GhostBook
GhostBook
Confidential trading with Flare TEEs
Sensitive order and payout logic runs inside a Trusted Execution Environment. Verified outputs connect back to onchain settlement on Coston2.
Private Swap
Encrypt swap intent to the TEE, escrow on PrivacyRouter, match privately, settle with an attested signature.
TEE Vault
CipherSign on Flare Confidential Compute. Policies (allowlist, cap, expiry) are enforced inside the enclave — not in a public contract.
Sealed Until Fill
tokenOut / minOut stay ciphertext until TEE attestation. Settlement routes through Uniswap — amounts become public only at fill.
Onchain Settlement
Uniswap V3–style pools on Coston2 settle trades and liquidity. The DEX stays composable; TEE protects sealed intents and operator keys.
How TEE + onchain fit together
Private execution where it matters — settlement where it must be public.
Step 1
Private in the TEE
CipherSign enforces allowlist, amount caps, and expiry inside Flare FCC. Sealed order details stay hidden until reveal.
Step 2
Verified output
The enclave returns an attested signature or policy decision — not your raw private key or unconstrained signing power.
Step 3
Consumed onchain
Swaps and LP settle on Uniswap V3–style pools on Coston2. TEE outputs unlock operator payouts and confidential workflows.
Why confidential compute
Inside the TEE: policy checks and signing keys for operator payouts (CipherSign), plus sealed order intent handling so price and size are not broadcast by default.
Onchain: pool state, swaps, and liquidity remain public and composable on Coston2 — where settlement and auditability belong.
Trust assumptions: you trust Flare FCC hardware attestation and the CipherSign enclave code path — not a centralized hot wallet that can sign anything. That is why TEE beats plain smart contracts for secrets that must never live in public calldata.
Ready to try GhostBook?
Connect on Flare Coston2 — seal orders, settle on the DEX, and gate payouts with TEE policy.