> For the complete documentation index, see [llms.txt](https://docs.heaa.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.heaa.xyz/heaa-dark-pool/security.md).

# Security

## Security & Guarantees

### Non-custodial by design

Your private keys are generated on your device and never leave it. HEAA never holds your funds or your secrets. Every action that moves funds is signed by your own wallet, which means you explicitly approve everything.

### What's private

* **Your encrypted balance** is encrypted on-chain — no one can see how much you hold.
* **Private transfers** between encrypted accounts carry no public link between sender and receiver.
* **Only you can spend** your encrypted balance, because only your device holds the keys.

### What's visible

Privacy has clear edges, and it's important to understand them:

* **Shielding is visible.** Others can see that you moved funds into privacy, though not what you later do with them.
* **Unshielding is visible.** Moving funds back to your public wallet is an on-chain event.

The privacy lives in what happens *inside* the pool — holding, sending, and receiving — not in the act of entering or leaving it.

### Secure computation (MPC / Arcium)

The private computations that make the pool work are handled through secure multi-party computation powered by Arcium. This lets the network verify that every transfer is valid — that funds exist and aren't double-spent — without any single party ever seeing your private details.

### You stay in control

* Connect and disconnect your wallet at any time.
* Unshield back to your public wallet whenever you want.
* Your encrypted balance follows your wallet, so it's recoverable on any device by signing with the same wallet.