Veilpay.

Public ledgers make every payment a broadcast: sender, receiver, and amount are visible to anyone who looks, and reusing one address across protocols lets observers stitch a person's whole financial graph together.

The hard part is spanning chains that agree on nothing (different signature schemes, different privacy primitives, different finality) while keeping signing keys on the device and the experience consumer-grade.

Protocol-specific address isolation: every chain gets its own lane, and EIP-5564 dual-key stealth addresses issue one-time destinations per payment, so transactions can't be linked back to a single identity. Zero-knowledge circuits (Circom/snarkjs, with pinned and hash-verified prover assets) prove a payment is valid without revealing its contents.

Private XLM shielding runs natively on Stellar mainnet, and all signing material stays on-device in secure storage. Around the wallet sits a merchant stack (Express, Prisma, PostgreSQL, Redis queues) serving invoices, HMAC-signed webhooks, and an RPC proxy, with a background indexer reconciling on-chain state.

Live at veilpayapp.com: stealth payments across 7+ chains, with private XLM generally available on Stellar mainnet and Monero, Zcash, and Midnight staged as experimental integrations.

Picked up a special mention at Stellar Build Station. The public monorepo carries the full stack (mobile app, merchant API, indexer, circuits) and states the external audit as pending rather than claimed. Private by default; honest by design.