Privacy-first burner wallets with zero on-chain linkability
GhostWallet is a privacy-focused burner wallet system built on Account Abstraction (ERC-4337) that enables users to create temporary, anonymous wallets for short-term transactions. The system combines ephemeral key management, zero-knowledge proofs, and paymaster-sponsored transactions to break on-chain links between users' main wallets and their burner wallets.
In traditional blockchain systems, every transaction is permanently linked to your identity. GhostWallet solves this by creating temporary wallets that cannot be traced back to your main account, giving you true transaction privacy.
With GhostWallet, users can:
- Create disposable wallets with time-limited access
- Execute transactions without revealing their identity
- Destroy wallets and leave no traces behind
- 🏭 Create Burner Wallets - Generate temporary, unlinkable wallets on-demand
- ⏱️ Start Timed Sessions - Activate wallets with 1-hour ephemeral keys
- 💸 Execute Transactions - Send funds privately without revealing your identity
- 🧹 Sweep & Destroy - Recover remaining funds and permanently delete wallets
1. User connects main wallet
↓
2. Factory creates GhostWallet (unlinkable via ZK proof)
↓
3. User generates ephemeral key locally (encrypted with password)
↓
4. User starts 1-hour session
↓
5. User executes private transactions
↓
6. Session expires or user manually ends it
↓
7. User destroys wallet and sweeps funds
┌─────────────┐
│ Main Wallet │ (Your identity)
└──────┬──────┘
│ ZK Proof (proves ownership without revealing address)
↓
┌─────────────────┐
│ GhostWallet │ (Burner wallet - unlinkable)
│ Factory │
└────────┬────────┘
│ Creates
↓
┌─────────────────┐ ┌──────────────┐
│ GhostWallet │◄─────┤ Ephemeral │
│ (Burner) │ │ Session Key │
└────────┬────────┘ └──────────────┘
│ (1 hour expiry)
│ Executes via
↓
┌─────────────────┐ ┌──────────────┐
│ EntryPoint │◄─────┤ Paymaster │
│ (ERC-4337) │ │ (Gas sponsor)│
└─────────────────┘ └──────────────┘
- Solidity 0.8.20
- OpenZeppelin Contracts (ReentrancyGuard, Address utilities)
- ERC-4337 Account Abstraction standard
- [Framework]
- ethers.js / web3.js for blockchain interaction
- WebCrypto API for local key encryption
- Node.js with Express
- MongoDB for proof tracking and replay protection
- Web3.js for contract interaction
- Circuit Design: Ownership verification without identity revelation
- Architecture: Groth16 verifier integration ready
- Current Status: Placeholder verifier for demo (production circuit in development)
| Contract | Address | Purpose |
|---|---|---|
| GhostFactory | See config/contracts.json |
Deploys new burner wallets |
| GhostWallet | Implementation | Individual burner wallet logic |
| EntryPoint | See config/contracts.json |
ERC-4337 transaction routing |
| Paymaster | See config/contracts.json |
Gas sponsorship and reimbursement |
| ZKProofVerifier | See config/contracts.json |
Zero-knowledge proof verification |
Network: Base Sepolia Testnet
📁 All deployed contract addresses are available in
smart-contracts/contracts/config/contracts.json
- Node.js v16+ and npm/yarn
- MetaMask or compatible Web3 wallet
- Base Sepolia testnet ETH (Get from faucet)
# Clone the repository
git clone https://github.com/yourusername/ghostwallet.git
cd ghostwallet
# Install dependencies
npm install
# Set up environment variables
cp .env.example .env
# Edit .env with your configuration
# Run the development server
npm run dev
Dashboard showing active burner wallets
Active session with ephemeral key
- ✅ Core burner wallet functionality
- ✅ Session-based ephemeral keys
- ✅ Account Abstraction (ERC-4337)
- ✅ Paymaster gas sponsorship
- ✅ ZK proof architecture design
- 🔄 Full Groth16 ZK circuit implementation
- 🔄 Privacy pool for anonymous funding
- 🔄 Enhanced UI/UX with wallet analytics
- 🔄 Multi-chain support
- 📋 Mainnet deployment
- 📋 Security audits
- 📋 Mobile app support
- 📋 Advanced privacy features
- [Jennifer Scottbello] - Smart Contract Developer
- [Beulah Ude] - Frontend Developer
- [Israel Adefokun] - Backend Developer
This project is licensed under the MIT License - see the LICENSE file for details.
Built with 💜 for privacy-conscious users
