in, amount_out, accepted root metadata, nullifier, change/output commitments and append indexes. Reserve/custody balance changes are visible.
• Unshield: amount, asset, recipient, pool, root metadata and nullifier.
• Public Merkle roots and commitments, plus each spent nullifier when a note is consumed.

Not present as plaintext in a proof transaction

Spend secrets, note randomness, input note preimages and Merkle witness siblings are local witness material. Their cryptographic binding is verified by the proof, rather than by publishing these values.

The public relation between an input nullifier and newly emitted commitments is visible in a PrivateSwapped event. The input commitment itself is not a public Private Swap input. This makes the direct note-to-wallet path harder to observe, but does not prevent statistical correlation from amounts, timing, pool state or external data.