S-12 / THE MECHANISM
The Glass Escrow.
Read the numbers.
Each market is a shielded Zcash account whose incoming viewing key is published. Anyone can see what came in. Nobody can see who sent it.
01 / INPUT
Shielded note
An amount. An outcome.
A sealed payout address.
02 / GLASS ESCROW
Public viewing key
Amounts and outcomes are readable. The sender stays shielded.
03 / SETTLEMENT
Shielded payout
2 of 3 FROST signatures.
One payout batch.
01 / PUBLIC
What anyone can see
- Every bet's amount, outcome, and block height.
- Every bet's memo, including the Thaw Tag and the sealed envelope ciphertext.
- Pools and odds per outcome, recomputable by anyone with the viewing key.
- Resolution evidence and the public payout plan (kind and amount per bet).
02 / PRIVATE
What stays private
- Who sent a bet: no sender address exists on the shielded chain.
- Bet transaction ids are not shown in this app.
- Payout addresses are sealed to the coordinator and never shown publicly.
- A Persona's bets stay unlinkable until its owner chooses to thaw.
03 / TRUST
What you still trust
- Trust-minimized, not trustless: the FROST committee cannot lie about a Chain-Verified result, but could withhold funds, because Zcash L1 has no payout script.
- The Payout Coordinator opens sealed envelopes, so it knows each bettor's payout address (not their identity). Use a fresh address for payouts.
- In this deployment one person holds all three FROST shares and the coordinator key. 2-of-3 is shown technically, not as separation of trust.
- Thaw does not prevent Sybil: one person can run many Personas.
04 / METADATA
Metadata that still leaks
- For every bet: amount, outcome, block height, and memo (including the Thaw Tag and the envelope ciphertext) are public to anyone holding the UIVK. That is the design.
- The existence of a shielded transaction in a block (not its content) is visible to anyone scanning the chain.
- The Payout Coordinator knows the payout address of every bettor.
- If full audit (F-13) is enabled, payout addresses and amounts become public after settlement.
- After a Thaw, all bets tagged by that Persona become public and linked.
- The public payout plan reveals the kind and amount of each payout per bet (note_ref), not the recipient address.
- The Treasury address and every sweep to it are public.
- An Envelope Proof published by a bettor reveals that bet's payout receiver.
- After settlement, the escrow still holds uneconomic dust and notes that arrived after the plan cutoff height.
- The API server sees HTTP requests. Use Tor if that matters to you.
05 / LEGAL
Before using Frosted
Is Frosted a betting service?
Frosted is a research project, not a betting service. Do not bet money you are not prepared to lose, and check the law where you live.
Is every part of a bet private?
No. Amounts, outcomes, block heights and memos are readable with the public viewing key. The coordinator knows payout addresses. Thaw makes a Persona’s tagged bets public and linked.
Can the committee withhold funds?
Yes. FROST requires multiple signatures, but there is no Zcash L1 payout script forcing the committee to pay. This deployment does not provide independent custody.
06 / BUILT ON
The Zcash stack underneath
- librustzcash Transactions, keys, note decryption and the hot wallet (pre-release crates for NU7).
- Zebra The node the indexer, API and verifier read the chain from (JSON-RPC).
- Orchard · Ironwood The shielded pools escrow notes live in; amounts and senders stay encrypted.
- FROST Zcash Foundation threshold signatures: two of three members sign one payout.
- ZIP-321 The payment request behind the Bet Builder's QR code and URI.
- Zcash testnet (NU7) Where every Frosted transaction is mined; check them on a public explorer.
Frosted is an independent project, not affiliated with Electric Coin Co. or the Zcash Foundation.