PARANOID
Launch app

Paranoid mode, for everyone.

The AI knows what you asked. It never learns who asked.

Launch appWalk into the crowd

Your cursor is the gateway's eye. Look anywhere: every face it finds is a mask.The mask is the gateway's eye. Drag it: every face it finds is a mask.

1Deposit once

Put USDC into one Solana vault for as many epochs as you choose, and a commitment to your secret joins the member tree. From then on you are one mask in this crowd. The vault knows that a member paid. Nobody learns which member is asking, and the epochs you never reach come back when you leave.

Deposit in the appHow the vault works

2Ask without a name

Every request carries a zero-knowledge proof that some member still has allowance. The gateway checks the proof, forwards the prompt to the model and keeps no IP or identity log. Each conversation gets a fresh credential, and your own client mixes in cover traffic.

Get your endpointThe gateway, line by line

3Cheat, and the mask comes off

Each request reveals one point on a line that starts at your secret. One point says nothing. Spend the same slot twice and two points give the line away: anyone can recover your secret, and the program forfeits everything you had not yet spent.

Try to cheatSlashing rules

What happens if you spend the same slot twice?

Every request publishes one point on a line. The line starts at your secret, at the left edge. With one point, any line could pass through it, so the point gives nothing away. Press the button to send a second request from the same slot.

Points published
1
Your secret, as seen by anyone
Unknown
Your unspent balance
10 USDC

Published: x = 3, y = 59. Lines through that point exist for every possible secret.

0100x, from the messagefirst requestsecond requestyour secret, 41
Small numbers for reading. The real line lives in a 254-bit field, so a single point leaves every secret equally possible.

Built on zkAPI. We did not invent it.

zkAPI was released on 1 October 2026 by the Ethereum Foundation and the Open Anonymity Project, from a design Vitalik Buterin and Davide Crapis published in February 2026: deposit once, make calls nobody can link, and lose the deposit if you overspend.

On 16 October Buterin showed the paranoid mode he uses himself: zkAPI payments, a Tor circuit for every conversation, random cover traffic and prompts rewritten on his own machine. He noted that Tor is slow and far from optimal. PARANOID takes the same idea to Solana and puts it behind one endpoint.

Buterin's paranoid modePARANOID
ChainEthereumSolana
How you connectA power-user setupOne OpenAI-compatible endpoint you paste into the app you already use
Hiding where you areA Tor circuit per conversation, which he calls slowA fresh credential per conversation and cover traffic from your client; Tor stays optional
Who it is forBuilt for his own useAnyone with a USDC deposit

Sources: zkAPI on GitHub, and the IETF CFRG draft on anonymous credit tokens.

Burned for good

A fixed share of every paid epoch buys PARANOID on the open market and burns it, through a crank anyone can call. A fixed share of every forfeited balance goes the same way. After launch these numbers are read from the chain.

0PARANOID burned for good
$0Spent buying it back
0%Of the supply removed

The token does not exist yet. The first paid request after launch starts the burn.