Himess (@Himess__) profile picture

Protocol & Full-Stack Engineer Multi-hackathon winner 🏆 Building privacy, DeFi & agentic systems FHE • Web3 • AI

İstanbul, Türkiye
Joined January 2020
I build privacy & payment protocols across FHE, ZK, DeFi and agent payments. Four of my projects ended up winning along the way. 🏆 Here’s a quick look at the winning builds ↓ 🧵
2
26
2,189
Trade your shielded $ZEC for confidential USDC on Ethereum, without ever unshielding it. No bridge. No custodian. No wrapped ZEC. And the amount never shows up on chain. I connected @zama and @Zcash to make it work. Live on testnet 👇 What it is ZEC Desk is a small trading desk on Zama's FHEVM, on Ethereum Sepolia. On one side there's cUSDC, a dollar token whose balances are encrypted. On the other side there's shielded ZEC on Zcash testnet. You can trade either way. Built on Zama's model Zama's Confidential RFQ is already live on Ethereum mainnet, open to everyone: app.zama.org/swap It runs confidential swaps with encrypted quotes, a sealed-bid pick on chain and a hidden floor. ZEC Desk takes that same model and extends it to native shielded ZEC. Zama's swap settles both legs on one chain, inside its own contract, so a Zcash leg can't plug into it directly. Here that leg lives on Zcash and settles minutes later with a proof, so the mechanics run in my own contract. It's a sketch of how native ZEC could sit next to Zama's swaps one day, with no wrapped token. How a trade works (buying ZEC) 👇 1️⃣ You lock cUSDC in the desk. The amount is encrypted. 2️⃣ Makers send encrypted quotes. Nobody sees anyone else's price, or the minimum you'll accept. 3️⃣ The contract picks the best one under FHE. 4️⃣ The winning maker sends shielded ZEC to your Zcash address, with the order's reference in the memo. 5️⃣ A zero-knowledge proof shows that payment happened, and the contract releases your cUSDC to the maker. If no proof arrives in time, your cUSDC comes back to you. Selling is the same in reverse: the maker locks cUSDC, you pay the ZEC, and the proof releases the cUSDC to you. Why these pieces Each piece does one job. Zcash keeps the payment private. Zama keeps the amounts encrypted and can still compute on them. Seam, the Zcash light client I built last month, connects the two: a contract checks every Zcash block header itself, and a RISC Zero proof shows a shielded payment reached the right receiver. The transaction, the note and the address never touch the EVM chain. The masked amount This was the hard part. Seam's proof used to write the paid amount in the clear, and ZEC amount × price gives away the dollar amount. So the amount is masked. The contract adds an encrypted one-time mask to the encrypted amount and reveals only the sum, which looks random to everyone else. The mask comes from a secret that the side receiving the ZEC hands to the payer. The proof checks that the payment was at least the sum minus the mask, and never states the amount. One-time pads are old, and Zama's RFQ uses one too. Using one to hand a value from FHE to a ZK proof is the part I haven't seen before. If you have, please send it my way. No vault, no signers Seam can read Zcash, but it can't take ZEC from anyone. So the design never needs someone to pay ZEC on someone else's behalf. Whoever pays, pays from their own wallet, and the escrow on the EVM side enforces the deal. The side that paid the ZEC can prove it itself, so nobody depends on the other side's goodwill. Seam does more than this Any EVM app that needs to know a shielded payment happened can use Seam: pay-with-ZEC checkouts, escrows, payouts, cross-chain orders. This desk is one example. Where it stands ↓ Testnet only, unaudited. On 12 November 2026 I ran a Buy end to end: ➡️ Settled with a proof: sepolia.etherscan.io/tx/0x27… ➡️ One proof: 2 minutes on a rented RTX 4090, about $0.25 for the whole session ➡️ Gas per Buy on Sepolia: about 7.6M, in six transactions ➡️ A Sell also ran on Sepolia, up to the maker locking its cUSDC; it settles through the same proof step ➡️ Seam's light client is now deployed on Ethereum Sepolia too, next to Base Sepolia Where it can go ↓ → The desk only needs Zama's FHEVM and a cUSDC. Both already run on Polygon, where following Zcash costs a fraction of Ethereum mainnet. → Zama keeps adding chains. On any cheap EVM chain it reaches, the same desk can run, and if it comes to Base, Seam's relay already runs on Base Sepolia. → Zama's roadmap also goes beyond the EVM, to chains like Solana. Seam's verifier would need a port there. → On Ethereum mainnet, following Zcash header by header would cost over 2B gas a day, so batched header proofs are next for Seam. What it can't do yet - Settlement takes minutes, not seconds. Zcash confirmations set the pace, not the GPU. - Right now I'm the only maker, and a maker needs ZEC, cUSDC and a GPU. - Amounts are hidden, but EVM addresses are public. Read more ↓ Seam on ethresear.ch: ethresear.ch/t/seam-verifyin… Seam: github.com/Himess/seam ZEC Desk: github.com/Himess/zec-desk
5
10
595
