Security Considerations

Onchain Auditability without Traceability Every transaction on Shadeo is verifiable on Solana — you can prove that a mix occurred. However, you cannot prove where it went.

Sessionless Design Shadeo does not store session data, wallet IDs, or request trails. The UI is stateless — refreshing or leaving does not affect security.

Wallet Hygiene Is Key We recommend always using fresh destination addresses. Reusing output wallets across different platforms may still allow observers to trace.

No Central Logs or Admin Access There is no centralized server or database connected to Shadeo. Even we (the developers) cannot see or access mix data.

Race Condition Protection To prevent predictable output ordering, Shadeo inserts randomized execution timing to break inference patterns.