zkPULSE is built with security and privacy as the top priorities:

• zkSNARKs - Complete anonymity through zero-knowledge proofs
• Non-custodial - You maintain full control of your funds
• No data collection - No analytics, tracking, or user data storage
• Client-side only - All sensitive operations happen in your browser

• ✅ Based on battle-tested Tornado Cash contracts
• ✅ OpenZeppelin ReentrancyGuard protection
• ✅ Merkle tree verification for deposits
• ✅ Nullifier hash checking prevents double-spending
• ✅ Immutable contracts on PulseChain blockchain

• ✅ Self-hosted dependencies (no CDN compromise risk)
• ✅ SRI (Subresource Integrity) verification
• ✅ No server-side storage of user data
• ✅ Open source and auditable

Automated Method:

# Clone the repository
git clone https://github.com/proestever/zkPULSE_OFFICIAL.git
cd zkPULSE_OFFICIAL

# Run verification script
bash verify-deployment.sh https://zkpulse.app

Manual Method:

# Check file hashes
sha256sum -c HASHES.txt

# Compare with hosted site
curl https://zkpulse.app/index.html | sha256sum

All smart contracts are verified on PulseScan and match this repository:

You can view the source code directly in your browser:

1. Open Browser Developer Tools (F12)
2. Go to Sources or Debugger tab
3. View all JavaScript and HTML files
4. Compare with GitHub repository

Check what data is being sent:

1. Open Developer Tools (F12)
2. Go to Network tab
3. Use the application
4. Verify:
   • ❌ No analytics requests (Google Analytics, etc.)
   • ❌ No tracking pixels
   • ✅ Only blockchain RPC calls
   • ✅ Only PulseScan API for public stats

• ❌ No analytics or tracking
• ❌ No IP addresses logged
• ❌ No wallet addresses stored on server
• ❌ No deposit commitments saved server-side
• ❌ No withdrawal information tracked
• ❌ No cookies or session tracking

• ✅ Deposit notes generated client-side only
• ✅ Notes stored only in your browser (localStorage)
• ✅ Server cannot access your funds
• ✅ Server never sees your deposit secrets
• ✅ Complete zero-knowledge privacy

1 PLS Pool:      0xad04f4Eef94Efc3a698e70324b3F96e44703f70B
1M PLS Pool:     0x65d1D748b4d513756cA179049227F6599D803594
10M PLS Pool:    0x21349F435c703F933eBF2bb2A5aB2d716e00b205
100M PLS Pool:   0x2443ccEef2D2803A97A12f5A9AA7db3BEc154B73
1B PLS Pool:     0x282476B716146eAAbCfBDd339e527903deFD969b

All contracts are:

• Verified on PulseScan
• Immutable (cannot be changed)
• Non-upgradeable
• Based on audited Tornado Cash code

✅ Privacy Audit - No tracking or data collection ✅ Smart Contract Security - ReentrancyGuard, proper validation ✅ Third-party Dependencies - Minimal and verified ✅ XSS Protection - Input sanitization ✅ Secret Management - No private keys in code ✅ Infrastructure - Self-hosted dependencies with SRI

See HASHES.txt for file integrity verification.

If you discover a security vulnerability, please email: N/A use tele

Please do NOT open public issues for security vulnerabilities.

We appreciate responsible disclosure and will acknowledge security researchers.

• Full Documentation
• File Verification Hashes
• Verification Script
• GitHub Repository

Don't trust us - verify everything yourself!

1. Read the source code
2. Verify file hashes
3. Check smart contracts on PulseScan
4. Monitor network requests
5. Compare hosted site with GitHub

Complete transparency is our commitment to users.