Wrenfield Privacy Pool
Shielded pool with association-set proofs.
A shielded pool where withdrawals prove membership in a deposit Merkle tree and in a chosen association set, using zero-knowledge proofs verified on-chain.
- Ecosystem
- Ethereum
- Category
- Privacy
- Languages
- Solidity, Circom
- Launched
- Apr 2026
Grade BB · Elevated risk
Moderate risk; several areas need remediation.
+0.3 since Apr 2026 · ±0.0 since Jul 2026
Quantix Protocol Research · as of 24 Oct 2026 · About this data
Risk Index
How the score is built
| Component | Weight | Value | Points | Gap |
|---|---|---|---|---|
| Code Security | 30% | 74 | 22.2 | −7.8 |
| Operational Security | 20% | 72 | 14.4 | −5.6 |
| Governance Risk | 15% | 74 | 11.1 | −3.9 |
| Economic Security | 15% | 76 | 11.4 | −3.6 |
| Infrastructure Resilience | 10% | 72 | 7.2 | −2.8 |
| Transparency | 10% | 70 | 7.0 | −3.0 |
| Quantix Risk Index | 100% | 73.3 | −26.7 |
| Component | Wrenfield Privacy Pool |
|---|---|
| Code | 74 |
| Operational | 72 |
| Governance | 74 |
| Economic | 76 |
| Infrastructure | 72 |
| Transparency | 70 |
Grade scale
- AAA90–100
- AA85–89.9
- A80–84.9
- BBB75–79.9
- BB70–74.9
- B65–69.9
- CCC60–64.9
- CC55–59.9
- C50–54.9
- D0–49.9
Score history
7 monthly snapshots
| Period | Quantix Risk Index |
|---|---|
| Apr ’26 | 73.0 |
| May ’26 | 73.0 |
| Jun ’26 | 73.0 |
| Jul ’26 | 73.3 |
| Aug ’26 | 73.3 |
| Sep ’26 | 73.3 |
| Oct ’26 | 73.3 |
20 Jul 2026
Disclosure
Circuit documentation published
Constraint documentation and test vectors released.
- Transparency+3
Risk factors
HighCode SecurityProfile analysis
Under-constrained circuit risk
A missing constraint in membership or nullifier logic could allow double withdrawals without detection.
MediumTransparencyProfile analysis
Unpublished setup transcript
Users cannot verify that toxic waste was discarded.
Recommendations
Code Security: 74 → 82
Formal circuit verification
Check constraint completeness with a formal tool and publish results.
+2.4
→ 75.7
Transparency: 70 → 82
Publish ceremony transcript
Release contributions and verification scripts.
+1.2
→ 74.5
Analysis
Contract, governance and operations
Contract analysis
- Source
- Verified
- Upgradeability
- Immutable pool; association-set registry upgradeable
- Administrative control
- Association-set curators (multisig)
- Enforced delay
- None identified
- External dependencies
- Trusted setup output; Association-set curators
- PassVerifier contract. Groth16 verifier generated from published circuits.
- CautionTrusted setup. Ceremony transcript not yet published.
- CautionCircuit review. Circuits reviewed manually; no formal constraint verification.
Governance exposure
Moderate
Curators decide which deposits appear in published association sets.
Operational resilience
Adequate
Relayers submit withdrawals; curator process documented.
Monitoring
Monitoring history
- 5 Jan 2026InformationalAssociation set root updatedGovernance · AssociationSetsResolved
Research assessment
No Quantix assessment of Wrenfield Privacy Pool has been published. Its security findings are represented by the contract-analysis signals above: 0 failed and 2 cautionary.
Research
Relevant research
Architecture
System components
- Pool
- Deposits, commitments and withdrawals
- Verifier
- On-chain Groth16 verification
- Circuits (Circom)
- Membership and nullifier constraints
- AssociationSets
- Published subset roots
Turn risk factors into a remediation plan.
A research assessment traces each weakness to code, configuration or process, and verifies the fix before the score moves.