# Introduction of Mystiko.Network Mystiko is the base layer of Web3. Mystiko operates as the universal ZK SDK, enhancing the scalability, interoperability, and security of all L1 and L2 blockchains. Mystiko’s SDK enables developers to build blockchain applications that reduce costs, scale effortlessly, securely interact across chains, and protect users’ on-chain identity (account balances, transaction histories, etc.). Mystiko makes every blockchain a ZK blockchain.\ # What is Mystiko.Network Mystiko is the base layer of Web3. Mystiko operates as the universal ZK SDK, enhancing the scalability, interoperability, and safety of blockchains. Mystiko’s SDK enables developers to build blockchain applications that reduce costs, scale effortlessly, securely interact across chains, and protect users’ on-chain identity (account balances, transaction histories, etc.).\ **Mystiko.Network is dedicated to protecting everyone’s on-chain interactions and building a healthy financial environment in Web3.** ## **For individuals,** With Wallets or dApps empowered by Mystiko.Network (): * You can shield your business decisions and protect business turnover info from your business competitors without leaking income and expense info from your on-chain payment behaviors * You can shield your trading strategy from your traders and keep your tactics to yourself * You can shield your company’s payroll and bonus structure between different employees without corporate drama * You can support any political and social cause as you wish without fear of leaking it to the public or your enemies * If you are a known public figure, you can keep your daily life free from your crazy fans who want to track everything via tracking on-chain data **Everyone needs a safe environment to keep their own business healthy, and Mystiko.Network is here to ensure that.** ## **For developers,** **Mystiko.Network offers a secure, interoperable ZK environment for both regular users and developers. Developers can build any dApp powered by Mystiko.Network via simple integration of Mystiko's universal ZK SDK** * **For blockchains.** Any L1 and L2 can utilize Mystiko as a ZK layer, both for single chain swap and cross chain transfers. * **For bridges.** Any bridges can utilize Mystiko to become a ZK bridge, leading to cross chain transactions with full financial safety. * **For wallets.** Any wallet could utilize Mystiko to enable asset management within a trusted environment. * **For dApps.** Defi apps like Decentralized Exchanges, could utilize Mystiko to become a ZK DEX. Crypto payment dApps could utilize Mystiko to perform C2C and C2B payments while protecting the receiving party’s income on-chain history. Mystiko.Network is always looking forward to working with Web3 partners to accelerate crypto adoption in Web3! If you are interested in building with Mystiko.Network, don't hesitate to reach out to ‘’ or via Mystiko Discord/Twitter for more info and integration details. ## **❗️Compliance Notice❗️** Please note that Mystiko.Network only protects user's activity for the good, not for the bad. **Mystiko WILL NOT support bad actors exploiting on-chain interactions with malicious and illegal activities, including but not limited to money laundering.** # Mystiko.Network Vision * **Multichain ZK Application** — we believe ZK Tech should be available on more chains more than just on Ethereum, and should also be interoperable. * **Affordable ZK Technology** — we believe that the trusted environment ZK Tech offers is a basic right for everyone, whether poor or rich. Such environment should be cheap to have (Mystiko ZK rollup reduces transaction costs to 90% lower) * **Accessible ZK Technology** — we believe that ZK Tech should be accessible to anyone anywhere. It should be easy to use (friendly UI/UX and arbitrary amount support), and omnipresent (Mystiko SDK can be implemented to any L1, L2, bridge, wallet, dApp). * **Healthy ZK Environment** — we believe ZK Tech is deeply a public good rooted for everyone on blockchain, e.g. traders need a secure environment on trade history, merchants/business need a ZK environment on crypto payments, NFT collectors need their social identity protected, people in need of money need a protected environment on crypto lending, etc. * **Secure ZK Environment** — we believe ZK tech is ultra important for security. that’s why we a) added additional protected key security features on users’ personal notes, b) is onboarding the very best security auditing firms, c) designed everything directly on secure L1s, instead of less secure L2 or building our own chain # Mystiko.Network Features **Cross chain connectivity to all.** Mystiko.Network’s zk-snarks protocol (Mystiko Protocol) can be easily implemented to almost all major blockchain Layer 1 like Ethereum, BSC, Solana, Polkadot, Avalanche, Polygon, etc. and Layer 2 like zkSync, Arbitrum, OP, etc. as well as all popular blockchain applications. The ability to integrate the ZK protocol with all blockchains, enables the omni-connectivity to all Web3 infrastructures, thus making Mystiko.Network the base layer of Web3. **Full financial ZK Environment.** Mystiko Protocol utilizes secure zero-knowledge proof technology together with advanced encryption and shield address designs to break the link between users' deposit wallet address on source chains and withdrawal address on destination chains, making it untraceable and unlinkable to other users. Such features guarantee that users’ financial data, including account balance, asset holdings, and trade history, is fully within a trusted environment. **Lower transaction fees.** With the implementation of zero-knowledge based scaling technology, transaction fees on Mystiko.Network will be lower than those of ZK Layers. **Complete user control.** Mystiko Protocol is a non-custodial protocol, in which users keep custody of their cryptocurrencies while operating on Mystiko.Network. Only the users themselvers, not Mystiko.Network or anyone else, have control over their cryptocurrencies throughout the whole process. **Easy and convenient user experience.** Mystiko.Network offers users a single-click cross chain ZK transaction experience in an all-in-one wallet that supports multiple blockchains and cross chain bridges, and supports arbitrary withdrawal amount from the same deposit. **Aggregating major bridges.** Mystiko Protocol is being implemented to most popular cross chain bridges in Web3. Users could choose their preferred bridge services with one click from Mystiko Wallet. **Fast.** Due to the complexity of cross chain transactions, the zk circuit size is about 3x as that of other ZK protocols. Yet, Mystiko Protocol has made several technical improvements making the verification cost 3-5x lower than what an individual ZK Layer can offer. **Security of funds:** On Mystiko.Network, individual's notes(proofs of users’ cryptocurrency deposits) are encrypted and even in the very unlikely extreme case when one’s proof is hacked, the hacker cannot withdraw one’s assets since in Mystiko Protocol design, withdrawal requires one’s private key. Encrypted private keys are different from zero knowledge proof private keys on Mystiko.Network for better security, a design not yet supported by other ZK protocols. **Encryption for the Good, Not for the Bad in Post Tornado Cash Era.** Mystiko designed the first decentralized auditing system for on-chain ZK transactions. In Mystiko’s decentralized auditing system, a decentralized auditing committee will be established and such a committee will support auditing the transaction flow of suspicious deposits from bad actors while protecting the data of regular users. ## **Problems that Mystiko.Network Solves** **Financial public exposure issues restrict Web3 from broader adoption.** Blockchain, the foundation of Web3 with its transparency and traceability design, exposes all users’ transaction data to the public, including account balances, asset holdings, trading history, etc. Such data exposure leads to potential security and personal security risks that restrict Web3 from broader adoption. However, with the base layer that Mystiko.Network provides to the whole Web3 ecosystem, users transaction details on and in between all blockchains will be kept secure via zero-knowledge proof technology, a secure cryptography mechanism to keep users’ financial data away from public exposure. **Current cross-chain bridges have not supported secure ZK transactions yet.** While web2 data oligarchies are often isolated, interoperability(connectivity) between blockchains and blockchain applications deeply roots as the basis of web3. Hundreds of cross-chain bridges have emerged acting as the linkage for users to transfer assets from one chain to another, accumulating billions of inter-chain trade volumes. Yet, no existing cross-chain bridge has supported secure ZK transactions that protect users’ account balance, asset holdings, and trading history data. Mystiko.Network offers a zero-knowledge proof-based protocol solution to all cross chain bridges, which breaks the linkability between a user’s deposit on a source chain and withdrawal on a destination chain. Mystiko.Network cross chain ZK protocol has an easy-to-plug-in feature that can be integrated into almost all major inter-chain bridges in the web3 ecosystem. **Current single-chain ZK transaction solutions are available but user experience is hardly pleasant for both individual users and developers.** Single chain ZK solutions are already experimented in the market. However, the user experience of such solutions is quite limited since users not only suffer from heavy transaction costs, but also encounter complications when moving assets from one chain to another. With such ZK cross-chain transaction solutions, a user must first utilize the layer only on the few chains they support, then utilize a bridge to finish the rest of the process, which is hardly a pleasant experience. Meanwhile, current solutions do not support developers to scale ZK technology for their users. Yet, with Mystiko.Network, user experience is on the single-click level to conduct cross-chain secure ZK transactions, making it an easy and convenient base feature for web3; and as a ZK infrastructure provider, Mystiko is dedicated to provide the universal ZK SDK for dApp developers to easily add ZK technology for their users. **Transactions using ZK layers traditionally involve high gas fees.