Every Solana transaction is public by default. Send 500 USDC to a friend, and anyone with a block explorer can trace that payment back to your wallet, see your full balance, and map your entire transaction history. Solflare just shipped its answer to that problem: the Privacy Aggregator Layer, or PAL, the first privacy routing system built directly into a self-custodial Solana wallet.
The first feature under PAL is Private Send. It is available now in both the Solflare mobile app and browser extension for the wallet's 4 million active users.
What PAL Actually Does
The Privacy Aggregator Layer applies the same mechanics that DEX aggregators use for price execution, but for privacy instead of pricing. Where Jupiter routes your swap through the best liquidity pool, PAL routes your transfer through the best available privacy infrastructure.
The launch partner is Houdini Swap, a non-custodial privacy-focused swapping service. Solflare plans to open PAL to additional qualified, intent-based privacy protocols over time, creating a competitive marketplace for privacy execution.
Filip Dragoslavic, Solflare co-founder and co-CEO, put it directly: "Privacy in crypto has been fragmented. The Privacy Aggregator changes this." Co-CEO Vidor Gencel added: "No self-custody wallet has aggregated privacy before."
The key word is "aggregated." Individual privacy tools exist. Houdini Swap already had a standalone product. What PAL does is embed privacy routing into the wallet's native Send flow, so users do not need to leave the app, learn a new interface, or trust a separate platform.
How Private Send Works: Step by Step
Private Send is not a mixer. It does not pool your funds with other users in a smart contract. Instead, it routes transfers through Houdini Swap's dual-exchange system to sever the on-chain link between sender and recipient.
Here is the flow:
- Select recipient and amount. The Send flow looks identical to a normal Solana transfer.
- Toggle Private Send on. This is optional. Every transfer gives you the choice.
- Review fees and time estimate. Solflare shows the privacy provider's fees and expected completion time before you confirm. No hidden costs.
- Confirm and send. Your assets are routed through Houdini Swap's intermediary infrastructure.
- Recipient receives funds. Settlement typically completes within minutes. The on-chain record shows no direct connection between your wallet and the recipient's.
The technical mechanism behind Houdini Swap involves two independent exchange steps with a randomly selected Layer 1 acting as a privacy layer between them. The first step converts the asset and severs the connection to the sender's address. The second step operates independently, seeing only the intermediate asset, and delivers the final amount to the recipient. Neither step shares context with the other.
This is categorically different from Tornado Cash-style mixers. Houdini Swap transactions pass AML checks at the entry point. The service is non-custodial and never pools user assets.
Why This Matters: The Payroll Problem, Solved at the Wallet Level
CZ made the case bluntly in February: if a company pays employees in crypto, every coworker can see every other coworker's salary. That is the default behavior on every major blockchain. It applies to any on-chain payment, not just payroll: vendor invoices, rent, freelance work, gifts, donations.
Solflare's PAL addresses this at the most practical layer possible: the wallet itself. Instead of requiring users to find, vet, and use a standalone privacy tool, the privacy option appears as a toggle inside the Send flow they already use every day.
This matters because adoption follows convenience. Privacy protocols that require users to leave their wallet, bridge assets to a separate chain, or interact with unfamiliar smart contracts get used by a small subset of technically advanced users. A privacy toggle inside the default Send screen gets used by everyone.
For Solflare Card holders specifically, this adds a useful layer: you can now top up your card balance or send USDC to another wallet without broadcasting the transfer on-chain. Your card spending is already off-chain (processed via Mastercard), but funding the card was previously visible. Private Send closes that gap.
SpendNode's Take: Privacy Is Infrastructure, Not a Feature
We think PAL is directionally correct and potentially one of the most important Solana wallet updates in 2026. Here is why.
The aggregator model is the right architecture. Solflare is not building its own privacy protocol. It is routing through existing, vetted providers and plans to add more. This means PAL's privacy quality improves over time as better providers enter the market, without Solflare needing to rebuild anything. It is the same reason DEX aggregators won over individual DEXs: let the market compete on execution quality.
The compliance angle is underrated. By partnering with Houdini Swap (which runs AML checks) rather than building a mixer, Solflare sidesteps the regulatory landmine that destroyed Tornado Cash. This is privacy that can survive in a MiCA-regulated Europe and a FinCEN-monitored United States. For a wallet that issues a regulated debit card in the EEA and UK, that distinction is existential.
