← Back
Celano
PRIVATE YIELD · ZAMA

Confidential Yield Treasury on Zama Protocol

Litepaper • Zama Developer Program Mainnet Season 3

The Problem

Public blockchains were designed for radical transparency. Every balance, every position, every strategy is visible to anyone. This creates a fundamental barrier for real-world finance.

Institutions cannot deploy capital without leaking strategy. Individuals cannot earn yield without broadcasting their entire financial life. MEV, front-running, and competitive intelligence extraction become inevitable.

The Opportunity

Fully Homomorphic Encryption (FHE) via Zama’s fhEVM changes the equation. Smart contracts can now compute on encrypted data. Balances and allocations can remain private while still participating in onchain protocols.

The first live examples (cUSDC wrappers + confidential yield vaults on Morpho) prove the primitive works. What is missing is a production-quality interface that makes private yield usable and composable.

The Solution: Celano

Celano is a confidential treasury for your encrypted capital.

  • Shield public tokens into official ERC-7984 confidential wrappers using Zama’s on-chain Registry.
  • Deposit via real confidentialTransferAndCall — the ciphertext is the only thing that ever touches the vault.
  • Positions live on-chain as euint64 handles. Only the owner can decrypt.
  • Withdraw calls back through the confidential token — privacy preserved on the way out.
  • The public sees only ciphertext and aggregate activity.

Architecture

Celano is deliberately thin. We do not mint new tokens. We compose using the official primitives:

  • Official Zama Wrappers Registry — discover and use canonical ERC-7984 tokens.
  • ConfidentialYieldVault — minimal receiver contract implementing onConfidentialTransferReceived.
  • Zama SDK + Relayer — client-side encryption and user decryption flows.

Privacy Model

Every sensitive value is an encrypted handle. Access Control Lists (ACL) are granted explicitly:

  • Contract can operate on the ciphertext.
  • Only the position owner can request decryption.
  • No plaintext events are ever emitted for user amounts.

Why This Wins for Composable Privacy

Previous seasons saw many isolated confidential payments and airdrops. Season 3 explicitly rewards composability. Celano takes the newly live confidential DeFi primitives (wrappers + yield) and places them behind a production-grade interface with rigorous, user-controlled privacy UX.

Interface

The product is a single, data-dense treasury dashboard — the language is institutional, not decorative:

  • Encrypted Value — your aggregate position, shown as ciphertext until you decrypt it.
  • Positions — a blotter of encrypted holdings, including the live on-chain sharesOf handle.
  • Deposit — strategy selection, amount, and the real seal-and-deposit flow.
  • Ledger — every action (seal, permit, decrypt, withdraw) with on-chain transaction links.

The name and the seal metaphor are the only brand notes; everything else is optimized for trust and scannability. Typography pairs Space Grotesk (display) with EB Garamond for long-form documents like this one.

Status & Roadmap

Submitted for Zama Mainnet Season 3 (July 2026). Real client-side FHE encryption + live confidentialTransferAndCall + on-chain sharesOf reads + grant permit flow on Sepolia.

This document is a litepaper for the Zama Developer Program. Not financial advice.
Built with the official Zama stack. No mocks where it matters.