** Safety costs. Extra gas fee is required if users activate ZK services. Unpleasant high gas fee for cross chain ZK transactions has put up barriers for users to adopt such services. However, Mystiko.Network offers a zero-knowledge proof based scaling solution to reduce such gas fees to an affordable level. # Mystiko.Network on Mainnets Mystiko.Network and its first web wallet is now on Ethereum mainnet! ## **Mystiko.Network and its first** [**web wallet**](https://app.mystiko.network/) **built by ecosystem partner - CAMO Wallet, is now live!** * Deposit, pay, transfer securely on 👉 [. ](https://web.camowallet.app/) * Learn how to use CAMO wallet  👉 [Tutorial](https://docs.camowallet.app/). * Supported blockchains: Ethereum, BNB Chain, Polygon, Base, Avalanche, Linea * Wallets: MetaMask * Assets: * On Ethereum: ETH, USDT, USDC * On BNB Chain: BNB, BUSD, USDT, USDC * On Polygon: MATIC, BUSD, USDT, USDC, WETH * On Avalance: AVAX, UDST, USDC * On Base (L2): ETH, USDbC * On Linea: ETH, USDC ## **Tech Highlights of Mystiko.Network on Mainnets** * **Snark of Snark, better security, and lower gas fee.** Mystiko.Network has incorporated ZK Snarks for secure ZK transactions. As a result, transactions on Mystiko.Network cost 50–90% lower than other major existing ZK solutions. Such ZK of ZK design intends to create an affordable solution for every consumer. * **Ultra flexibility, arbitrary amount withdrawal with full data protection.** Mystiko.Network has implemented a technology called '**JoinSplit'** - which allows users to transfer and withdraw any amount of total assets deposited. A JoinSplit consumes either one or two input(deposit) values and creates either one or two output(withdraw) values. For example, if a user makes 3 deposits on Mystiko.Network at the amount of 10 ETH, 20 ETH and 30 ETH on Ethereum mainnet, the user is now given the option to withdraw any arbitrary amount under 50 ETH with full ZK features. * **Direct personal payment, direct personal address to personal address transfer.** Mystiko users can transfer tokens to another Mystiko user within the Mystiko.Network. In other words, if both the sender and the receiver are on Mystiko, the sender and the receiver can directly transfer any tokens between their Mystiko.Network personal addresses without involving public blockchain addresses, ensuring the safety of both, the sender and the receiver. * **The world's 1st Auditable ZK Solution - ZK tech for the Good, Not for the Bad.** Mystiko designed the first decentralized auditing system for on-chain ZK transactions. In Mystiko’s decentralized auditing system, a decentralized auditing committee will be established and such a committee will support auditing the transaction flow of suspicious deposits from bad actors while protecting the data of regular users. ## Cost Estimation and Disclosure ### **1. Gas Fee Per Chain**
ChainTokenGas priceDeposit gas fee Withdraw gas fee
UnitGweiNumber of native tokensNumber of native tokens
EthereumETH400.008339280.02074468
PolygonMATIC1490.028523070.078407823
BNB ChainBNB30.0006254460.001571181
AvalancheAVAX260.0054205320.01368939
BaseETH0.0000064770.0000000013107634440.000000003376660887
### **2. Roll Up Fee** Rollup Up Fee will be charged by Mystiko ZK miners, who will be responsible for rolling up new commitments to lower the gas cost of ZK transactions. Rollup will be activated when new commitments are created in the following scenarios: 1) when users make a new deposit commitment; 2) when users partially transfer or withdraw from a deposit, and leave the rest of deposit to be accounted as a new commitment. Rollup fee is deducted from the tokens to be shielded, i.e. users shall pay a certain amount of USDT, instead of ETH, to miners if users chose to directly deposit USDT. Users could add rollup gas to speed up the rollup process. | Chain | Asset | Roll-up Fee (Min) | | ----------------- | -------------- | ----------------- | | **Ethereum** | ETH | 0.01 | | | USDT/USDC | 15 | | **BSC** | BNB | 0.004 | | | USDT/USDC/BUSD | 1 | | **Polygon** | Matic | 0.1 | | | USDT/USDC/BUSD | 0.1 | | | WETH | 0.00005 | | **Avalanche** | AVAX | 0.02 | | | USDT/USDC | 0.5 | | **Coinbase Base** | ETH | 0.0002 | | | USDbC | 0.3 | ### **3. Relayer Fee (Optional)** Users could choose to provide relayer fee to third-party Mystiko gas relayer to enable transactions and transfers when users ran out of gas fee for asset withdrawal on destination chain. i.e. When a user would like to withdraw USDT on BNB Chain, but this user does not have BNB token on his wallet, he could choose to pay relayers with certain amount of their deposited assets (USDT in this case) to cover the BNB token gas fee and start the withdraw process. # Mystiko.Network on Testnets More Mystiko.Network features available for demo on testnets "AuditableZK" ## **Mystiko.Network on testnets Availabilities** * Mystiko.Network has supported **both single chain and cross-chain ZK transactions.** * Chains (Testnet): Ethereum, BNB Chain, Polygon, Avalanche, Fantom, Aurora(upcoming), Moonbeam * Wallets: MetaMask * Bridge: Celer IM, Mystiko Test Bridge, LayerZero, Axelar ### Wallet built on Mystiko testnets (developed and operated by ecosystem partner CAMO): ### # Mystiko Compliance Mystiko.Network is an autonomous, decentralized, and permissionless code protocol. Though Mystiko.Network’s code is self-executing, it is designed to comply with regulations against malicious and illegal activities for a healthy financial ZK environment in Web3. Although the ZK transaction features of blockchain technology allow people to fully enjoy their fundamental rights to their data protection, abusing such features for malicious activities could bring harm to societies and these risks should be controlled. Freedom does not come without compliance. Using Mystiko.Network should not equate to or be regarded as using it for illicit activities. Mystiko.Network users cannot use it for the purpose of conducting illicit activities or assisting such activities. In an effort to address the above issue, Mystiko.Network has deployed the following built-in compliance mechanisms/tools to fight against malicious and illegal activities for users and the community. 1. **Blacklist mechanism based on government sanction lists, e.g. the U.S. OFAC SDN Auditable ZK transaction mechanism.** * Regulators across the globe have been actively monitoring crypto addresses with potential illegal activities or risks. For example, the Office of Foreign Assets Control in the U.S. has [a sanction list of crypto addresses](https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20211108). In Mystiko.Network’s design, a blacklist mechanism powered by oracle smart contracts by [Chainalysis](https://www.chainalysis.com/), is enabled in the original user deposit smart contracts, where a blacklist of crypto addresses can be collected by decentralized and permissionless users from various regulators like the Office of Foreign Assets Control. Crypto addresses on the blacklist will not be able to use Mystiko.Network. * Reference: * U.S. Office of Foreign Assets Control: Specially Designated Nationals And Blocked Persons List (SDN) Human Readable Lists ​​ * Cyber-related Designations and Designations Updates 2. [**Auditable ZK transaction mechanism** ](/mystiko-compliance/mystiko-auditable-zk-features-faq) * Mystiko designed the first decentralized auditing system for onchain ZK transactions. In Mystiko’s decentralized auditing system, a decentralized auditing committee, consisting of reputable institutes and entities chosen by the community, will be established and the committee will support auditing the transaction flow of suspicious deposits from bad actors while protecting the identity of regular users. * Read more: 3. **Auditing** * The 1st round of Mystiko.Network smart contract audit has been completed by [ABDK Consulting](https://www.abdk.consulting/), and the final audit report will be released once ready. As a continuing effort towards compliant safety, Mystiko DAO is constantly accepting more compliance tool suggestions. Please join the #compliance-talk channel in Mystiko[ discord](https://discord.gg/hurmHWUjCW) for more discussions. # Mystiko Auditable ZK Features FAQ **Choosing whether to use ones' own data is a fundamental human entitlement, but not for malicious and illegal activities. To safeguard the fundamental data safety rights for users with legitimate reasons from the bad actors exploiting on-chain secrecy, Mystiko devised the initial decentralized auditing system for on-chain zk transactions.** ### **Key highlights of Mystiko’s decentralized audit feature** * **What is the scope of auditing in Mystiko.Network? View only.** Mystiko auditors will only be able to VIEW and audit transaction flow of suspicious deposits from bad actors, upon the request of regulators and the majority approval of the auditing committee. Mystiko auditors will only be able to VIEW the transaction history over a certain period of time upon the majority approval of the Mystiko auditing committee. * **Only suspicious transactions, such as sanctioned assets, will be audited.** Auditing process will only be kicked off when sanctioned assets/addresses are identified in Mystiko user pool * **Your assets will always be secured by Mystiko.** No one, not even Mystiko auditors, can intercept/temper zk transactions in Mystiko.Network. Mystiko auditors will only be able to VIEW the transaction history over a certain period of time upon the majority approval of the Mystiko auditing committee. * **Who should be the Mystiko auditors?** Reputable and reliable auditing partners, such as NGO, IGO, global auditing firms, regulators with strong background and expertise in compliance, technology, and finance are ideal Mystiko auditing committee members. The final members for the committees are chosen by the Mystiko community. Suggest and vote for the auditing partners that you trust the most to ensure a sustainable ZK web3 future. ### What is the goal of Mystiko decentralized auditing system? * Protect users on-chain data for the majority good, not the minority bad. * Protect community users’ assets from entangling with unclean/malicious assets and users, and fight for users' right of not exposing their identity in a secure and sustainable way. ### **How does Mystiko auditable ZK solution work?** * In Mystiko’s design, the transactions of suspicious assets could be revealed and audited in a decentralized manner, by a trusted audit committee. * **Step 1: Mystiko community will choose auditors and mark their unique auditor public keys for future auditing reference.