Ophis

Your balance, privately.

RAILGUN wallet and direct USDC/WETH swaps. Public orderbook orders remain separate.

Ready to start

Create, restore or unlock

Use a dedicated Railgun recovery phrase. Never enter your MetaMask or hardware wallet recovery phrase.

Password (at least 12 characters) Railgun recovery phrase I saved my Railgun recovery phrase offline.

Private balance

Balances are incomplete until the initial history sync finishes.

Syncing…

Shield funds

Shielding uses your public wallet. Railgun fees apply. New deposits usually remain ShieldPending for about one hour while Railgun validates them. Use Refresh balances afterward; only Spendable funds can pay for private swaps.

Deposit ETH directly in one wallet transaction, with no token approval or separate wrapping step. Railgun holds it privately as WETH. Keep ETH in your public wallet for gas.

Deposit asset Deposit amount

Private swap

Token to sell / withdraw Amount to sell / withdraw

The broadcaster fee comes from the same private balance. Max budgets extra room for gas price changes and shows the adjusted trade amount for review. This headroom can increase the committed broadcaster fee.

Sell WETH → receive USDC. Enter the amount of WETH to sell.

USDC ↔ WETH through Uniswap v3. 0.5% slippage limit. Ophis charges 1 bp; Railgun and broadcaster fees are additional. This route does not use the public orderbook.

The DEX trade and its amounts are public and can be sandwiched within the slippage limit. The Ophis fee identifies this route. Use a trusted RPC: simulation reveals the signed batch to it.

Private quotes connect to broadcasters automatically.

Withdraw

Withdrawing makes the destination and amount public.

Public recipient

Recovery

Check a temporary account after failed or interrupted execution. Recovery sends from that account and requires ETH for gas. Funding it from your public wallet creates a public link.

Temporary account index Keep the displayed recovery account index: any public leftovers remain there after clearing the pending swap.

Canceling invalidates the old swap authorization; it does not move or recover tokens. The temporary account needs ETH for gas. Funding it from your public wallet creates a public link.

Resuming reuses the saved withdrawal proof so it cannot withdraw twice. Your public wallet pays gas, the committed broadcaster fee still applies, and the transaction becomes linked to that wallet.