The missing piece is fee transparency. Solflare itself charges no additional fee for PAL. The cost comes from the privacy provider (Houdini Swap). Houdini's private swaps typically take 15-40 minutes for cross-chain transactions, though Solflare claims settlement within minutes for same-chain Solana transfers. We would like to see explicit fee breakdowns published, both from Solflare and from each provider that joins PAL, so users can compare privacy costs the way they compare swap prices on Jupiter.
The competitive implications are clear. Phantom, Solflare's main Solana wallet rival, does not have anything comparable. Neither does Backpack. If PAL works well and the fee overhead is reasonable, this gives Solflare a genuine differentiation point beyond the debit card.
How PAL Compares to Other Solana Privacy Solutions
Solflare is not the only team working on Solana privacy. Arcium launched its Mainnet Alpha in late 2025, bringing confidential computation to Solana via Multiparty Execution Environments. Umbra is building a shielded finance layer on top of Arcium. Both are protocol-level infrastructure.
PAL sits at the application layer. It does not require protocol changes to Solana or new token standards. It works with existing SPL tokens and existing wallets. The trade-off is that PAL depends on external providers (currently just Houdini Swap) while Arcium is building native on-chain privacy.
| Feature | Solflare PAL | Arcium/Umbra | Standalone Houdini Swap |
|---|---|---|---|
| Layer | Wallet (application) | Protocol (L1 infrastructure) | Standalone service |
| Integration | Built into Send flow | Requires protocol adoption | Separate website/app |
| AML compliance | Yes (via Houdini) | TBD | Yes |
| User action needed | Toggle in existing flow | Wait for protocol integration | Navigate to separate app |
| Privacy scope | Transfer privacy | Full computation privacy | Transfer + swap privacy |
| Available now | Yes | Mainnet Alpha (managed nodes) | Yes |
| Solana-native | Yes | Yes | Cross-chain |
The approaches are complementary. When Arcium reaches full decentralization and Solana protocols integrate confidential SPL tokens, PAL could potentially add Arcium as a privacy provider alongside Houdini Swap, giving users even more routing options.
What Solana Users Should Do
If you use Solflare: Update your app and extension. Private Send is available now. Try it on a small transfer first to understand the fee structure and settlement time.
If you use Phantom or Backpack: You do not have access to PAL. If wallet-level privacy matters to you, this is a reason to consider Solflare. Your existing Solana seed phrase works in Solflare, so switching does not require moving funds.
If you hold USDC on Solana: Private Send is most immediately useful for stablecoin transfers. Sending USDC privately means the recipient cannot trace back to see your full wallet balance. For freelancers, contractors, and anyone making regular payments, this is a practical upgrade.
If you use the Solflare Card: You can now fund your card with Private Send enabled, keeping the top-up transaction unlinkable on-chain. The card itself processes through Mastercard's off-chain rails, so the spending side was already private from on-chain observers. The funding side is where PAL adds value.
FAQ
Does Private Send cost extra? Solflare does not charge its own fee for PAL. The privacy provider (currently Houdini Swap) charges a fee that is displayed before you confirm the transaction. Exact costs depend on the transfer amount and route.
Is Private Send a mixer like Tornado Cash? No. Houdini Swap uses a dual-exchange intermediary system, not a mixing pool. Transactions pass AML checks at the entry point. The architecture is categorically different from mixers that have faced regulatory action.
How long does a Private Send take? Settlement typically completes within minutes for same-chain Solana transfers. Cross-chain private swaps through Houdini Swap can take 15-40 minutes.
Can I use Private Send for any Solana token? Private Send launched with support for SOL and USDC transfers on Solana. Availability for other SPL tokens may expand as PAL adds more privacy providers.
Will other wallets get PAL? PAL is a Solflare product. Solflare has said it will open the aggregator to qualified privacy protocols, but the wallet integration itself is proprietary to Solflare.
Overview
Solflare launched PAL (Privacy Aggregator Layer), the first wallet-native privacy routing system on Solana. The initial feature, Private Send, routes transfers through Houdini Swap's dual-exchange system to break the on-chain link between sender and recipient. It is optional, AML-compliant, built into the existing Send flow, and available now in both app and extension. No self-custodial Solana wallet has offered aggregated privacy before. Solflare plans to add more privacy providers over time, creating a competitive marketplace for privacy execution similar to how DEX aggregators work for swap routing.
Recommended Reading
- CZ Says Privacy Is the Missing Link for Crypto Payments Adoption
- Arcium Launches Privacy Mainnet Alpha on Solana
- Self-Custody Crypto Cards: Complete Guide to Non-Custodial Spending
