The best financial rails are public: that is where the liquidity, composability, and network effects live. But operating on public chains creates an impossible tradeoff for institutional capital. Every balance update leaks position size, and every transfer reveals who you do business with.
Migrating to isolated private chains or permissioned sidechains is not a solution. It fragments liquidity, introduces bridge risk, and cuts you off from open financial rails. TACEO Merces eliminates the tradeoff by bringing full privacy to public chains, and not only to a transfer: to the registers, vaults and netting arrangements that finance actually runs on.
The privacy layer for onchain finance
TACEO Merces brings flexible privacy to the chains you already build on. By wrapping standard tokens into encrypted state, Merces conceals senders, receivers, balances, and transfer graphs, allowing institutions to access public liquidity without broadcasting commercial intelligence.
Backed by a published specification and a full UC security proof, Merces executes joint state updates across offchain MPC nodes and settles cryptographically on public smart contracts. Private state is never reconstructed by any single party. Deposits and withdrawals cross the public boundary, as they must; everything inside stays secret-shared.
Live on mainnet
Private accounts holding wrapped tokens, with two transfer modes. Confidential transfers encrypt asset and amount while sender and recipient stay visible. Private transfers encrypt all four. Card payment integration on top.
Live on testnets
Private balances deployed into lending, vaults, and other DeFi on the same chain, with yield returning to the private balance. The liquidity you moved onto public rails stays reachable.
Early access
Live on mainnet
Privacy without compliance cannot support institutional capital.
TACEO Merces integrates three programmable cryptographic levers that satisfy global regulatory requirements without broadcasting transaction graphs to the public.
AML and sanctions screening runs per transaction through a pluggable compliance engine. Predicate is the default provider; any compatible provider can take the slot, or you can run the stack you already operate.
Screening currently applies to confidential transfers.
No key exists that decrypts the ledger, and no party holds one. Decryption of specific transactions is performed by the network under threshold cooperation, on an authorised request, and exposes nothing beyond the transactions named in that request. Each disclosure is scoped and recorded.
Every state change is proved and verified onchain. An auditor can confirm the system behaved correctly, and that no unauthorised disclosure occurred, without any transaction being decrypted.
TACEO Merces is published as IACR ePrint 2026/850, with a full UC security proof. The integrity guarantees hold even if the entire MPC network is compromised.
Performance
We deploy the Merces contracts to your target chain. You install the SDK, in Rust or TypeScript, and point it at them. By the end of the week you can create private accounts and move value between them from your own application.
Your real flows, running end to end with a controlled group of users. Optional WebSocket gateway for live balance updates. The compliance engine wired to your policies, screening live transactions.
Hardened, with your compliance levers configured and operating. Monitoring and alerting in place. You ship.
Let's talk about your integration.
