Sell pressure
Unlock dates are public. Per-wallet amounts shouldn't be. When they are, the market tracks each recipient and trades against them before they can act.
Distribute tokens.
Keep every amount confidential.
Launch, fund and pay out token distributions onchain, confidentially: vesting, airdrops and cap-table management.
- Built on the Zama Protocol
- ERC-7984 confidential tokens
- Free claims for recipients
Already trusted by 30+ teams
- $2B
- in token value distributed
- 500+
- distributions executed
- Audited
- by OpenZeppelin & Monethic
The problem
Onchain cap tables are public cap tables.
Every amount is public to anyone with a block explorer: allocations, unlocks, claims.
Compensation everyone can read
Senior people decline pay that colleagues, competitors and recruiters can look up on an explorer.
Airdrops become targeting lists
Public amounts turn allocation lists into maps for bots, sybils and scammers.
Spreadsheets and manual transfers
Without a system, operations run on one-off transfers. One wrong address is irreversible.
TokenOps keeps the ledger and encrypts the amounts. Addresses, dates and events stay public and verifiable. Amounts do not.
Access
You decide who reads what.
Amounts are always encrypted for the outside world. You choose who else can decrypt them: your admins, an auditor, a tax authority. Addresses and dates stay public, like any ERC-20 token.
| Who | Amounts · ERC-20Any public token today | Amounts · ERC-7984With TokenOps | Addresses and datesSame for both |
|---|---|---|---|
| The recipienttheir own distribution | Public | Always, in their browser | Public |
| Your adminsfinance, HR, operations | Public | Public | |
| A third partyauditor, tax authority, fund administrator | Public | Public | |
| Everyone elseexplorers, competitors, the market | Public: anyone reads every amount | •••• Always encrypted | Public |
- Public
- Exposed
- You choose. Every decryption is logged.
Disclose: permanent, per amount
Optional. For the parties that must always be able to check: your auditor, your fund administrator.
Delegate: temporary, for everything
For a colleague or an advisor who needs to read for a while. A delegation expires on a date, or you revoke it with one transaction.
For organizations
Launch in three steps. Run on autopilot.
- 1
Launch
Pick a group of recipients: employees, investors, advisors. Set the schedule: start, cliff, end, frequency and, if you need one, a lockup. Your browser encrypts each amount before anything reaches the chain.
- 2
Fund
Move tokens from your treasury. Distributions pay out in ERC-7984: no new contract, no rebuild of audited code.
- 3
Pay out, on schedule
Tokens unlock on their dates. Recipients claim when an amount is available.
Every recipient sees the same numbers
Total 100%- Claimed 22%· in the wallet, irreversible
- Available 16%· unlocked, not yet claimed
- Locked 62%· not unlocked yet
Unlocked = Claimed + Available. Total = Unlocked + Locked.
Who it is for
Three kinds of recipients. One organization in control.
Investors, employees and creators receive tokens in different ways. The organization runs all of them from one place, and every amount stays confidential.
Unlock without exposing every position.
Cliffs and lockups written onchain. Each investor's amount stays theirs to know.
Series B · Lockup to Feb 2027
- Total
- ••••
- Available
- ••••
Distribute tokens to your employees
Monthly or quarterly schedules with a cliff. Each employee sees their own amount. A colleague sees nothing.
Team 2026 · 12-month cliff
- Total
- ••••
- Available
- ••••
Long collaborations, paid.
A twelve-month collaboration paid on a schedule. The next creator you talk to cannot read the deal. Pause or cancel the locked part if it stops.
Collaboration · 12 months
- Total
- ••••
- Available
- ••••
One place for every distribution you run.
Finance, marketing and HR each get their own space and admins. The treasury stays with you. Disclose exact amounts to your auditor when you need to.
Zama · 4 distributions
- Total
- ••••
- Available
- ••••
For recipients
No wallet to install. No gas to pay. Nothing to remember.
An employee who has never used crypto and a fund with a team account get the same four steps.
- 01
Sign in with your email
You get a one-time code. Nothing to install.
- 02
Your wallet, or a TokenOps wallet
Bring MetaMask, Ledger or a Safe. Or use the wallet that comes with your email.
- 03
Verify with a free signature
One readable message, no transaction, no gas. It fixes the wallet that receives your tokens.
- 04
Claim when available
The claim is free. Tokens go to your verified wallet. Then they are yours, and only yours.
Product
One app. Every way you give out tokens.
The same place for every group you pay: employees, investors, creators and communities.
Distributions
Schedules with start, cliff, end, frequency and lockup. Groups of recipients. Cancel the locked part, pause all claims, disclose an amount.
Confidential airdrops
Claim campaigns for a community, with encrypted allocations: the chain shows who claimed, never how much.
Confidential tokens, built in
Every distribution pays out in ERC-7984, the confidential token standard built on the Zama Protocol.
Team accounts
Roles for your organization: Admin, Operations, Viewer. A fund joins as a team, with an approver for large claims.
Security and compliance
Verifiable onchain.
Confidential by default.
Audited contracts
Each distribution is a copy of an audited contract, created by our factory. Roles live in the contract. The chain enforces them.
Encryption end to end
Fully Homomorphic Encryption from the Zama Protocol. The chain computes on encrypted amounts. Decryption happens in the reader’s browser, never on our servers.
Personal data stays off the chain
Names, emails and groups live in our database under access control. The chain sees addresses, dates and encrypted amounts. Nothing else.
Built for your auditors
Disclose exact amounts to tax authorities, fund administrators or auditors.
Questions
Straight answers.
Something else? Talk to the team.
What is public, and what is encrypted?
Public: the contract, the addresses, the dates and the events (launch, claim, cancel). Encrypted: every amount. Anyone can verify that a claim happened. Nobody can read how much, unless you disclosed it to them.
Do recipients need crypto knowledge?
No. They sign in with an email, get a wallet with it, verify with one free signature and claim. The organization pays the gas.
Can my auditor or the tax office see the amounts?
Yes, if you disclose them. A disclosure gives a named party a permanent right to decrypt specific amounts. Every read is logged. Everyone else sees four dots.
Does this work with my existing token?
Yes, if it’s an ERC-20 token. Distributions pay out in ERC-7984, the confidential token standard. Talk to the team to get started.
What if a recipient loses access to their wallet?
The organization can cancel the locked part and reassign it to a new verified wallet.
What chains do you support?
Ethereum mainnet today. If your token is ERC-20, you’re covered. Multi-chain support is on the roadmap.
I use TokenOps today. What changes?
Nothing for your current distributions. They keep working in the current app. New confidential distributions run in the new app.