A privacy protocol on Ethereum-compatible testnets, built on zero-knowledge proofs.
Dated milestones, each confirmed by transactions. Full history on the roadmap.
An internal review found that every circuit before V7 let a crafted proof withdraw without a deposit. Reproduced with test tokens, fixed in V7 and deployed on the test chain; older pools are frozen for deposits.
Trees 20 levels deep instead of 8, and the relayer's fee bound into the proof (V6). Both carried over to V7.
Move test LTH between Arbitrum Sepolia and the test chain from your wallet. A 100 LTH round trip was confirmed; a withdrawal takes about two hours.
Withdraw to a fresh address without a wallet or gas: the chain's relayer sends the transaction. It cannot change the recipient, which the proof binds.
Public chains show everything to everyone. Privacy-only pools hide everything, so proving anything means giving up control. Latheon is built for the space in between.
General categories, not specific products. Latheon is a testnet prototype; the Status section lists what is not done yet.
Use cases the design targets. These are not live integrations.
Pay many recipients from one pool without publishing a map of who paid whom.
Keep supplier and treasury flows off the public map while settling on a public chain.
Prove one specific payment to an auditor or counterparty, and nothing else.
A small simulation of one pool. Nothing touches a chain.
Click a line for details and the source.
Honest note: the pools hold mostly our own test deposits, so the crowd you hide in is close to empty. The mechanics work and can be checked on-chain; real privacy needs real users.
Honest gas note: gas units differ by network and have changed over time. Our latest single on-chain withdrawals on V5: Ethereum Sepolia 419,919 · Arbitrum Sepolia 276,769 · Robinhood Chain 297,197 (LTH) and 306,346 (USDG). On the Latheon test chain, V7 withdrawMany of two notes with relayer fees: 625,896 gas of execution, 35,912,159 in total including the L1 data charge. We cannot yet explain the Ethereum figure, so we make no claim that L2 uses more or fewer gas units than L1; fees depend on gas price. A controlled re-measurement is planned.
All deployments →Security note: an internal review found a flaw in every pre-V7 circuit — a crafted proof could withdraw without a deposit. We confirmed it with a test and fixed it; the current pools are V7 (withdraw_v5). The older pools (V3–V6, and the pools on the three external testnets) are frozen for deposits and kept only so existing notes can be withdrawn. Testnet only — no real funds were ever at risk. Details in STATUS.md and THREAT-MODEL.md.
Live numbers read directly from each network's pool contracts, plus the code and the status document.

Crypto lacks privacy. When every transaction is public, people and organizations can be exposed, and their data can end up in the hands of scammers. I knew a way to reduce that risk, so I started building it.
Latheon is a privacy protocol on Ethereum, built and maintained by me alone. It is live on testnets only, and the long-term goal is a Layer 2 where privacy is the default. Before this I worked as a lead auditor in a control and audit department and studied public administration. That background shaped my approach: privacy should hold up under verification. The code and tests are open, the numbers are measured, and I say plainly what is not done yet, including that there is no independent audit.
X: @ExPlurUm ↗Progress, measurements and fixes are posted on X and in Telegram.