Public
Amount on chain
Classic SPL-token escrow. The funded amount is written into the record, readable by anyone — like a normal transfer.
fund_public · claim_public · revoke_publicProtocol
Active until claimed or returned.
A sender funds value behind a key derived from the link's secret. Whoever holds that secret can name a destination. That's the whole model — everything on this page follows from it.
Deployed on Solana Mainnet
The Link program
Every number this app shows is read back from this program's accounts — never from a database.
01 · State machine
The record resolves once.
FundCreate the record
ActiveFirst final action wins
Claimed Bearer chose the destination
Revoked · returned Creator acted first
02 · Amount visibility
Same authorization. Different visibility.
Confidential
Amount omitted
Token-2022 confidential-transfer escrow. The record and its events carry a zero amount; only the bearer secret can derive the vault keys that read it.
fund_confidential · claim_confidential · revoke_confidentialSend and request, public and confidential: four product flows over the same six instructions. A request is not a separate instruction — it's a link whose invite is handed to the payer before it is funded.
03 · What holds
No named recipient
A link stores no destination. Whoever holds the secret names one at claim time.
No expiry
No instruction reads a clock. A link stays active until it is claimed or returned.
Creator return
The wallet that funded a link can take it back — only while the record is still active.
Readable receipt
After settling, the record stays on chain as a permanent, readable outcome.
Composition boundary
Link accepts value. It does not wrap it.
Confidential links carry assets that are already confidential Token-2022 balances. Wrapping, backing, and which assets are admitted stay outside the program — client policy, not protocol state.