** Trusted auditors of Mystiko.Network, such as regulators, reputational financial institutions and auditing firms, will be authorized to create auditor secret keys and to generate public keys that will be used for future ZK transaction data auditing. * **Step2: User will encrypt and distribute safe transfer and withdraw data with auditors’ public keys.** When a zk deposit is withdrawn or transferred, while zero-knowledge proof is generated, the linkage between deposit and withdraw/transfer will be encrypted with the public keys of auditors. Each auditor will have a secret share of the encrypted linkage data. \[Tech design reference: [Shamir's Secret Share](https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing)] * **Step 3: Mystiko auditors will be able to audit encrypted suspicious transaction data based on decentralized majority votes of the auditors committee.** In order to view the complete info of a ZK transaction, the auditing committee will have to reach an agreement to decrypt the transaction flow of suspicious deposits with their privately stored secret keys, if such suspicious deposits have been withdrawn. Read more about Mystiko Auditable ZK design: ### **Why is the Mystiko auditing committee anonymous?** A trustworthy and reliable auditing committee is the foundation of the Mystiko ZK audit - Mystiko ZK auditors shall only kick off auditing process when receiving official legal request from regulators, and shall not reveal user data when pressured/bribed by external parties without , and will not conspire with other auditors to pry on user data for personal interest. At the early stage of the Mystiko auditing operation, when the Mystiko community and DAO are still developing, it takes time to build a well-decentralized mechanism to supervise ZK auditors. During this period, the identities of the first few Mystiko ZK auditors will remain anonymous, both to the public and between each other, in order to prevent the initial auditors from targeted attack/pressured/bribed by external interest groups, and to increase the difficulty for auditors to conspire internally. Meanwhile, the Mystiko tech team will also strictly regulate and control the scope of authority of Mystiko ZK auditors to ensure no Mystiko ZK auditors will abuse their power. As our decentralized auditing features evolve, and when our community is ready to take on greater responsibility to regulate and govern Mystiko ZK auditors, the identities of ZK auditors will be revealed and be supervised by the community. Please note that, Mystiko team does not and will never own/take custody of ZK auditors’ private keys, starting from the day 1 of the ZK auditing operation. Mystiko will also place users own good as our first priority and is dedicated to be the strongest support for our users. While the ZK auditing features, the Mystiko tech team will be strictly regulating and controlling the scope of authority of Mystiko ZK auditors to ensure no Mystiko ZK auditors will abuse their power. If you have any suggestions and comments on how to increase the transparency and reliability of Mystiko ZK auditors, please reach out to ‘’ anytime. ### **What do Mystiko auditors need to do?** * Do NOT leak or lose the auditor secret keys. Auditors could update their public keys anytime by aligning with the Mystiko core dev team, if their auditor secret keys are leaked/forgotten or just for better security. * Be responsive to auditing requests, and kick off auditing meetings. ### When will the auditing process be kicked off? * Auditing process will only initiated when * Regulators submitted official legal notice to “” with solid proof of funds involved with illegal activities, and required Mystiko to provide information of illegal assets. * Upon the scenario where a high-profile hacking incident occurs and the funds involved are deposited into Mystiko.Network, before regulators start taking action, Mystiko will immediately initiate an emergency user community vote to kick off the auditing process. The auditing process will be initiated when the majority of users support auditing. * Read more about Mystiko’s term of use and compliance guideline: [Mystiko terms of use](https://docs.mystiko.network/terms-of-use) ### How can auditors track/audit suspicious deposits in Mystiko decentralized auditing system? * When a suspicious deposit is identified by the auditing committee, the auditing committee will have the option to kick off the discussion on whether to monitor/audit the future withdrawal and transfer transactions of such deposit, to identify the outlet of such suspicious deposit. * But please be noted that auditors will only be able to view and audit the transaction flow of the suspicious deposit when such deposit has been withdrawn or transferred. ### Will the auditors know the transaction flows of suspicious deposits if such deposits are not withdrawn or transferred? * No, the auditors view and audit the transaction flow of the suspicious deposit, ONLY when such deposit has been withdrawn or transferred. ### Will Mystiko auditors be able to intercept/temper zk transactions in Mystiko.Network? * No, Mystiko auditors will only be able to VIEW the transaction history over a certain period of time upon the majority approval of the Mystiko auditing committee. ### Can a single auditor (or a minority group of auditors) decrypt and view transaction info with their own secret keys? * No, transaction data could only be decrypted and viewed with the input of the majority of the auditor secret keys ### Once the auditing procedure starts, will the auditors be able to view the transactions of other users within the same period, besides the transactions that auditors wanna track? * Yes, the auditors will have access to all the transaction data, including the transactions to be audited. ### How can Mystiko prevent user data leakage, in the event of auditor private key leakage? * Mystiko dev team could update and rotate the safety of auditors in regular/random basis to ensure that even when auditors’ secret keys were stolen by bad actors, hackers will only have access to very limited transaction history ### What is the worst case scenario if the auditor keys are lost/stolen by the hackers? * Hackers might have visibility of the transaction history related to the stolen auditor’s keys, but only over a limited window of time. ### Will Mystiko be able to add/delete/update members of the auditor committee? * Yes, but only based on the request of the auditing committee and community ### How can we prevent auditors from revealing users’ transaction data? * In Mystiko decentralized auditing design, transaction data could only be decrypted and viewed with the input of over 3 auditor secret keys. To prevent members of audit committees from revealing user data without the initiation of the auditing process, Mystiko will keep the identity of auditors confidential from the public and between auditors, so that auditors won't be able to work with each other to reveal transaction data of users. ### Why should you join the Mystiko decentralized auditing committee? * Be in the frontline to push the boundary of on-chain zk technology for all * Be the gatekeepers to protect the basic rights of users * Accelerate the massive adoption of blockchain and crypto adoption. # Mystiko DAO \&Community Decentralization from TGE Day 1 has always been the goal of all early Mystiko.Network contributors. Community can actively participate in [Mystiko DAO](https://www.tally.xyz/gov/mystiko) decisions. Mystiko.Network was born to be a DAO from day one: an autonomous and decentralized organization building a permissionless code protocol which is open to all and self-executing with no admins or operators. The Mystiko governance framework is to be used to contribute both in protocol development and usage, as well as development of the broader Mystiko ecosystem. In doing so, XZK wrapped token vXZK officially enshrines Mystiko as publicly-owned and self-sustainable infrastructure while continuing to carefully protect its indestructible and autonomous qualities. Follow Mystiko.Network \&Mystiko DAO to stay tuned:\ [**Website**](https://mystiko.network)**|**[**Wallet**](https://web.camowallet.app/wallet)**|** [**Testnet**](https://testnet.camowallet.app/)**|** [**Twitter**](https://x.com/Expandzk) **|** [**Discord**](https://discord.gg/expandzk) **|** [**Medium**](https://medium.com/@Expandzk) **|** [**Whitepaper**](https://mystiko.network/whitepaper.pdf)**|** [**Docs**](https://docs.mystiko.network) # Mystiko DAO > Decentralization from TGE Day 1 has always been the goal of all early Mystiko.Network contributors. Since its inception, Mystiko.Network has served as the trustless and extensively decentralized infrastructure for zero-knowledge (ZK) technology within various blockchains. Having proven product-market fit for blockchain’s ZK infrastructure with a platform that has thrived independently, Mystiko.Network is now particularly well positioned for community-led growth, development, and self-sustainability through an autonomous organization, [Mystiko DAO](https://www.tally.xyz/gov/mystiko). To sustain [Mystiko DAO](https://www.tally.xyz/gov/mystiko), the introduction of a wrapped XZK token, the mint-and-burn style vXZK (ERC-20) token serves this purpose. Previously, the [XZK token](https://docs.mystiko.network/tokenomics) was created as the operational utility and governance token of Mystiko.Network. Today, the genesis of vXZK was inspired by notable peers in the industry including MakerDao, Curve Finance, Compound etc. that had created similar wrapped tokens for voting purposes in their DAO governance. vXZK acts as the voting wrapped token for XZK and enables shared community ownership and a vibrant, diverse, and dedicated [Mystiko DAO](https://www.tally.xyz/gov/mystiko) governance system, which will actively guide Mystiko.Network towards the future. ➡️vXZK contract which can be found on Etherscan at this address: ## ❓**How does Mystiko DAO govern Mystiko.Network?