Documentation

Technical architecture, privacy model, and implementation details.

Overview

Pathera is a self-custodial Solana wallet with built-in privacy through balance-based internal routing.

Solana transactions are permanently recorded on a public ledger. Anyone can trace the flow of funds between addresses. Pathera addresses this by distributing your balance across multiple self-controlled addresses and selecting transaction inputs in ways that break observable patterns.

Funds never leave your control. Pathera does not pool user funds or require third-party custody.

Quick Summary

•Self-custodial Solana wallet with standard BIP-39 seed phrase recovery

•Privacy via balance-based internal routing across derived sub-addresses

•No external mixers, no liquidity pools, no third-party custody

•Not perfect anonymity. State-level forensic analysis is not the target threat model

Key Terms

Sub-address

A deterministically derived Solana address from your seed phrase. Pathera manages multiple sub-addresses internally.

Unified balance

The single balance displayed in your wallet UI. Internally, funds are distributed across sub-addresses.

Internal routing

The process by which Pathera selects transaction inputs from sub-addresses to break linkage patterns.

Timing variance

Small, bounded delays added between transactions to prevent timing-based clustering.

Linkability

The ability for an observer to connect separate transactions to the same entity. Pathera aims to reduce this statistically.

Threat model

The assumptions about attacker capabilities and privacy goals. Pathera targets casual to moderate on-chain analysis.

Architecture

Seed & Key Derivation

Standard BIP-39 / BIP-44 derivation

  • •12 or 24-word seed phrase
  • •Deterministic sub-address generation

Address Set

Multiple derived sub-addresses

  • •All controlled by you
  • •No external parties involved

Unified Balance View

Single balance displayed in UI

  • •Sum of all sub-address balances
  • •Internal distribution is transparent to user

Transaction Builder

Input selection and routing logic

  • •Context-aware input selection
  • •Variable timing and amount heuristics

AI-assisted analysis

Pathera AI provides portfolio-level insights, token risk assessment, and on-chain pattern interpretation to support user decision-making.

  • •Non-custodial: AI does not execute transactions or hold funds
  • •Advisory role: Recommendations do not override user control
  • •Privacy-preserving: Analysis occurs without sharing transaction patterns externally

Privacy Model

Pathera makes behavioral clustering more costly and less reliable at scale. It does not provide cryptographic anonymity or hide transaction data from the public ledger.

What we protect against

  • •Casual observers attempting address linking
  • •Basic clustering heuristics used by standard blockchain explorers
  • •Simple pattern recognition across transaction history

What we do not target

  • •State-level actors with unlimited graph analysis resources
  • •Forensic analysis at KYC endpoints where identity is disclosed
  • •Device compromise or seed phrase exposure

Privacy is probabilistic

Consistent usage patterns over time can reduce anonymity. Advanced graph analysis with sufficient computational resources may correlate transactions.

Routing & Balances

The core privacy mechanism relies on how funds are distributed and selected for outgoing transactions.

Step 1: Unified balance

User sees one total balance in the wallet interface. This is the sum of funds across all derived sub-addresses.

Step 2: Internal distribution

Internally, the balance is fragmented across multiple sub-addresses. Larger balances are split into smaller amounts to increase routing flexibility.

Step 3: Routed spend

When sending funds, the wallet selects inputs from sub-addresses using context-aware heuristics and timing variance to break linkage patterns.

Implementation Notes

The following describes high-level implementation details. Specific parameters and algorithms are not disclosed to prevent exploitation.

Balance fragmentation strategy

Large balances are split into smaller chunks across sub-addresses. This increases routing options and prevents amount-based correlation. Fragment sizes vary based on total balance and usage patterns.

Timing variance (bounded)

Small delays are introduced between related transactions to prevent timing-based clustering. These delays are bounded to avoid significant UX degradation.

Routing heuristics (context-aware)

Input selection evaluates recent usage history, current balance distribution, and transaction metadata to choose optimal routing paths. Criteria are non-deterministic.

Rebalancing behavior

The wallet periodically rebalances funds across sub-addresses to maintain routing flexibility. Rebalancing can also be triggered by specific events or usage patterns.

Threat Model

Assumptions

  • •Solana blockchain data is fully public and permanent
  • •User controls their seed phrase and device security
  • •Network-level traffic metadata is not protected

Adversary capabilities

  • •On-chain analyst with graph clustering tools
  • •Access to blockchain explorers and indexing services
  • •Moderate computational resources for pattern matching

Out of scope

  • •KYC services where user identity is disclosed
  • •Malware or device compromise
  • •Seed phrase exposure or theft
  • •Network traffic analysis or IP-based tracking

Limitations

Pathera is designed for practical privacy against common on-chain analysis. It is not a perfect anonymity system.

  • •KYC endpoints: Interactions with services requiring identity disclosure will link your activity at those points
  • •Repeated patterns: Consistent transaction amounts, timing intervals, or unique behaviors can leak information over time
  • •High-frequency activity: Rapid sequential transactions reduce routing effectiveness and increase correlation risk
  • •Fixed amounts: Sending exact amounts repeatedly creates identifiable signatures
  • •Bridge and CEX deposits: Centralized exchange and bridge deposits often require identity verification
  • •Graph analysis: Advanced forensic analysis with significant resources can reduce anonymity through probabilistic correlation

FAQ

Is this a mixer?

No. Traditional mixers pool funds from multiple users and redistribute them. Pathera only uses addresses you control. Your funds never mix with other users.

Do my funds leave my wallet?

No. All sub-addresses are derived from your seed phrase and are under your exclusive control. There is no third-party custody at any point.

Can I use it like a normal Solana wallet?

Yes. Pathera functions as a standard Solana wallet. You can send, receive, stake, and interact with dApps. The privacy features operate transparently in the background.

Does it guarantee anonymity?

No. Pathera provides probabilistic privacy, not guaranteed anonymity. It makes linking transactions more difficult and expensive, but determined adversaries with sufficient resources may still correlate activity.

What reduces privacy over time?

Repeated patterns in transaction amounts, timing, or behavior. Interacting with KYC services. High-frequency activity that limits routing options. Fixed or predictable transaction values.

When is beta?

Public beta is scheduled for Q2 2026. Early access is currently invite-only while we finalize security review and testing.

Beta Status

Private betaTargeting Q2 2026

Pathera is currently in private beta. The routing system is functional and undergoing final security review. Public beta will launch with phased rollout in Q2 2026.

Request early access

We will only use your email for beta updates. No marketing or third-party sharing.