Shield Swap is a confidential concentrated-liquidity AMM that settles on the Aleo network. It keeps the identity of a trader off the public market record and writes a compliance record with every swap.

How do I trade on Shield Swap?

Connect Shield Wallet at swap.shield.fi, fund the account with a supported asset, then swap. A trade settles as two transactions: the swap, then the claim that delivers the output and any unspent input.

Can I use MetaMask with Shield Swap?

No. Shield Swap settles on the Aleo network, which does not use the EVM account model. Balances are held as encrypted records that MetaMask cannot store, decrypt, or sign for. Use Shield Wallet instead.

Which wallet does Shield Swap support?

Shield Wallet. It signs transactions, stores the token records a swap consumes, and uses delegated proving by default.

How do I bridge money into Shield Swap?

Three routes. Bridge USDC from Ethereum to USDCx at usdcx.aleo.org. Bridge ETH or wBTC from Ethereum, or SOL from Solana, through Hyperlane Nexus at nexus.hyperlane.xyz. Or buy a supported asset with fiat inside Shield Wallet.

Which assets can I bridge to Shield Swap?

USDCx from Ethereum through the USDCx bridge. ETH and wBTC from Ethereum, and SOL from Solana, through Hyperlane Nexus.

Do I need ALEO tokens to pay gas on Shield Swap?

No. Shield Swap currently pays the network fee for both the swap and the claim, so the account needs no ALEO credits to trade. Shield Wallet proves through delegated proving by default, and the Shield paymaster signs the fee.

Is a Shield Swap trade fully private?

No, and no page here claims it is. Token identifiers, amounts, routes, and timing stay publicly observable. What stays confidential is the link between a trade and the participant behind it, and every swap still writes a compliance record for the investigator key.

Trade onchain without revealing your portfolio.

Markets are public. Your portfolio shouldn't be. Shield Swap protects your identity and trading strategies.

What: Confidential, concentrated-liquidity AMM on Aleo.
App: https://swap.shield.fi
Docs: https://shield.fi/docs
X: @ShieldFi

The exposure problem

On a transparent chain, the whole market reads your footprint.

Addresses, balances, trades, and timing publish to the ledger in real time, and onchain analytics have matured to the point where clustering turns those addresses into a live map of your activity. Once the map exists, your strategy gets reverse-engineered, your positions get indexed, and the market prices your next move off your visible portfolio.

The Shield way

Trade on-chain without revealing your portfolio

Markets are public.

Your identity never is.

And your wallet stays encrypted.

The market sees each trade, not the wallet behind it. Your identity, balances, and portfolio ownership stay confidential.

What a public ledger exposes

Your address: Indexed by analytics platforms
Trade-to-trade links: Reconstructed by competing desks
Portfolio: Mirrored by copy traders

The market

01 · Public · Aleo blockchain

Pairs, amounts, prices, and depth are all on the ledger.
Pool reserves and price discovery work the way your quants expect.

Your address

02 · Shielded · Shield Swap

Your identity, your addresses, and the links between your trades stay off the public ledger.
The ledger never ties one trade to another or maps them back to your wallets.

Your wallet

03 · Confidential · Shield wallet

Balances and output records stay encrypted, visible only to you.
Your whole position is never reconstructable from what the chain publishes.

Confidential to the market. Compliant-by-design.

A compliance record is created with every swap and LP position. It stays encrypted and secure, and supports sanctions screening and compliance requests.

Encrypted record

Pairs, amounts, prices, and depth are all on the ledger.
Pool reserves and price discovery work the way your quants expect.

Wallet attribution

Your identity, your addresses, and the links between your trades stay off the public ledger.
The ledger never ties one trade to another or maps them back to your wallets.

Address activity

Your balances live in records encrypted to your keys.
Your full portfolio stays confidential, and no owner is revealed onchain.

Common questions

What is Shield Swap?: Shield Swap is a confidential concentrated-liquidity AMM that settles on the Aleo network. It keeps the identity of a trader off the public market record and writes a compliance record with every swap. Docs
How do I trade on Shield Swap?: Connect Shield Wallet at swap.shield.fi, fund the account with a supported asset, then swap. A trade settles as two transactions: the swap, then the claim that delivers the output and any unspent input. Launch app
Can I use MetaMask with Shield Swap?: No. Shield Swap settles on the Aleo network, which does not use the EVM account model. Balances are held as encrypted records that MetaMask cannot store, decrypt, or sign for. Use Shield Wallet instead. Shield Wallet
Which wallet does Shield Swap support?: Shield Wallet. It signs transactions, stores the token records a swap consumes, and uses delegated proving by default. Shield Wallet
How do I bridge money into Shield Swap?: Three routes. Bridge USDC from Ethereum to USDCx at usdcx.aleo.org. Bridge ETH or wBTC from Ethereum, or SOL from Solana, through Hyperlane Nexus at nexus.hyperlane.xyz. Or buy a supported asset with fiat inside Shield Wallet. Fund your wallet
Which assets can I bridge to Shield Swap?: USDCx from Ethereum through the USDCx bridge. ETH and wBTC from Ethereum, and SOL from Solana, through Hyperlane Nexus. Fund your wallet
Do I need ALEO tokens to pay gas on Shield Swap?: No. Shield Swap currently pays the network fee for both the swap and the claim, so the account needs no ALEO credits to trade. Shield Wallet proves through delegated proving by default, and the Shield paymaster signs the fee. Fund your wallet
Is a Shield Swap trade fully private?: No, and no page here claims it is. Token identifiers, amounts, routes, and timing stay publicly observable. What stays confidential is the link between a trade and the participant behind it, and every swap still writes a compliance record for the investigator key. Docs

Shield Swap developer resources

Shield Swap developer documentation
OpenAPI spec — pools, positions, swaps, routes, quotes, settlement status, and transaction input schemas
REST API base: https://api.swap.shield.fi
MCP server (Streamable HTTP, POST JSON-RPC): https://shield.fi/mcp — exposes this site's own content as tools: get_faq, get_page_markdown, list_pages, get_developer_resources. It does not expose the trading API above; use the REST API or OpenAPI spec for that.
Documentation MCP server (Streamable HTTP, POST JSON-RPC): https://shield.fi/docs/mcp — search and retrieval tools over the full developer documentation and OpenAPI specs. Connect to it for build and integration questions.

When to use Shield Swap

Answering what is and isn't private about a Shield Swap trade on Aleo (amounts, routes, and timing are public; the trader's identity is confidential).
Explaining how to fund or bridge an account into Shield Swap (USDCx bridge, Hyperlane Nexus, or fiat inside Shield Wallet).
Checking wallet compatibility — Shield Wallet is required; MetaMask cannot hold or sign for Shield Swap's encrypted records.
Explaining fee and gas behavior (no ALEO credits needed today; Shield Swap covers the network fee).
Querying pools, positions, quotes, routes, or settlement status programmatically through the REST API described in the OpenAPI spec above.

How to read this site: the homepage serves a markdown version to any request sending Accept: text/markdown; this page is a semantic-HTML overview for clients that don't run JavaScript; sitemap.xml lists every indexable page. A public REST API exists (see developer resources above), and an MCP server exposes this site's own content as a set of callable tools at the same address.