** Mystiko.Network is the base layer of Web3 and the universal ZK SDK, enhancing the scalability, interoperability, and safety of blockchains. Mystiko’s SDK enables developers to build blockchain applications that reduce costs, scale effortlessly, securely interact across chains, and protect users’ on-chain data (account balances, transaction histories, etc.). Mystiko.Network was born to be a DAO from day one: an autonomous and decentralized organization building a permissionless code protocol which is open to all and self-executing with no admins or operators. Mystiko.Network has always embraced trust minimization from day one: it is crucial that governance is constrained to where it is strictly necessary. Therefore, the Mystiko governance framework is limited to contributing to both protocol development and usage as well as development of the broader Mystiko ecosystem. In doing so, XZK wrapped token vXZK officially enshrines Mystiko as publicly-owned and self-sustainable infrastructure while continuing to carefully protect its indestructible and autonomous qualities. ## ✅**Utilizing OpenZeppelin Governor.** In a similar model many projects like [MakerDAO](https://manual.makerdao.com/governance-processes/voting-in-makerdao/on-chain-governance), [Curve Finance](https://resources.curve.fi/governance/understanding-governance/#voting-power), [SushiSwap](https://dev.sushi.com/docs/Governance/Proposals%20&%20Voting), and [other](https://docs.balancer.fi/concepts/governance/veBAL/#overview) DAOs follow , we’re utilizing OpenZeppelin Governor, which requires the use of wrapped tokens for voting. OpenZeppelin’s Governor is inherited from [Compound’s.](https://compound.finance/docs/governance) This modular system of Governor contracts allows the deployment of on-chain voting protocols similar to Compound’s Governor [Alpha & Bravo](https://compound.finance/docs/governance) and beyond, offering the ability to easily customize multiple aspects of the protocol. ## 🌈**Participate and Govern together.** > Mystiko Dao website: \ > (please note that any numerical values should be in accordance with the text below) To participate in [Mystiko DAO](https://www.tally.xyz/gov/mystiko), XZK holders can simply convert their tokens into vXZK and cast their votes. This is purely essential for practical reasons: you’ll be wrapping your XZK tokens to vXZK in a 1:1 ratio, and you can convert vXZK back to XZK at any time. This way, it ensures seamless participation in the voting process utilizing the OpenZeppelin Governor, while maintaining the flexibility to convert your tokens back to XZK at will. vXZK follows a mint-and-burn model: depositing one XZK mints one vXZK, and withdrawing one XZK burns one vXZK, thus avoiding over-issuing voting tokens. For those seeking a deeper dive, OpenZeppelin Governor documentation can be found here: The URL to the OpenZeppelin ERC20Wrapper code: ## **Mystiko DAO Voting Process v0.1 as of June 14th 2024** Mystiko DAO directly utilizes OpenZeppelin’s Governor framework, ensuring a secure and transparent voting process. Technical, product, and economic decisions are made through staked vXZK token voting. * **Proposal Threshold:** Creation of proposals requires at least 1 million vXZK. * **Propose Delay:** After every proposal is created, there will be 1 day delay before voting can begin. * **Voting Period:** The community can then cast their votes during a 7-day voting period. * **Prevent Late Quorum:** In the case the quorum is only reached on the last day, the voting will be extended by one day, allowing the community time to process it, thus ensuring the quorum is not a last-minute occurrence. * **Voting Threshold:** If a majority, and a quorum of Max(**2M**, **15%** \* vXZK Total Supply) votes are cast (the quorum required is the larger value between **2 million vXZK** and **15%** of the total vXZK supply), the proposal can be queued (by sending a transaction), and may be executed in a minimum of one hour. The transactions involved can be executed by anyone. This voting threshold is effective from TGE Day 1 to TGE+3 months. The DAO can adjust it based on actual circumstances to achieve better governance. # Frequently Asked Questions ## **What is Mystiko.Network?** ​​Mystiko.Network is the base layer of web3 with both crosschain connectivity and ZK technology. Leveraging zero knowledge proof with industry leading “zk of zk” technology, Mystiko.Network guarantees interoperability, scalability and safety, all at once. Details refer to [Introduction of Mystiko.Network](/). ## **What makes Mystiko.Network different from other ZK solutions?** Mystiko Network is not building a Layer 2 ZK solution only applicable on one chain. Mystiko.Network is building the ultimate universal web3 ZK infrastructure through **a plug-and-play universal zk** SDK**.** ## **Who are interacting with Mystiko.Network?** **Mystiko.Network is built for all who believe that they should own their identities and freedom, including both individuals or entities**. Mystiko.Network empowers Web3 ecosystem through ZK technology including: * **For blockchains.** Any L1 and L2 blockchains could utilize Mystiko.Network as a ZK layer, making their mainnet transactions protected both within the same chain or from/to other chains. * **For bridges.** Any cross-chain bridges could utilize Mystiko.Network to add safe ZK bridging functions, making cross-chain transactions fully safe. The first ZK bridge application built on Mystiko.Network is already [live](https://testnet.wallet.mystiko.network). * **For wallets.** Any wallets could utilize Mystiko.Network to add zero-knowledge asset management and transactions features. The first ZK wallet application built on Mystiko.Network is already [live ](https://testnet.wallet.mystiko.network)with MetaMask. * **For Dapps:** Any dApps could utilize Mystiko.Network to provide users on-chain financial zk features, e.g. zk DEX and secure on-chain crypto payments dApps that protect receivers/merchants’ income history. ## **What are the potential use cases of Mystiko.Network?** * **Cross Chain ZK Bridge.** Users deposit assets on one chain and withdraw from another chain without exposing transaction details to anyone. Mystiko Protocol can be implemented to any cross chain bridge. * **MystikoPay.** Secure on-chain payments without exposing users' payment histories to anyone. All incoming payment histories are not exposed, especially useful for companies and merchants to prevent exposing sensitive business turnover details on chain. * **Secret Vault.** Users could transfer assets to a brand new secret and ultra-safe address without exposing data. Any wallet could provide its users such features by implementing Mystiko Wallet SDK. * **ZK DEX.** Users could trade on ZK DEX just like on Uniswap while users' financial data is protected. Existing DEX could add such features to their users by implementing Mystiko Protocol. ## **How does Mystiko.Network protect users data?** Mystiko Protocol utilizes secure zero-knowledge proof technology together with advanced encryption and shield address designs to break the link between users' deposit wallet address on source chains and withdrawal address on destination chains. For more information please check [Mystiko Whitepaper](https://mystiko.network/whitepaper.pdf) or [Mystiko Docs](https://docs.mystiko.network/). ## **How is Mystiko.Network DAO operating?** Mystiko.Network was born as a [DAO](https://discord.gg/hurmHWUjCW) with a group of engineers on the first day. Early contributors from all over the world are gradually working towards a fully decentralized DAO. Feel free to join [Mystiko.Network Discord groups](https://discord.gg/hurmHWUjCW) and be a part of the Mystiko DAO! Mystiko.Network is an autonomous, decentralized, permissionless code protocol, which is open to all and self-executing with no admins or operators. ## **Is it possible to compromise the protocol and find out information about depositors?** No. Mystiko.Network is a decentralized protocol based on zero knowledge (zk) proofs. Its smart contracts are immutable, have no admins, and the zk proofs are based on strong cryptography. ## **Does Mystiko.Network collect user data?** No. Mystiko.Network project does not collect any user data. Mystiko Protocol is a non-custodial and decentralized protocol, in which users keep custody of their cryptocurrencies while operating on Mystiko.Network. Users, not Mystiko.Network or anyone else, are the only ones with control over their cryptocurrencies throughout the whole process. ## **Has the protocol been audited?** Yes, Mystiko.Network smart contract audits are in progress. Detailed auditing report will be available to the public shortly. Mystiko Dao also has an open auditing/bug bounty program, which will be available soon. ## **How can I contribute if I am not a developer?** Mystiko.Network is created for the users and developer community. Whether you are a developer or not, all ideas and suggestions related to Mystiko and web3 are welcome in Mystiko DAO. Mystiko DAO hosts an open space for discussion on the future of web3 and financial safety, including ZK technology, product development, ecosystem, compliance and community governance of Mystiko DAO. Please join Mystiko DAO and share your thoughts and suggestions via Mystiko [Telegram](https://t.me/Mystiko_Network) | [Discord](https://discord.gg/expandzk) | [Website]() | [Twitter ](https://x.com/Expandzk)| [Medium](https://medium.com/@Expandzk) . ## **Why don’t we implement the protocol by anonymizing each chain?