Alpha — under active development

Desktop wallet for private transactions via RAILGUN.

Tor-first, hardware-wallet ready, and built so nothing ever phones home.

Install from source View on GitHub
  • macOS
  • Linux
  • Windows

Why RailOxide

Privacy that holds up under the hood

Every default is chosen to minimize the metadata you leak — not just to look private on the surface.

Zero telemetry

Fully open source with zero telemetry and zero home calls. Nothing phones home, and you can audit every line.

First-class Tor

A bundled Tor client routes wallet HTTP and RPC traffic by default — no system Tor daemon required.

Indexed POI privacy

Indexed POI artifacts let the wallet read proof-of-innocence locally, so UTXO spend intent never leaks to a POI proxy operator.

Hardware wallets

Ledger and Trezor support for public accounts, plus deterministically derived 0zk accounts — keys are never stored in the app.

Aggressive batching

Requests are batched aggressively to reduce RPC throttling, with resilient connection management to public broadcasters.

Leak-free pricing

Decentralized price discovery via on-chain Chainlink oracles — used for display and for filtering suspicious broadcasters.

A look inside

The wallet, screen by screen

A native desktop app built with Rust and GPUI. Click any screen to enlarge.

Unlock the encrypted wallet vault to view balances and history. Encrypted vault 0zk private balances with shield, send, and unshield actions. Private balances Public account balances alongside your private 0zk wallet. Public account Live public broadcaster network with fees and reputation. Broadcaster monitor First-class integrated Tor routing for wallet RPC traffic. Built-in Tor Move funds from a private 0zk balance back to a public account. Unshield Review and authorize a private transaction before broadcast. Authorize spend Resilient submission through the public broadcaster network. Broadcasting Ledger and Trezor support for public and derived 0zk accounts. Hardware wallet Create or import a wallet into the encrypted local vault. New wallet Pair the wallet with a dApp over WalletConnect. WalletConnect pair Review incoming WalletConnect signing requests. WalletConnect Manage active WalletConnect dApp sessions. WC sessions Network mode, POI source, RPC endpoints, and infrastructure. Settings

Privacy model

You choose the posture

Metadata privacy depends on the network mode and POI source. RailOxide defaults to the strongest combination and makes the trade-offs explicit.

Recommended default

Built-in Tor + indexed POI

Wallet traffic routes through the bundled Tor client, and POI reads use signed local artifacts — blinded commitments never go to a POI proxy.

User-controlled

Proxy mode

Routes traffic through your configured proxy. Embedded Waku libp2p transports are disabled to prevent proxy bypass.

Privacy-degraded

Direct mode

Sends requests over the normal network. Use only when you intentionally accept that remote services can see your network address.

Read the full privacy model →

Build it from source

RailOxide is alpha software and installs by building from source. The installer defaults to the latest published release and prompts before touching anything.

curl -fsSL https://raw.githubusercontent.com/triamazikamno/railoxide/main/scripts/install-wallet | bash
Installation guide Browse all docs