Skip to main content

​
Privacy and AML

Loyal is not a mixer. The architecture is different. When you shield tokens, they go into a shared Vault, one pool per token mint that holds everyone’s real SPL tokens. Your tokens are commingled in that pool, but Loyal doesn’t shuffle or tumble anything.Transfers between users don’t move real tokens at all; they’re pure arithmetic on deposit accounts. Those accounting operations happen inside MagicBlock’s private ephemeral runtime, where only the deposit owner can see or interact with the account.So the pool gives you fungibility (an observer can’t tell whose tokens are whose inside the Vault), and the ephemeral runtime gives you transaction privacy (nobody can see the transfers happening). No shuffling, no time delays, no “mix quality.”
Everyone who has shielded the same token. All USDC deposits sit in one Vault. All SOL deposits sit in another. When you withdraw, the tokens come from the same pool everyone else deposited into, so there’s no on-chain link between your deposit and your withdrawal.The more people shielding a given token, the larger the set. But unlike a traditional mixer, your transaction privacy doesn’t depend on the set size; the transfers themselves are invisible inside the ephemeral runtime regardless of how many other users are in the pool.The anonymity set matters for deposit/withdrawal linkability. The ephemeral runtime matters for transfer privacy.
MagicBlock’s ephemeral runtime is OFAC-compliant. Sanctioned wallets are screened and rejected at the deposit level, before funds ever enter the Vault. The pool stays clean by infrastructure design, not by trust.For anything beyond OFAC, Loyal is working with legal counsel and will publish a formal compliance framework as it solidifies. No KYC is required at the wallet layer.
No. Every Solana transaction (sender, recipient, amount, token) is published to public block explorers and indexed by chain analytics within seconds. The same applies to USDC, USDT, and every other SPL token.Loyal makes transactions private by holding shielded balances in MagicBlock’s ephemeral runtime, where transfers update encrypted deposit accounts that aren’t visible on the base layer.

​
Yield

Kamino. Specifically, Kamino’s single-asset lending vaults on Solana, the same infrastructure used by Phantom, Pendle, Anchorage, and others.When you earn APY on shielded USDC, your assets are deployed into Kamino’s strategies. Loyal doesn’t run its own yield strategies and doesn’t promise magic numbers. Shielded SOL and USDT are supported for private transfers but do not currently earn yield.
Loyal targets the best available stablecoin lending yield on Solana by automatically routing your dollars to whichever reputable Kamino reserve currently pays the most, swapping between risk-equivalent stablecoins (USDC, PYUSD, USDT, USDS) when a better market uses a different dollar.It’s a variable, market rate, not a fixed APY. The optimizer’s edge is capturing the short windows when reserves raise rates to attract capital, which a parked position in a single reserve misses. Loyal doesn’t quote magic numbers; the live rate is visible in the app before you deposit.
Loyal’s optimizer is plain stablecoin lending: no leverage, so no liquidations, and no liquidity-provider positions, so no impermanent loss. Your dollars sit in established Kamino reserves while you keep the keys, and the automation is bounded by an on-chain Squads policy with a whitelist of reputable stablecoins and reserves.The residual risks are the ordinary ones any lender takes: a reserve smart-contract issue, or a stablecoin losing its peg. Custody is not among them; the policy can’t move funds outside the whitelisted intents.
By moving your allocation between reserves as rates change. A reserve sitting at a steady APY misses the windows where another reserve briefly raises its rate to attract capital; those windows close in hours.The optimizer watches all whitelisted Kamino reserves and routes to the highest payer, capturing those windows automatically. Your dollars rotate through different stablecoins (USDC, PYUSD, USDT, USDS) to reach the best market, but you withdraw to the dollar you started with.

​
Agent guardrails

It can’t unless you explicitly allow it. That’s the entire point of Smart Account policies. You define the boundaries: token whitelist, spending cap per agent, approved protocols.The agent operates inside those permissions and cannot exceed them. If a memecoin isn’t on your whitelist, the agent can’t touch it. The Squads program enforces these rules on-chain, so even a compromised agent can’t break out of the policy envelope.
Multisig solves the “who can sign” problem. Loyal solves the “what can be signed” problem.A standard multisig requires N-of-M approvals on arbitrary instructions; Loyal layers programmable policies on top of the Squads program (per-signer spending limits, token allowlists, protocol allowlists) so that automated signers (agents, bots, scripts) operate within a constrained surface.

​
Custody and infrastructure

A server runtime where code runs inside hardware-encrypted memory (AMD SEV-SNP or Intel TDX) so that not even the cloud provider or the server’s own operator can read what’s inside.Loyal uses Confidential VMs to compute private transfer flows without exposing balances or counterparties on the public chain. Hardware attestation produces a cryptographic receipt of the code running in the VM, so you can verify it matches what Loyal published on GitHub before you trust it.
No. Keys live in your Telegram passkey, Chrome extension, web app session, or Android app. The Confidential VM is a signing co-processor, not a key custodian, and Smart Account policies are enforced on-chain by the Squads program, not by Loyal’s backend.Pooling tokens in a shared Vault isn’t custody either: this isn’t a centralized exchange, and only your own key can withdraw your balance. Attestation is hardware-signed so you can verify the code running before you sign.
A variable, market rate, not a fixed promise. Yield comes from Kamino’s lending markets, so the rate floats with on-chain supply and demand.Loyal doesn’t run its own strategies and doesn’t quote magic numbers. The underlying market rate is public on Kamino, and the current rate for your assets shows in the app before you deposit.

​
Compatibility and apps

Loyal adds Smart Accounts and an AI-agent permission layer on top of your existing wallet. Phantom and Backpack are still great wallets; Loyal sits alongside them, holding the Smart Account that an agent operates within your rules.Smart Accounts let an AI agent research, suggest, and execute within your rules, plus automatic yield on your shielded USDC via Kamino. Loyal connects to every Solana dApp that supports wallet adapters. You can use Phantom or Backpack as a signer on a Loyal Smart Account; Loyal doesn’t replace them.
Loyal runs in four places, all on the same Squads-based smart account:iOS isn’t available yet.

​
About Loyal

Loyal DAO LLC, a Marshall Islands-registered DAO LLC. The codebase is open-source under Apache 2.0 in the loyal-labs/loyal-app monorepo on GitHub.The org maintains the on-chain Anchor programs, the @loyal-labs/private-transactions SDK, the web app, the Chrome extension, the Telegram mini-app, and the Android app.