** A naive cross-chain protocol could employ some ZK solution, on each chain and then transfer coins between them. This approach may protect the on-chain data; however, the transactions between chains are trackable, and recipient and destination chains’ information is not anonymous. On the contrary, Mystiko could break the cross-chain link by shielded the destination chain’s identity. Meanwhile, single chain ZK transaction solutions are available but user experience is hardly pleasant. Single chain ZK solutions are already experimented in the market. However, the user experience of such solutions is quite limited since users not only suffer from heavy transaction costs, but also encounter complications when moving assets from one chain to another. With such solutions to do safe cross chain transactions, a user must first utilize such sidechain only on the few chains they support, and then utilize a bridge to finish the rest process, which is hardly a pleasant experience. Yet, with Mystiko.Network, user experience is on the single-click level to conduct cross chain safe zk transactions, making it an easy and convenient base feature for web3. # Mystiko Smart Contract Audit Report # Mystiko Smart Contract Audit Report 2023 *Mystiko Smart Contract Audit Report 2023* was audited by A. Zveryanskaya of ABDK Consulting, and the report was completed on March 15, 2023. The ABDK Audit Team, led by Mikhail Vladimirov and Dmitry Khovratovich, has conducted over 40 audits of blockchain projects in Solidity, Rust, Circom, C++, JavaScript, and other languages. {% file src="/files/BNkAvcUrmvpSgktCvolM" %} # Terms of Use By using or accessing Mystiko.Network (the “Platform”) and any of our properties, products, and services (the “Services”), you (“you” or “User") acknowledge that you have read and agree to these Terms of Service, and you accept and agree to be bound and abide by these Terms of Service and all of the terms incorporated herein. The Privacy Policy (as set out in Annex 2) which explains how the Platform collects, uses, and shares data in connection with the Platform and the Services, and all such additional terms, guidelines, and rules as set forth on the Platform are hereby incorporated by reference into these Terms and expressly agreed to and acknowledged by the User. The Terms of Service govern your rights and responsibilities when you use the Platform. By agreeing to these terms, you hereby certify that you are at least 18 years of age. We reserve the right to change or modify these Terms of Service at any time and at our sole discretion. If we make changes to these Terms of Service, we will provide notice of such changes, such as by sending an email notification, providing notice through the Platform or updating the date at the beginning of this document. By continuing to access or use the Platform, you confirm your acceptance of the revised Terms of Service and all of the terms incorporated therein. If you do not agree to these Terms of Service, you must not access or use the Platform and the Services. 1\) General provisions a) By using the Platform, you agree to the following: i) to maintain the security of your wallet and accept all risks of unauthorised access to it; ii) to immediately notify us at if you discover or otherwise suspect any security breaches related to the Platform; iii) to represent and warrant that in the jurisdiction to which you are a citizen of, domiciled in, or resident of, you are of legal age to use the Platform and/or the Services and to create binding legal and financial obligations for any liability you may incur as a result of the use of the Platform and/or the Services; and iv) to represent and warrant that you are not a Disqualified Person/Entity (as defined in Annex 1) or acting on behalf of a Disqualified Person/Entity. b) We reserve the right to refuse service if your wallet address is on the sanctions list of the Office of Foreign Assets Control. c) We may require you to provide additional information and documents at the request of any competent authority, including but not limited to cases related to anti-laundering (legalisation) of incomes obtained by criminal means or for counteracting the financing of terrorism. In such cases, we may suspend your usage of the Platform and the Services. d) We may use or provide your transaction details as we believe necessary or appropriate to comply with applicable laws (including anti-money laundering laws), lawful requests and legal processes, including but not limited to respond to subpoenas or requests from government authorities. e) We may invite decentralized auditing committees to reveal particular transactions to any competent authorities to protect investigate, and deter against fraudulent, unauthorized, or illegal activities. f) We may use or provide any transaction details to any competent authorities to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity. g) We may disallow your wallet address from using the Platform and any of the Services to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity. h) It is at your sole discretion to provide all equipment and software necessary to connect to the Platform and the Services, as well as any fees, including internet connection or mobile fees, which you incur when accessing the Platform or the Services. 2\) Ownership a) Unless otherwise indicated in writing by us, content and other materials contained on the Platform and all other platforms (including, without limitation, social media platforms), including, without limitation, the Mystiko.Network logo and pages design, texts, graphics, pictures, information, data, software, sound files, promotional or other files and the selection and arrangement thereof (collectively, “Content”) and the Platform as a whole are our property. b) The Mystiko.Network logo and any service names, logos or slogans that may appear on the Platform and all other platforms (including, without limitation, social media platforms) are the exclusive property of us or our affiliates and may not be copied, imitated or used, in whole or in part, without our prior written permission. You will not use, copy, adapt, modify, prepare derivative works of, distribute, license, sell, transfer, publicly display, publicly perform, transmit, broadcast or otherwise exploit the Platform. You may not use any metatags or other “hidden text” utilising “Mystiko.Network”, or any other name, trademark, product or service name of Mystiko.Network or our affiliates without our prior written permission. In addition, the “look and feel” of the Platform, including, without limitation, all page headers, custom graphics, button icons and scripts, constitute the service mark, trademark or trade dress of Mystiko.Network and may not be copied, imitated or used, in whole or in part, without our prior written permission. All other trademarks, registered trademarks, product names or logos mentioned on the Platform are the property of their respective owners and may not be copied, imitated or used, in whole or in part, without the permission of the applicable trademark holder. Reference to any products, services, processes or other information by name, trademark, manufacturer, supplier or otherwise does not constitute or imply endorsement, sponsorship or recommendation by us. 3\) Interactions with the Platform a) You are responsible for all activities that occur under your wallet, regardless of whether the activities are authorized by you or undertaken by you, your employees or a third party (including your contractors, agents or other end users), and we and our affiliates are not responsible for unauthorized access to your account, including any access that occurred as a result of fraud, phishing, or other criminal activity perpetrated by third parties. b) You are solely responsible for properly configuring and using the Platform and otherwise taking appropriate action to secure, protect and backup your accounts and/or your content in a manner that will provide appropriate security and protection, which might include use of encryption. This includes your obligation under this Terms of Service to record and securely maintain any passwords or backup security phrases that relate to your use of the Platform. You acknowledge that you will not share with us nor any other third party any password or backup/seed phrase that relates to your use of the Platform, and that we will not be held responsible if you do share any such phrase or password. c) You are solely responsible for the custody of the cryptographic private keys to the digital asset wallets you hold. Under no circumstances should you share your wallet credentials or seed phrase with anyone. We assume no responsibility for, or liability to you, in connection with your use of a wallet. Additionally, you are solely responsible for any associated wallet and we cannot be held liable for any acts or omissions on your part in connection with, or as a result of, your wallet being compromised. d) Access to the Platform is intended for and extended only to, and the Services are intended for and extended only to, a person or body corporate who is not a Disqualified Person/Entity. Accordingly, you are not eligible to access the Platform or use the Services if you are a Disqualified Person/Entity. If you are a Disqualified Person/Entity, or if you are acting on behalf of a Disqualified Person/Entity, you should exit the Platform and cease usage of all the Services immediately. 4\) License to access and use the Platform a) You are hereby granted a limited, non-exclusive, non-transferable, revocable, non-sublicensable license to access and use the Platform and the content therein. However, such license is subject to these Terms of Service and does not include any right to the following: i) sell, resell or use the Platform commercially as a whole, parts of it or the content therein; ii) distribute, publicly perform or publicly display any content located on the Platform; iii) modify or otherwise make any derivative uses of the Platform as a whole, parts of it or the content therein; iv) use any data mining, robots or similar data gathering or extraction methods; v) download (other than page caching) any portion of the Platform as a whole, parts of it or the content therein, except as expressly permitted by us; and vi) use the Platform other than for its intended purposes. 