Tempo Zones

A Tempo Zone is a private execution environment attached to Tempo Mainnet. Inside a Tempo Zone, balances, transfers, and transaction history are invisible to block explorers, indexers, and other users on Tempo Mainnet. Each Tempo Zone runs its own sequencer and executes transactions independently.

Tempo Zones overview

Funds deposited into a Tempo Zone are locked in the Zone Portal contract on Tempo Mainnet. Validity proofs guarantee that the sequencer executed every transaction correctly. The sequencer orders and includes transactions, but cannot steal funds or forge state transitions.

Each Tempo Zone operates as a separate chain, so adding more zones increases throughput without congesting Tempo Mainnet. Tempo Zones share liquidity through Tempo Mainnet. A zone can withdraw tokens, swap them on the Stablecoin DEX, and deposit the result into another zone without exposing who placed the trade. See composable withdrawals for details.

Tempo Zones are private

Tempo Zones make a key trade-off: Each zone has a sequencer who sees all activity on the zone. Privacy depends on the integrity of whoever is running the sequencer. Thanks to this trade-off, they achieve what few other privacy solutions do: Great privacy with good UX.

Most privacy solutions offer either confidentiality (hide the amount) or anonymity (hide the sender). Tempo Zones provide both, and go further. Inside a Tempo Zone, balances, transaction history, and counterparty relationships are all invisible to outside observers. Block explorers and indexers see nothing. Other users cannot query your address.

The accounts specification describes how balance and allowance reads are restricted at the contract level, and the RPC specification covers how the JSON-RPC interface is scoped per account.

End-to-end privacy flow through a zone

Tempo Zones are compliant by design

Every TIP-20 token carries its issuer's compliance policy (whitelists, blacklists, freeze controls) via the TIP-403 registry. When deposited into a Tempo Zone, the policy is provably mirrored. The validity proof commits that every transaction in the batch followed the issuer's rules.

Policy inheritance from mainnet to zone

Tempo Zones are safe from theft

Validity proofs guarantee correct state transitions. Sequencers order transactions but cannot steal deposited funds. See the proving specification for how proofs are constructed and verified.

Tempo Zones are interoperable

Tempo Zones are interoperable with Tempo Mainnet and with each other. Deposits and withdrawals settle in seconds. A Tempo Zone can withdraw tokens, swap them on the Stablecoin DEX, and deposit the result into another Tempo Zone in a single operation. The bridging specification covers deposits, withdrawals, encrypted deposits for private on-ramps, and composable withdrawal callbacks for cross-zone transfers.

Github and Specifications

The zones repository is available on github, which also includes the full Tempo Zones specifications.

Reference

Architecture

System design, contract layout, sequencer management, and trust model.

Accounts

Private balances, private allowances, and account-scoped access control.

Bridging

Deposits, withdrawals, encrypted deposits, and composable withdrawal callbacks.

RPC

Authenticated JSON-RPC interface with per-account scoping and timing protections.

Execution & Gas

Fee tokens, gas accounting, fixed gas costs, and token management.

Proving

Batch submission, validity proofs, and the state transition function.

Was this helpful?

Suggest changes to this page