Roadmap
Privacy for Elysium. Fair launches nobody can snipe, and trading nobody can trace.
Live on testnet
What Cloak does today
- Sealed-bid token launches. Everyone bids privately, everyone pays one fair price, and liquidity is locked from day one.
- Private balances. Shield HYPE, USDC and launch tokens, then swap, send and withdraw without linking your wallet.
- Batch trading. Orders are grouped and settled at one price, so single trades can't be front-run or traced.
- Payment links. Send money as a link, split it into shares, or request a payment.
- Receive addresses. A normal address anyone can pay, from a wallet or an exchange, that lands in your private balance. Bridging in from 20 chains through Relay comes with mainnet.
- Private bids. Bid in a launch straight from your private balance.
- Sealed NFT drops. Mint without gas wars, auction NFTs you already own, and sell whitelist spots fairly.
- Uniswap v4 launches with creator fees and anti-snipe protection.
- For builders. A TypeScript SDK and an MCP server so AI agents can use Cloak.
- .ely names. Withdraw to a name instead of an address, and see names across the app.
Next
Mainnet on Elysium
- Built on Gloam's live vault. HYPE and USDC sit in Gloam's main vault, on Gloam's audited code and final ceremony keys. Cloak's launch and ecosystem vaults are Cloak's own.
- Deposit caps that grow with Gloam. They start small. Bigger deposits, trades and bids go in parts automatically, so the caps never limit what you can do.
- External security audit of Cloak's own contracts, then higher bid caps.
- Every contract source-verified, with a public 3-day delay on loosening any rule.
After mainnet
Growing the private layer
- $CLOAK buyback. Half of Cloak's revenue buys back $CLOAK, and half of that is burned, by a contract anyone can check.
- xStocks. Tokenized stocks, held and traded privately.
- Graduation. When Gloam lists a token from Cloak's vaults, its holders move their private balances across, privately.
- Spicenet. A second way to bridge into your private balance, next to Relay.
- GLOAK. An experiment: a token that can only ever be held privately.
- Partner launchpads. A shared private vault for tokens from other Elysium launchpads, so their users get the same privacy.
- Creator dashboard and launch pages that keep working after a launch ends.
- Private holder proofs. Prove you hold a token without revealing your wallet.
- Notifications for bids, fills and claims.
- Cloak's own Telegram helper bot. A helper in t.me/cloakdesk that answers questions from Cloak's docs, removes scams and leaked seed phrases, welcomes people, saves bug reports, posts launch and GLOAK activity, and gives the team a daily report. Built as its own service.
- A team workspace on Slack. Shared channels with partners like Gloam, and alerts in one place: the keeper's health and gas, site deploys, test runs, and partner changes such as new vault limits.
- More chains, one site. When Cloak goes beyond Elysium, every network lives at one address with a network picker in the header, instead of a site per chain.
- A stricter security policy on the claim page. The page that opens a payment link will only be allowed to talk to Cloak's own servers and the chain, so even an injected script couldn't send a claim code anywhere else. Tested with every wallet connection before it goes live.
- A multisig for Cloak's owner wallet. Cloak's rules, the vault guards, the trade fee and GLOAK's admin move to a multisig once one runs on Elysium (Safe isn't on the chain yet). Each handover is two steps and never touches users' funds.
- Run-your-own keeper and relayer, so anyone can operate the infrastructure.
- Compliance tools. Sanctions screening, and proofs that private funds are clean without revealing whose they are.
- More names everywhere, so payment links and agents show who sent and claimed.