5\) Third-Party content and interactions The Platform may contain links to third-party websites and applications. When you click on a link to a third-party website and application, we will not warn you that you have left our Platform and are subject to the respective website’s terms and conditions, including privacy policies. Such third-party websites and applications are not under the control of the Platform and, as such, shall not be held responsible for any damages or losses incurred by their use. We provide links to these third-party websites and applications only as a convenience and do not review, approve, monitor, endorse, warrant, or make any representations with respect to them, their products or services. You use all links to third-party websites and applications at your own risk. 6\) User Conduct a) You agree that you will not violate any law, contract, intellectual property or other third-party right and that you are solely responsible for your conduct while accessing or using the Platform. You agree that you will abide by these Terms of Service and will not: i) use the Platform in any way that constitutes or can constitute a violation of granted rights or obligations by us or any third party; ii) provide false or misleading information; iii) use or attempt to use another user’s information without authorisation from such user; iv) use the Platform in any manner that could interfere, disrupt, negatively affect or inhibit other users from using the Platform to its fullest degree, or that could damage, disable, overburden or impair the functioning of the Platform in any manner; v) reverse engineer the Platform as a whole or any part or aspect of it, or otherwise take actions that might discover source code or bypass or circumvent measures employed to prevent or limit access to any area or code of the Platform; vi) attempt to circumvent any content-filtering techniques we employ or attempt to access any feature or area of the Platform that you are not authorised to access; vii) use any robot, spider, crawler, scraper, script, browser extension, offline reader or other automated means or interface not authorised by us to access the Platform, extract data or otherwise interfere with or modify the rendering of the Platforms pages or functionality; viii) use data collected from the Platform to contact individuals, companies, or other persons or entities; ix) use data collected from the Platform for any direct marketing activity (including, without limitation, email marketing, SMS marketing, telemarketing, and direct marketing); x) bypass or ignore instructions that control automated access to the Platform; xi) use the Platform for any illegal or unauthorised purpose, or engage in, encourage or promote any activity that violates these Terms of Service. xii) manipulate the price of any products or interfere with any other user’s transactions; xiii) engage in any coercive, deceptive, and/or manipulative behaviour concerning a purchase, including using coercive, deceptive, and/or manipulative tactics; xiv) distribute or post spam, unsolicited or bulk electronic communications, chain letters, or pyramid schemes; xv) distribute viruses or any other technologies that may harm the Platform or the interests or property of users; xvi) post any hateful content; xvii) use the Platform to carry out any illegal activities, including but not limited to money laundering, terrorist financing, or deliberately engaging in activities designed to adversely affect the performance of the Platform; xviii) hack or attempt to hack into any system or network; xix) distribute or attempt to distribute malware, viruses or other harmful software; and xx) engage in fraudulent activities, including but not limited to phishing and identity theft. 7\) Disclaimers a) You understand and agree that the Platform and the content therein are provided on an “as is” and “as available” basis without warranties or conditions of any kind. We make no warranty that the Platform: i) will meet your requirements; ii) will be available on an uninterrupted, timely, secure, or error-free basis; or iii) will be accurate, reliable, complete, legal, or safe. b) We disclaim all other warranties or conditions, express or implied, including, without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, title and non-infringement as to the Platform, content contained therein. We do not represent or warrant that content on the Platform is accurate, complete, reliable, current or error-free. We will not be liable for any loss of any kind from any action taken or taken in reliance on material or information contained on the Platform. We cannot guarantee the security of any data that you disclose online. You accept the inherent security risks of providing information and dealing online over the internet and will not hold us responsible for any security breach unless it is due to our gross negligence. c) We will not be responsible or liable to you for any loss and take no responsibility for any use of digital assets, including but not limited to any losses, damages or claims arising from: i) user error such as forgotten passwords, incorrectly constructed transactions, or mistyped addresses; ii) server failure or data loss; iii) corrupted wallet files; iv) unauthorised access to applications; or v) any unauthorised third-party activities, including without limitation the use of viruses, phishing, brute-forcing or other means of attack against the Platform. d) We will not be held responsible for sustained damages due to vulnerability or any kind of failure, abnormal software behaviour, blockchains or any other features of the digital assets. We will not be held responsible for damages due to late reports by developers or representatives (or no report at all) of any issues with the blockchain supporting digital assets. e) We and our affiliates and licensors (a) make no representations or warranties of any kind, whether express, implied, statutory or otherwise regarding the offerings or the third-party content, and (b) disclaim all warranties, including any implied or express warranties (I) of merchantability, satisfactory quality, fitness for a particular purpose, non-infringement, or quiet enjoyment, (ii) arising out of any course of dealing or usage of trade, (iii) that the offerings or third-party content will be uninterrupted, error free or free of harmful components, and (iv) that any content will be secure or not otherwise lost or altered. f) Our Platform rely on emerging technologies, such as Ethereum. Our Platform is subject to increased risk through your potential misuse of things including but not limited to as public/private key cryptography, or failing to properly update or run software to accommodate protocol upgrades. By using the Platform, you explicitly acknowledge and accept these heightened risks. You represent that you are financially and technically sophisticated enough to understand the inherent risks associated with using the Platform. g) You further understand and accept that digital tokens present market volatility risk, technical software risks, regulatory risks, and cybersecurity risks. You understand that the cost and speed of a blockchain-based system is variable, that cost may increase dramatically at any time, and that cost and speed is not within the capability of our Platform to control. You understand that protocol upgrades may inadvertently contain bugs or security vulnerabilities that may result in loss of functionality and ultimately funds. Although we contributed to the initial code for the Platform, we do not provide, own, or control the Platform, which is run autonomously without any headcount by smart contracts deployed on blockchains such as Ethereum. Upgrades and modifications to the Platform are generally managed in a community-driven way by Mystiko decentralised autonomous organisation. 8\) Assumption of Risk a) You accept and acknowledge: i) Fluctuations in the price of other digital assets could materially and adversely affect the digital assets, which may also be subject to significant price volatility. We cannot guarantee that any purchasers of digital assets will not incur a loss of money. ii) You are solely responsible for determining what, if any, taxes apply to your transactions. We will not be responsible for determining the taxes that apply to individual or collective digital assets transactions. b) There are risks associated with using the Platform, including but not limited to the risk of hardware, software and internet connections, the risk of malicious software introduction, and the risk that third parties may obtain unauthorised access to information stored within your wallet. You accept and acknowledge that we will not be responsible for any communication failures, disruptions, errors, distortions or delays you may experience. c) The regulatory regime governing blockchain technologies, cryptocurrencies and tokens is uncertain, and new regulations or policies may adversely affect the development of the Platform and the utility of the digital assets. 9\) Limitation of Liability To the fullest extent permitted by law, in no event will we be liable to you or any third party for any lost profit or any indirect, consequential, exemplary, incidental, special or punitive damages arising from the use of the Platform, products or third party sites and products, or for any damages related to loss of revenue, loss of profits, loss of business or anticipated savings, loss of use, loss of goodwill, or loss of data, and whether caused by tort (including negligence), breach of contract or otherwise, even if foreseeable and even if we have been advised of the possibility of such damages. Access to and use of the Platform, products or third-party sites is done at your own discretion and risk. You will be solely responsible for any damage to your computer system or mobile device or loss of data resulting therefrom. 10\) Modifications to the Platform We reserve the right in our sole discretion to modify, suspend or discontinue, temporarily or permanently, the Platform or any features or parts thereof at any time and without liability or prior notification or consent from you. 11\) Dispute Resolution You agree to engage in good-faith efforts to resolve disputes prior to either party initiating an arbitration, small claims court proceeding, or equitable relief for intellectual property infringement. You agree that any dispute or claim relating in any way to your access or use of the Platform, to any products sold or distributed through the Platform, or to any aspect of your relationship with us will be resolved by binding arbitration, rather than in court. 12\) Severability and survival of the Terms of Service a) If any part or parts of this Terms of Service are found under the law to be invalid or unenforceable, then such specific part or parts shall be of no force and effect and shall be severed, and the remainder of the Terms of Service shall continue in full force and effect. b) These Terms of Service will survive the termination of your relationship with us. 13\) Governing Law These Terms of Service, your use of the Platform, your rights and obligations, and all actions contemplated by, arising out of or related to these Terms of Service shall be governed by the laws of the British Virgin Islands. Any dispute between the parties that is not subject to arbitration shall be resolved in the respective court. 14\) Miscellaneous These Terms of Service constitute the entire agreement between you and us relating to your access to and use of the Platform and the content therein. These Terms of Service, and any rights and licenses granted hereunder, may not be transferred or assigned by you without our prior written consent. Except as otherwise provided herein, these Terms of Service are intended solely for the benefit of the parties and are not intended to confer third-party beneficiary rights upon any other person or entity.
