Helius encrypts Solana transfers without removing operator trust
Helius launched its permissionless Privacy Ring on Solana mainnet, concealing payment assets and amounts while leaving wallet addresses public. The default prover processes plaintext transaction inputs inside an attested AWS Nitro enclave, and wallets can verify the enclave’s software measurements and request-encryption key. This reduces exposure to the host operator but does not eliminate trust: wallets must approve the measured code and policy, while initial key-policy binding relies on AWS, the operator, and Nitro hardware. Transaction metadata such as timing, size, and proof paths remains visible. Wallets can also use local proofs; viewing keys may be kept on-device or delegated to a provider, which gains access to balances and history but not spending authority.
