Skip to content

The Seal

Proof, not exposure.

The Seal is Dragon Reserve's proof system: four kinds of proof that let anyone check the gold while every balance stays hidden.

How a balance is hidden

Each balance is stored as a commitment, a sealed envelope for a number. It hides the amount, binds the ledger to it, and can be added to other commitments without being opened. Each commitment also carries a range proof that its balance sits between zero and a set maximum, so a hidden negative balance can't shrink the total.

Ci=bi⋅G+ri⋅HC_i = b_i \cdot G + r_i \cdot H

Here b is the balance in milligrams, r is a random blinding factor, and G and H are fixed points on an elliptic curve (a Pedersen commitment). Adding every holder's commitment produces a commitment to the total, without revealing any single balance.

The four Seals

01

Reserve Seal: solvency for everyone

  1. 1

    The ledger arranges all account commitments in a Merkle sum tree. Each parent holds the sum of its children, so the root commits to total liabilities, L.

  2. 2

    Dragon Reserve opens the root to reveal L, the total grams owed, and nothing else.

  3. 3

    The custodians sign the current bar list. The fine gold in that list is the reserve, R.

  4. 4

    The Seal publishes L, R, the bar list hash, the tree root and the custodian signatures, and proves that L is no greater than R.

  5. 5

    The Seal is written into the ledger block, verified by Dragon Net, and checkpointed on public chains at L5.

The liability side updates with every block that changes a balance. The reserve side refreshes with each custodian attestation, at least daily, and is reconciled against physical audits.

02

Inclusion Seal: proof that you are counted

  1. 1

    Your app receives the path from your leaf to the published root.

  2. 2

    It opens your own leaf with your balance and blinding factor, then recomputes the path.

  3. 3

    It checks that the root matches the latest Reserve Seal and that the Seal is anchored on public chains.

The siblings on the path are commitments, so the path reveals nothing about other holders. Leaves are reshuffled every epoch, so paths cannot be linked over time. Every transaction also returns a signed receipt: if your app ever fails this check, that receipt proves you were left out.

Preview with illustrative data. Live at launch.

03

Holder Seal: one fact, shared on your terms

  • Facts at launch: balance of at least a chosen amount; that amount held since a chosen date; verified holder, without identity.

  • How it is built: the app produces a zero-knowledge proof that some leaf in a recent root belongs to your key and satisfies the fact. The verifier learns the fact and its time, not the amount and not which leaf.

  • Safe to share: each Seal names its audience and an expiry, so a forwarded Seal fails and an old one lapses. Two Seals from the same holder cannot be linked unless the holder chooses.

  • How it travels: as a link or QR code, verified on a public page or through an open API.

Preview with illustrative data. Live at launch.

04

Audit Seal: exactly what a named party may see

  • A holder can grant a viewing key scoped to one account and one period, for an accountant or a lender.

  • Where the law requires it, Dragon Reserve discloses specific records to a regulator under that legal process.

  • Every disclosure is logged on the ledger, so access itself can be audited later.

Seal Studio

Your balance · only you see this

hidden

The fact to prove

Demo only. No real data leaves your browser.

Preview with illustrative data. Live at launch.

Check a Seal someone sent you.

Demo verifier. Seals created in the studio above will verify here.

Building blocks

Building blocks: Component, Role, Why this choice
ComponentRoleWhy this choice
Pedersen commitmentsHide each balance while allowing sumsStandard, fast and additive
Range proofs (Bulletproofs)Show balances are non-negative and prove thresholdsShort proofs with no trusted setup (Bulletproofs (opens in a new tab))
Merkle sum tree of commitmentsProduce total liabilities and inclusion pathsPrivacy-preserving solvency proofs studied since 2015 (Provisions (opens in a new tab))
Zero-knowledge membership proofsHolder Seals that hide which accountA transparent proof system with no trusted setup
Signatures and receiptsCustodian attestations and transaction receiptsMake any omission provable
Dragon Net, L2 to L5Independent verification and public checkpointsTamper-evident history on Bitcoin and Ethereum