XMR ROOTS · PRIVATE VAULT · PHASE-2 TRUSTED SETUP

Vault ceremony verified.

Five contributions accepted, including three independent contributors recorded by the coordinator. The announced Bitcoin beacon has been applied and the final key passes snarkjs verification. Contributions are now closed.

Cryptographic setup complete. This verifies the ceremony, not an audit or activation of the vault. The vault is not live yet. Deployment and real transaction tests come next.

1Public verification transcript

The contribution hashes are preserved. Participants use numeric labels in this public copy; original names remain embedded in the downloadable cryptographic files.

Read the public transcript

Public JSON transcript · Final verification manifest · File checksums

  1. Participant 001 — independent contributor
  2. Participant 002 — independent contributor
  3. Participant 003 — independent contributor
  4. Participant 004 — owner contribution, not independent
  5. Participant 005 — owner contribution, not independent

2Announced Bitcoin beacon

Block
973749
Hash
000000000000000000016bc2565d8b263bc580cc0cb1a00cc22b9c4c745bba7d
Block time (UTC)
2026-10-29T22:50:07.000Z
Public announcement (UTC)
2026-10-29T22:12:47.248Z
Last contribution (UTC)
2026-10-29T22:15:14.935Z
Confirmations at check
3, checked 2026-10-30T00:01:30.612Z

mempool.space · Blockstream

Original public commitment · Continuation provenance. The previous unpublished local plan is preserved in that provenance; all five contributions are retained.

3Verified files

Download the final proving key

Final zkey SHA-256
43e140611b525c063b787f66ea3192591f82a3de684fecb39d4db384b521d323
Owner checkpoint accepted
sell_0005.zkey · SHA-256

Verifying key · Pinned circuit (sell.r1cs) · Final key SHA-256 file

With the pinned Hermez phase-1 file listed in the transcript and snarkjs 0.7.6, anyone can re-check:

snarkjs zkey verify sell.r1cs powersOfTau28_hez_final_13.ptau sell_final.zkey

Independence is based on participant attestations recorded by the coordinator. The cryptographic verification checks the contribution chain; it does not establish participants' identities or prove secret deletion.