### **Annex 1 - Definition** “Disqualified Person/Entity” means (a) any person or body corporate seeking to access the Platform or use the Services from within the Excluded Jurisdictions; (b) any person (being a natural person) who is citizen of, domiciled in, or resident of, a country which laws prohibit or conflict with the access of the Platform or use of the Services; and/or (c) any body corporate that is incorporated in, domiciled in, or organised in, a country which laws prohibit or conflict with the access of the Platform or use of the Services; “Excluded Jurisdiction” means the jurisdictions listed below: 1. Afghanistan 2. Algeria 3. Bangladesh 4. Bolivia 5. Colombia 6. Democratic People’s Republic of Korea 7. Ecuador 8. Egypt 9. Iran 10. Iraq 11. Morocco 12. Nepal 13. Pakistan 14. People’s Republic of China 15. Qatar 16. Saudi Arabia 17. Tunisia 18. Türkiye 19. United Arab Emirates 20. United States of America 21. Vietnam 22. Any jurisdiction in which the Platform and/or the Services are prohibited, restricted or unauthorized in any form or manner whether in full or in part under the laws, regulatory requirements or rules in such jurisdiction\ ### **Annex 2 – Privacy Policy** This Privacy Policy (the “Policy”) explains how we collect, use, and share data in connection with the Platform and the Services. Your use of the Platform and the Services is subject to this Policy as well as our Terms of Service. **Data We Collect** Privacy is central to what we do. We understand that privacy is important to our users. We do not maintain user accounts and do not collect and store personal data, such as your name or internet protocol (“IP”) address. When you interact with the Services, we collect only: (a) Publicly-available blockchain data. When you use your wallet, we collect and log your wallet address (public blockchain address) to learn more about your use of the Services. Note that wallet addresses are publicly-available data that are not created or assigned by us or any central party, and by themselves are not personally identifying. (b) Transaction data: When you use the Services, we collect and log your transaction information and balance information, in order to comply with our legal obligations and prevent the use of our Services in connection with fraudulent or other illicit activities. (c) Survey or usability information. If you participate in a survey or usability study with us, we will record any biographical information you directly provide to us (for example, your name, email, and job title), the responses you provide to us, and your interactions with the Services. (d) Correspondence. We will receive any communications and information you provide directly to us via email, customer support, social media, or another support channel, or when you participate in any surveys or questionnaires. (e) Biographical information. If you apply for a job with us, we collect all information provided through our jobs form, including name, email phone, work and immigration status, and any other resume, cover letter, or free form text you include. **How We Use Data** We use the data we collect in accordance with your instructions, including any applicable terms in our Terms of Service, and as required by law. We may also use data for the following purposes: (a) Providing the Services. We use the data we collect to provide, maintain, customize and improve our Services and features of our Services. (b) Customer support. We may use information to provide customer support for and answer inquiries about the Services. (c) Safety and security. We may use data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, protect our users and the Platform and enforce our agreements and policies, including our Terms of Service. (d) Legal compliance. We may use the information we collect as needed or requested by regulators, government entities, and law enforcement to comply with applicable laws and regulations. (e) Aggregated data. We may use some of the information we collect or access to compile aggregated data that helps us learn more about how users use the Services and where we can improve your experience. **How We Share Data** We may share or disclose the data we collect: (a) With service providers. We may share your information with our service providers and vendors to assist us in providing, delivering, and improving the Services. For example, we may share your wallet address with service providers to provide technical infrastructure services, your wallet address with blockchain analytics providers to detect, prevent, and mitigate financial crime and other illicit or harmful activities, and your activity on our social media pages with our analytics provider to learn more about you interact with us and the Services. (b) To comply with our legal obligations. We may share your data in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedure. We may also share data when we believe it is necessary to prevent harm to our users, the Platform, or others, and to enforce our agreements and policies, including our Terms of Service. (c) Safety and Security. We may share data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, and protect our users, the Platform, and ecosystem. (d) Business changes. We may transfer or share data to another entity in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction. (e) With your consent. We may share your information any other time you provide us with your consent to do so. We do not share your information with any third parties for any marketing purposes whatsoever. **Third-Party Links and Sites** We may integrate technologies operated or controlled by other parties into parts of the Services. For example, the Services may include links that hyperlink to websites, platforms, and other services not operated or controlled by us. Please note that when you interact with these other parties, including when you leave the Platform, those parties may independently collect information about you and solicit information from you. You can learn more about how those parties collect and use your data by consulting their privacy policies and other terms. **Security** We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. You are responsible for all of your activity on the Services, including the security of your wallets. **Age Requirements** The Services are intended for a general audience and are not directed at children. We do not knowingly receive personal information from anyone under the age of 18 years old. If you believe we have received personal information about a child under the age of 18, please contact us at . **Changes to this Policy** If we make material changes to this Policy, we will notify you via the Services. Nevertheless, your continued use of the Services reflects your periodic review of this Policy and other terms and indicates your consent to them. **Contact Us** If you have any questions about this Policy or how we collect, use, or share your information, please contact us at . # Privacy Policy This Privacy Policy (the “Policy”) explains how we collect, use, and share data in connection with the Platform and the Services. Your use of the Platform and the Services is subject to this Policy as well as our Terms of Service.
## **Data We Collect** Privacy is central to what we do. We understand that privacy is important to our users. We do not maintain user accounts and do not collect and store personal data, such as your name or internet protocol (“IP”) address. When you interact with the Services, we collect only: 1. Publicly-available blockchain data. When you use your wallet, we collect and log your wallet address (public blockchain address) to learn more about your use of the Services. Note that wallet addresses are publicly-available data that are not created or assigned by us or any central party, and by themselves are not personally identifying. 2. Transaction data: When you use the Services, we collect and log your public transaction information and balance information on blockchain, in order to comply with our legal obligations and prevent the use of our Services in connection with fraudulent or other illicit activities. 3. Survey or usability information. If you participate in a survey or usability study with us, we will record any biographical information you directly provide to us (for example, your name, email, and job title), the responses you provide to us, and your interactions with the Services. 4. Correspondence. We will receive any communications and information you provide directly to us via email, customer support, social media, or another support channel, or when you participate in any surveys or questionnaires.
5. Biographical information. If you apply for a job with us, we collect all information provided through our jobs form, including name, email phone, work and immigration status, and any other resume, cover letter, or free form text you include. ## **How We Use Data** We use the data we collect in accordance with your instructions, including any applicable terms in our Terms of Service, and as required by law. We may also use data for the following purposes: 1. Providing the Services. We use the data we collect to provide, maintain, customize and improve our Services and features of our Services.
