UNLIT
A night city run by machines, printed in ink, navy and signal red: server-stack towers with every window shuttered, robot arms and cranes on the roofs, delivery robots in the rain, lit only by the street tickers and one tower's trade tape.

A blind trust, turned inside out

The manageris sealed.

A city of machines, no people. A rule set sealed for Arcium's encrypted network decides; a Solana program holds the pool and enforces the walls.

Launch app
NAV per share1.0000 USDCPool$0SOL...cbBTC...JitoSOL...NVDAx...SPYx...TSLAx...XAUt0...USDC...Trades0Rule setsealedHolder balancessealedSolana slot...
Halftone print: a maintenance robot with a blank visor stands on the ledge of a window whose metal shutter is rolled all the way down.
The shutter stays down. The robot still works the window.

Funds show everything, or nothing.

Glass boxes leak.

On chain, a fund shows everything. Every position and every holder's balance is public, so anyone can trade ahead of the manager or read what each client owns.

Black boxes hold the keys.

Off chain, a fund shows nothing. The strategy stays private because a person holds the money, and you are asked to trust that person with both.

Seal the manager.

The rule set is encrypted for Arcium. Its nodes compute the next order without seeing the rules, and the program accepts only orders carrying their signature.

Publish the walls.

The limits are code anyone can read. No instruction pays the pool to an address. Trades go through Orca or Jupiter, at most 20% of the pool a day and 0.5% from the oracle price.

How the machine runs

Deposit, decide, execute, redeem.

Public, then sealed

Deposit

USDC goes into the USDC vault. Shares are minted at the pool's value per share, priced by , and moved in the same instruction into your pending confidential balance.

What does the chain see when you deposit?

USDC

... at the USDC price on Jupiter

Public, once: the deposit

25,000.00 USDC in, 24,975.00 shares minted

Both numbers sit in the deposit instruction for anyone to read. The 0.1% deposit fee stays in the pool. Seconds later the shares are in your confidential balance, and the public balance reads zero.

Sealed from then on: your balance

00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Sixty-four bytes of twisted ElGamal over ristretto255, the construction of a Token-2022 confidential balance. Every encryption draws fresh randomness, so the same balance never prints the same way twice.

Launch appHow it works

Every line of the statement

What the street shows, and what it doesn't.

Open the app
Net asset valuePublic1.0000 USDC per share before the first deposit. The program values the eight vaults at Pyth prices for the crypto and Kamino Scope prices for the stocks and gold.The poolPublicUSDC...SOL...cbBTC...JitoSOL...NVDAx...SPYx...TSLAx...XAUt0...Empty until the first deposit; every vault is a public token account.TradesPublicNone yet. Each one is an Orca or Jupiter swap that anyone can read, sized by the order the cluster signed.The rule setSealedEncrypted for Arcium's cluster and stored that way on chain. Whoever writes it knows it, so a new rule set waits seven days in public before it applies.Holder balancesSealed
00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
One sample entry, re-encrypted every four seconds. Only the holder's key opens it; there is no auditor key and none can be added.FeesPublicNo management fee. 5% of gains above the high-water mark, paid in new shares. 0.1% on deposits, kept by the pool.TokenPublicNone. 0 burned, $0 bought back, because there is no supply to remove.

The manager

A computation no single machine can open.

The rule set is encrypted for 's network, a multi-party computation on Solana. Its inputs are split across the nodes, so no single machine, ours included, holds them in the clear. What comes out is an order, and the order is public.

3 nodes
in Arcium's mainnet cluster today, read from the chain. The rules stay sealed while one of them is honest.
3.0 s
from request to signed order on a two-node localnet. The program checks the cluster's BLS signature before writing the order.
7 days
of public waiting before a new rule set applies. Whoever writes the rules knows them; everyone sees the change coming.

Blackthorn, Arcium's encrypted AI inference, is not open yet. Until it is, the manager is an encrypted rule set: target weights and a band, hidden; the logic that compares them, public.

Dithered print: a closed round vault door in an underground server room, three industrial robot arms resting their tools on its bolts.

A blind trust, turned inside out.

Under the Office of Government Ethics rules, a qualified blind trust hides the trustee's choices from the official who owns the assets. UNLIT keeps the manager's rules from everyone and shows everyone what the manager did.

Who reads the strategy

In a blind trustThe trustee.

In UNLITArcium's nodes compute on it without reading it. Only its author knows it, and a change waits seven days in public.

Who sees the client

In a blind trustThe trustee and the ethics office.

In UNLITOnly the holder's key. The deposit itself is public; the balance after it is not.

Who can take money out

In a blind trustThe trustee, within the trust's terms.

In UNLITOnly the holder, by burning shares, for the same fraction of every vault.