Treat the link like cash
Anyone holding the complete link can claim it to any wallet while it stays active. Send it only through a channel you trust.
Security
The link is the authority.
Link removes the need to know a receiving address up front. The tradeoff is stated, not hidden: possession of the complete link authorizes the claim.
32-byte bearer secrethandled locally, never sent to a server
01 · Claim-link handling
The secret enters. The address clears.
link.k256.xyz/c#s=••••••••The secret stays in this browser
It's read once, scrubbed from the visible address, and never sent with any request.
Browsers never transmit the part of a URL after #. The claim page reads it, drops it from the address bar, and works from memory. Possession of the complete link is still what authorizes the claim — the handling protects it from servers, not from people.
02 · Handling
The secret lives after #
The claim authority rides in the URL fragment. Browsers never send it to a server; this app scrubs it from the address bar on arrival.
Read the record before acting
A claim or return can win while another is pending. The app re-reads the chain and shows the finalized outcome — the first final action wins.
03 · Amount visibility
Confidential doesn't mean invisible end to end.
In confidential mode the amount is absent from the record and its events. But moving value into a confidential balance — and back out — are public operations that can be correlated. The privacy covers the amount inside the link, not the edges around it.
Public LINKPublic
04 · What the app checks
Secret, state, and recovery stay bound to the record.
The secret and the record belong together
Keys derived from the secret must match the on-chain record before a claim is ever offered. A mismatched link is refused, not guessed at.
One terminal state, forever
Claimed value cannot be returned; returned value cannot be claimed. The record keeps whichever happened first.
Recovery stays with your wallet
Link secrets are derived from one wallet signature, so the wallet that made a link can always show it again — no server keeps a copy.
The chain is the source of truth. This page is just a window.
The program defines what a link can do; this app only builds transactions your wallet signs and reads finalized state back. It keeps no accounts, holds no funds, and can't move anything without your signature.