New feature: hidden inheritance on Ethereum with ERC-7984 and @zama Your PIN is your proof of life. Stop entering it for months and your heirs inherit. One correct PIN during the grace period cancels it. → Who your heirs are, what they get, even how many there are: all encrypted. Not even you can look it up later. → Each heir gets a printable card with a QR code and a secret claim code. Keep it with your will. → When the time comes, they scan it and claim to any wallet they like, even a brand new one. → Anyone can hit claim. Heirs get their share, everyone else an encrypted zero, and from the outside it all looks the same. → Key stolen and you had to escape? The will comes with you to your backup address. The Sepolia demo runs on 5-minute timers so you can try the whole flow 👇 encrypted-account.vercel.app…
I built Encrypted Accounts on Ethereum with @zama Most wallet security trusts something outside the chain: 2FA → trusts your phone Email recovery → trusts your inbox Hardware wallet → trusts a device I wanted something different. So I put a 6-digit PIN check inside the smart contract, encrypted with FHE. Anything unusual (new address, big amount) and the contract asks for your PIN. Seed phrase leaked? Key stolen? Email hacked? Doesn't matter, they still can't steal your funds. "But 6 digits is easy to brute force" Not here. Every guess gets counted on-chain before the answer comes back, and the waits keep growing. That's ~12 tries a month, max. And your PIN never leaves your device. A few more things it does: ✅ your limits and trusted addresses are encrypted, so a thief can't even see the rules ✅ phishing signatures are useless, a permit signed with the key alone is void ✅ key leaked? hit escape and after 30 days everything goes to your backup address What I'm working on next: → Steal this wallet: a funded Sepolia account with a public seed phrase. Take it if you can → private transfers + a duress PIN → hidden inheritance → AI agents that hold the key while you hold the PIN It's a research prototype, live on Sepolia, not audited yet. Open source. Try it 👇 encrypted-account.vercel.app
3
1
8
680
Why FHE, not ZK? A will runs after you're gone. In ZK only the secret holders can update private state, and then nobody holds them all. With FHE the chain computes on encrypted state, splitting late deposits by hidden shares. Trade-off, you trust Zama's threshold network.
63
Replying to @Himess__ @zama
Why hide the heirs and not just the amounts? ERC-7984 already hides amounts, but only until a known heir unwraps. The sensitive part of a will is who's in it and who isn't. An open list would sit on-chain for years and tell attackers whose wallet to phish.
87
Really like what @Helius shipped with Privacy Rings. Private transfers settle in one Solana transaction. No sequencer, no L2, full Solana speed. Amounts are hidden, and so is which token moved. Prove locally and nothing private leaves your machine, or use their TEE prover if you'd rather not run one. Congrats to the team 👏 We need a lot more privacy apps and infra.
Today, Solana changes forever Introducing Solana Privacy Rings - encryption at the speed of Solana Rings are programmable, onchain environments for encrypting money, markets, and finance - without ever leaving Solana Now live on mainnet.
1
4
267
I built Encrypted Accounts on Ethereum with @zama Most wallet security trusts something outside the chain: 2FA → trusts your phone Email recovery → trusts your inbox Hardware wallet → trusts a device I wanted something different. So I put a 6-digit PIN check inside the smart contract, encrypted with FHE. Anything unusual (new address, big amount) and the contract asks for your PIN. Seed phrase leaked? Key stolen? Email hacked? Doesn't matter, they still can't steal your funds. "But 6 digits is easy to brute force" Not here. Every guess gets counted on-chain before the answer comes back, and the waits keep growing. That's ~12 tries a month, max. And your PIN never leaves your device. A few more things it does: ✅ your limits and trusted addresses are encrypted, so a thief can't even see the rules ✅ phishing signatures are useless, a permit signed with the key alone is void ✅ key leaked? hit escape and after 30 days everything goes to your backup address What I'm working on next: → Steal this wallet: a funded Sepolia account with a public seed phrase. Take it if you can → private transfers + a duress PIN → hidden inheritance → AI agents that hold the key while you hold the PIN It's a research prototype, live on Sepolia, not audited yet. Open source. Try it 👇 encrypted-account.vercel.app
9
1
1
41
2,169
Bug bounties are drowning in AI spam. curl shut its own down in January. So I built one that doesn't read reports. It runs them. Agents are welcome. Spam isn't. Prove the bug, and NEAR pays automatically. Antibody, built at NEAR HACKATHON @NEARProtocol #NEARHackathon
2
4
450
What's next: • NEAR contracts as targets, beside EVM • Payouts in any asset through NEAR Intents • Zero-knowledge by default above a payout cap • A paid bounty window on every pull request • Mainnet, after external audits Proofs, not promises.
