Private intent router

Transit

You sign an intent rather than a transaction — what you want, what you will accept, by when — and it reaches a solver set instead of a public mempool. The winning fill settles inside a batch, so the interval that made front-running possible is gone. Everything after settlement is still public, and this page says so twice.

What is actually private The unsolved part

Lifecycle

Five steps, and two of them are where the trust moved

01
Sign
You sign an intent: asset in, asset out, worst acceptable price, expiry. It is not a transaction and it costs nothing to make.
02
Broadcast to solvers
The intent reaches the solver set and nowhere else. This is the step that replaces the public mempool, and it is also the step where the trust moved rather than vanished.
03
Quote
Solvers compete to fill it, from their own inventory, from an Orbit, or from anywhere else they can reach. The best quote wins — which is only meaningful if there is more than one solver.
04
Batch
Offsetting intents net against each other before anything touches a pool, so two opposite trades of the same size move no price at all and pay no impact.
05
Settle
One transaction, public and permanent. Your limit is enforced here, not at the quote — so you cannot be filled worse than you signed for, and you can be not filled.

Scope

Two columns, because one column is the problem

Privacy pages print the left column. The right column is what actually determines whether the left one matters to you.

Not visible before settlement

Your size, before settlementAn intent is seen by the solver set, not published to a mempool. There is no interval in which a pending order of known size sits in a public queue.
Your direction, before settlementSame mechanism, same scope. The information that made a sandwich profitable is the information that is no longer broadcast.
Your intent if it never fillsAn intent that expires unfilled settles nothing and therefore leaves no public trace.

Visible, permanently

The settled transactionIt is a transaction on a public chain. Amounts, tokens and the settling address are readable by anyone, permanently.
Your address, unless you take stepsNothing here breaks the link between your wallet and your fills. Transit hides the interval before settlement, not your identity after it.
Everything the solver set seesSolvers must know size to quote a price. "Hidden from solvers" and "quoted by solvers" cannot both be true, and any design claiming both has not resolved it.
Whatever the sequencer seesThe chain orders your settled transaction. A privacy claim about pre-settlement information says nothing about the party doing the ordering.

Netting

Two opposite trades move no price

The batch is not only a privacy device. Intents that offset each other clear against each other before anything reaches a pool, so the matched part pays no impact and no swap fee at all. Only the residual touches liquidity.

7 intents, 193 units of gross interest — 100 buying, 93 selling. 93 units of buying match 93 of selling, so 186 of the 193 — 96% — clears inside the batch and never reaches a pool: no price impact, no swap fee, and nothing for anyone to trade ahead of. Only the 7-unit residual touches the Orbit. Illustrative sizes; every figure in this sentence is computed from them.

The load-bearing assumption

MEV is relocated, not removed

Everything on this page depends on solvers competing. Today there is no solver registration, no bond, no slashing condition, no minimum count and no anti-collusion rule. With a single solver, “best price wins” is a tautology. With a colluding few it is worse than the public mempool, because the collusion cannot be observed from outside.

The extractable value that searchers competed for in the open does not disappear when the order leaves the mempool. It moves to whoever constructs the batch and whoever wins the fill, and the batcher holds exactly the informational advantage the mempool used to hold. That rule is unwritten.

This is one of seven open problems

Gas abstraction

Fees payable in the asset being traded, so a wallet with no native balance can still settle. Which paymaster, which account-abstraction standard, and who pays for an intent that fails, are all unset.

Simulation

You are shown a price before you sign. It is a quote, not a commitment: batched settlement means the book you were quoted against is changed by the rest of the batch. Your limit binds at settlement, so the failure mode is no fill, never a worse one.