2. Customer support. We may use information to provide customer support for and answer inquiries about the Services. 3. Legal compliance. We may use the information we collect as needed or requested by regulators, government entities, and law enforcement to comply with applicable laws and regulations. 4. Safety and security. We may use data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, protect our users and the Platform and enforce our agreements and policies, including our Terms of Service. 5. Aggregated data. We may use some of the information we collect or access to compile aggregated data that helps us learn more about how users use the Services and where we can improve your experience. ## **How We Share Data** We may share or disclose the data we collect: 1. With service providers. We may share your information with our service providers and vendors to assist us in providing, delivering, and improving the Services. For example, we may share your wallet address with service providers, such as node provider, to provide technical infrastructure services, your wallet address with blockchain analytics providers to detect, prevent, and mitigate financial crime and other illicit or harmful activities, and your activity on our social media pages with our analytics provider to learn more about you interact with us and the Services. 2. To comply with our legal obligations. We may share your data in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedure. We may also share data when we believe it is necessary to prevent harm to our users, the Platform, or others, and to enforce our agreements and policies, including our Terms of Service. 3. Safety and Security. We may share data to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity. We may also use it to address security risks, solve potential security issues such as bugs, enforce our agreements, and protect our users, the Platform, and ecosystem. 4. Business changes. We may transfer or share data to another entity in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction. 5. With your consent. We may share your information any other time you provide us with your consent to do so. We do not share your information with any third parties for any marketing purposes whatsoever. ## Third-Party Links and Sites We may integrate technologies operated or controlled by other parties into parts of the Services. For example, the Services may include links that hyperlink to websites, platforms, and other services not operated or controlled by us. Please note that when you interact with these other parties, including when you leave the Platform, those parties may independently collect information about you and solicit information from you. You can learn more about how those parties collect and use your data by consulting their privacy policies and other terms. ## Security We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. You are responsible for all of your activity on the Services, including the security of your wallets. ## Age Requirements The Services are intended for a general audience and are not directed at children. We do not knowingly receive personal information from anyone under the age of 18 years old. If you believe we have received personal information about a child under the age of 18, please contact us at “”. ## Changes to this Policy If we make material changes to this Policy, we will notify you via the Services. Nevertheless, your continued use of the Services reflects your periodic review of this Policy and other terms, and indicates your consent to them. ## Contact Us If you have any questions about this Policy or how we collect, use, or share your information, please contact us at "".


# Tokenomics ## Introducing XZK · - XZK(ERC20) is the Mystiko.Network token. · XZK contract address: · XZK is the utility and governance token that operates the decentralized Mystiko.Network. · Mystiko.Network positions itself as: The base layer of Web3. The universal ZK SDK, enhancing the scalability, interoperability, and safety of blockchains. Mystiko’s SDK enables developers to build blockchain applications that reduce costs, scale effortlessly, securely interact across chains, and protect users’ on-chain data (account balances, transaction histories, etc.). ## Retrospection Since its inception, Mystiko.Network has served as the trustless and extensively decentralized infrastructure for zero-knowledge (ZK) technology within blockchains. The deployment of Mystiko.Network V1 mainnet occurred in late March 2023, and within a year of its launch, Mystiko.Network V1 has: · Supported over $270 million volume traded by over 136,000 unique addresses across 6 blockchains: Ethereum, BNB Chain, Polygon, Avalanche, Base and Linea. · Empowered over 1.25 million transaction users to save significant sums in ZK costs · Secured over $5 million in fee earnings for hundreds of ZK-Rollup miners and relayers in the network. Having proven product-market fit for blockchain’s ZK infrastructure with a platform that has thrived independently, Mystiko.Network is now particularly well positioned for community-led growth, development, and self-sustainability. Mystiko.Network positions itself as: · The base layer of Web3. · The universal ZK SDK, enhancing the scalability, interoperability, and security of blockchains. Mystiko’s SDK enables developers to build blockchain applications that reduce costs, scale effortlessly, securely interact across chains, and protect users’ on-chain data (account balances, transaction histories, etc.). To sustain such position, the introduction of XZK (ERC-20) serves this purpose, enabling shared community ownership and a vibrant, diverse, and dedicated governance system, which will actively guide the network towards the future. Inspired by peer network’s vision including Ethereum and Uniswap, Mystiko.Network has always embraced trust minimization from day one: it is crucial that governance is constrained to where it is strictly necessary. Therefore, the Mystiko governance framework is limited to contributing to both protocol development and usage as well as development of the broader Mystiko ecosystem. In doing so, XZK officially enshrines Mystiko as publicly-owned and self-sustainable infrastructure while continuing to carefully protect its indestructible and autonomous qualities. ## **XZK Allocation** 1 billion XZK have been minted at genesis. The initial allocation is as follows: | Category | Allocation | Release Schedule | | ------------------------------------------ | ----------- | ------------------------------------------------------- | | Private Round Backers | 200,000,000 | 1-year cliff after TGE, and then 2-year linear vesting | | Community Round Backers | 75,000,000 | 25% unlock at TGE, and then 12-month linear vesting | | Early User Rewards | 7,000,000 | 1 month cliff after TGE, and then 100% unlock | | Core Contributors/Advisors | 150,000,000 | 1-year cliff after TGE, and then 3-year linear vesting | | Ecosystem – Genesis Marketing | 50,000,000 | 25% unlock at TGE, and then 18-month linear vesting | | Ecosystem – Marketing & Community Building | 100,000,000 | 1 month cliff after TGE, and then 4-year linear vesting | | Community Incentives | 208,000,000 | Upon Request by Community | | Ecosystem – Application Developers | 110,000,000 | 1 month cliff after TGE, and then 4-year linear vesting | | Ecosystem - General | 100,000,000 | 1 month cliff after TGE, and then 4-year linear vesting | Below, you will find the XZK Distribution Vault details:
**Vault Private Round Backers**\ **Address:** 0x71D772DA2b2A97c02fc4115CEaDEF5f443592bc1\ **Allocation:** 200,000,000 **Vault Early User Rewards**\ **Address:** 0x746A5f25Cf2C0F0b77350b8F2Eb8F639cF92185d\ **Allocation:** 7,000,000 **Vault Contributors/Advisors**\ **Address:** 0xA7e41a5062E36C38A7e747CAe13E901F6449C4f7\ **Allocation:** 150,000,000 **Vault Ecosystem — Genesis Marketing**\ **Address:** 0x2D84BA48B8629F85F76d8C687115bE255c17947c\ **Allocation:** 50,000,000 **Vault Ecosystem — Marketing & Community Building**\ **Address:** 0x91AF7F02D8630d8e030cB08b73f014d0C3c83fA6\ **Allocation:** 100,000,000 **Vault Community Incentives**\ **Address:** 0xBcaCA26cEA5e68c7265998ceAeD97E8B29Bc25d6\ **Allocation:** 208,000,000 **Vault Ecosystem — Application Developers**\ **Address:** 0x0Eb2811c9F561f8cF0Ee5D1691F493f94Ab79b79\ **Allocation:** 100,000,000 **Vault Ecosystem — General**\ **Address:** 0x4B6Ebcc8E41A17F44dEA282E65BF97149d5E1d26\ **Allocation:** 110,000,000 **Vault Community Round Backers**\ **Address:** 0x8A1874A32c8B776765C30a077DE1287Ee678871F\ **Allocation:** 75,000,000 **Vault Total Allocation:** 1,000,000,000
## XZK operation utility XZK tokens are required to operate the network. Mystiko.Network’s operations rely on ZK-Rollup miners and relayers. To become ZK-Rollup miners/relayers, XZK token holders stake a reasonable amount of XZK. · ZK-Rollup miners are operators who help batch users’ transactions into a ZK-Rollup, thus making transactions cheaper · Relayers are operator who help users pay gas on the destination chain for better confidentiality ## **XZK Governance Functionality** XZK tokens are required to vote on network governance. Mystiko.Network is a self-governed decentralized community, in which technical/product/economic decisions are made through staked XZK token voting. · Any addresses with more than 1% of XZK supply delegated to it may propose governance actions, which contain finished, executable code. · When a proposal is created, the community can cast their votes during a 7-day voting period. If a majority, and at least 4% of XZK supply votes are cast for the proposal, it is queued, and may be executed in a minimum of 2 days. · XZK holders are responsible for ensuring that governance decisions are made in compliance with applicable laws and regulations. To help facilitate this, the fee switch has been initialized to a contract XZK holders can use to vote on tokens for which they will collect fees. The community is encouraged to consult knowledgeable legal and regulatory professionals before implementing any specific proposal. · After TGE, the core development team will continue to have no involvement in future protocol development, auditing, operating and other matters. Similarly, team members will not participate directly in governance for the foreseeable future, although they may delegate votes to protocol delegates without seeking to influence their voting decisions. ## Contracts XZK Token \*This is a draft allocation plan only, subject to changes