1
39
Seam: shielded Zcash payments, verifiable on @base . A @Zcash light client checks every header on-chain. A @RiscZero proof shows a shielded payment landed in that chain, and Base never sees its txid, note or address. Open source, live on Base Sepolia. github.com/Himess/seam
I built a @Zcash light client that runs on @base 🛰️ It checks every @Zcash header on-chain: Equihash, difficulty (NU7's 25-second blocks included), median-time-past, reorgs. Anyone can feed it headers; it keeps only valid ones, and it has no admin key. So a contract on Base can verify shielded ZEC by itself, with no oracle or bridge operator in between. On top of it, I built Zecured for #ZECATHON 🛡️ Borrow against shielded ZEC without unshielding it. Sell nothing. Reveal nothing ! 🔐 Only the proof crosses • A zero-knowledge proof (@RiscZero ) shows your Ironwood deposit is in the chain the light client follows • Base checks the proof and never sees a Zcash txid, note or address 🏦 Borrow • zZEC is minted straight into a @Morpho market as your collateral • Borrow USDC from a fresh account, with gas sponsored • Close from collateral, and your ZEC comes back shielded The ZEC sits in a 3-of-5 FROST vault, and every payout is proven on Base. 🔄 Swap Lock USDC, a maker pays you shielded ZEC, and the USDC is released only on a zero-knowledge proof of that payment. No signer takes part in the trade. ✅ What's real • A full live run on Base Sepolia and Zcash testnet on Oct 27: deposit, borrow, close, payouts • Leak scan: none of the runs' 181 Zcash identifiers in the deployment's events or calldata • 800+ Solidity and 600+ Rust tests Testnet only, not audited. MIT. 🧭 Next: I plan to pull the light client and the proofs out into an open library, so any EVM app can verify Zcash on its own. I think cross-chain ZEC needs this layer. Curious what you think. Live run (3:55) → youtu.be/iyXiao54KWk Replay in your browser → zecured.vercel.app/app/ Code → github.com/Himess/zecured Built solo in October. Thanks @zksnarks_ for ZECATHON.
4
13
873
A real Testnet payment, proven in under 80 s on a rented RTX 4090, checks out with a single cast call. Seam is its own library. Zecured, my ZECATHON entry, stays as submitted. Testnets only, not audited.
1
223
I built a @Zcash light client that runs on @base 🛰️ It checks every @Zcash header on-chain: Equihash, difficulty (NU7's 25-second blocks included), median-time-past, reorgs. Anyone can feed it headers; it keeps only valid ones, and it has no admin key. So a contract on Base can verify shielded ZEC by itself, with no oracle or bridge operator in between. On top of it, I built Zecured for #ZECATHON 🛡️ Borrow against shielded ZEC without unshielding it. Sell nothing. Reveal nothing ! 🔐 Only the proof crosses • A zero-knowledge proof (@RiscZero ) shows your Ironwood deposit is in the chain the light client follows • Base checks the proof and never sees a Zcash txid, note or address 🏦 Borrow • zZEC is minted straight into a @Morpho market as your collateral • Borrow USDC from a fresh account, with gas sponsored • Close from collateral, and your ZEC comes back shielded The ZEC sits in a 3-of-5 FROST vault, and every payout is proven on Base. 🔄 Swap Lock USDC, a maker pays you shielded ZEC, and the USDC is released only on a zero-knowledge proof of that payment. No signer takes part in the trade. ✅ What's real • A full live run on Base Sepolia and Zcash testnet on Oct 27: deposit, borrow, close, payouts • Leak scan: none of the runs' 181 Zcash identifiers in the deployment's events or calldata • 800+ Solidity and 600+ Rust tests Testnet only, not audited. MIT. 🧭 Next: I plan to pull the light client and the proofs out into an open library, so any EVM app can verify Zcash on its own. I think cross-chain ZEC needs this layer. Curious what you think. Live run (3:55) → youtu.be/iyXiao54KWk Replay in your browser → zecured.vercel.app/app/ Code → github.com/Himess/zecured Built solo in October. Thanks @zksnarks_ for ZECATHON.
19
6
1
54
3,828
Your AI agent knows your life. The chain shouldn't. Ghost Mode gives your PayBox agent a private USDC balance on Base. Shield once, then pay people, addresses or x402 APIs without exposing your wallet. Private by default. Provable on demand. @moonpay x PayBox hackathon
7
1
1
13
1,164
Live on Base mainnet: GhostPool 0x314EAAdE3E1a42627b5D2c6b1f87D0bbd67B8367 Verifier 0x6f197e0b8Adf9D5984b837be76e31De7ADfA18C1 Built for the @moonpay x PayBox hackathon. Ghost Mode for PayBox.
1
104