Gloam research report
Gloam
Research report
10 October 2026

The Gloam thesis

Private by default, provable on demand.

Stablecoins are becoming how businesses and AI agents pay each other, and every one of those payments is public. Gloam makes them private, and lets the payer prove exactly what someone needs to see.

$390Breal stablecoin payments in 2025, double 2024
58%of them are businesses paying businesses
0key holders, operators or proving servers to trust
<1sto prove a private payment on a laptop
01The problem

Every stablecoin payment is public.

On a public chain anyone can see who paid whom, how much, and when. Pay your team in USDC and every salary sits on the explorer. Pay a supplier and competitors read your costs. Run an AI agent and its spending shows what it buys.

Payroll today, on any explorer

Acme Labs to Ada8,400 USDG
Acme Labs to Tunde6,200 USDG
Acme Labs to Mei11,000 USDG
Acme Labs to a supplier42,500 USDG

The same payroll with Gloam

Private transfer●●●●●●
Private transfer●●●●●●
Private transfer●●●●●●
Private transfer●●●●●●

Illustration. Names and amounts are examples.

The people building stablecoin payments say the same thing. Paradigm's Matt Huang calls public payments "a non-starter for many businesses". Tempo's own launch post says payroll on a public ledger would publish every salary. JPMorgan lists privacy beside compliance and finality as what institutions need.

It is a safety problem too. Recorded in-person attacks on crypto holders doubled from 42 in 2024 to 86 in 2025. Address poisoning has taken at least $83.8M of stablecoins from people picked by their visible balances.

02Why now

The money moved on chain this year. Privacy did not come with it.

Payments doubled, and most of it is business

2025 real stablecoin payments by segment, $B (total $390B). 2026 is running at $401B to $527B for January to August. McKinsey and Artemis; Allium.

The payment chains launched in 2026

Stablecoins on each chain, $M, month end. Tempo went live 18 March, Robinhood Chain 1 July, Arc 16 September. DefiLlama, 10 Oct 2026.

People are starting to hold stablecoins privately

Stablecoins held in Railgun and Privacy Pools on Ethereum, $M. Still under 0.1% of the $311B supply. That gap is the opportunity. Derived from DefiLlama.

The rules now favour privacy you can prove

  • 5 Oct 2026: FinCEN withdrew its proposed rule against mixers.
  • Dec 2025: the SEC's privacy roundtable backed selective disclosure and zero-knowledge proofs.
  • 2025: courts struck down the Tornado Cash sanctions, and the DOJ said it will not charge developers for what users do.
  • What still applies: stablecoin issuers must be able to freeze. Gloam's design never stops them.
03The idea

A payment has one owner. So nobody else needs a key.

Privacy in crypto splits into two different jobs, and they need different tools.

Shared secrets

FHE and MPC

Many people's hidden data has to be combined: a sealed-bid auction, a private order book, a lending pool. Someone has to compute on it, so a group of servers holds the key.

Zama, Arcium

One owner

Zero-knowledge proofs on your device

Your money is yours alone. You prove the payment on your own device and the chain only checks the proof. No group, server or operator ever holds a key.

Gloam: payments, payroll, proof of funds

Payments are the biggest one-owner job in finance. That is where Gloam lives.

We do not invent new cryptography, and for payments we should not. Gloam uses the zero-knowledge maths Zcash has run on for years and builds the product on top, the way Stripe built payments people wanted on top of the card networks. Zama and Arcium spent years and over $100M building encryption engines for shared secrets. A payment does not need one.

The thesis

Privacy for payments should belong to the person who owns the money, not to a network that holds the keys.

When a committee or operator holds the keys, one breach can expose everyone, including every past payment. When the owner holds them, a breach exposes one person. That is the property finance needs, and it is the one Gloam is built on.

04How it works

Two ways to make a payment private.

Committee modelZama, Arcium, Tempo Zones

You send data The network computes on it A committee or operator holds the key

GloamClient-side proofs

Your device makes a proof The chain checks it Nobody else holds a key

Money goes into a shared private balance on the chain. Inside it, payments move as sealed notes that only the owner can open. A private payment proves in under a second on a laptop and runs on normal contracts on Tempo and Robinhood Chain. There is no admin withdraw, and any rule change waits three days in public.

You do thisThe public seesHidden
Add money privatelyYour wallet, the asset, the amountWhere the money goes next
Pay someone privatelyThat a private transfer happenedSender, recipient, asset, amount
Cash outThe asset, amount and receiving walletWhich deposit paid for it
Share a proofNothing; only the person you send it toEverything except the one fact proved
05Competition

Why Gloam wins on payments.

Every serious player now agrees payments need privacy. They differ on one question: who do you have to trust?

WhoWho can see your paymentsIf they are hackedLive on Tempo or Robinhood ChainProve one fact to one personPrivate payrollAgent payments
Gloam Only you One person is exposed Both, on testnet Yes, with a label and expiry CSV runs and schedules MPP, x402, MCP
Zama
FHE
Any quorum of its 13 key holders Every balance ever encrypted No Grants decryption rights Possible, not a product Not found
Arcium
MPC
A node cluster; safe while one node is honest That cluster's data No, Solana Not found Not found Not found
Tempo Zones
Operator chain
The zone operator sees everything The whole zone Tempo only, limited preview The operator sees all instead A stated use case, operator-run Not found
Helius Privacy
Server-made ZK
Helius's proving server Every proof it has made No, Solana devnet Auditor access Not found Not found
Railgun
Client-side ZK
Only you One person is exposed No, Ethereum and L2s Viewing keys show your whole history Not found Not found

"Not found" means we could not find it in public docs as of 10 October 2026. On a phone, scroll the table sideways.

vs Zama

FHE, $170M+ raised
What they are
An encryption company. Tokens stay encrypted and a coprocessor network computes on them.
Our edge
No key committee. Zama's 13 key holders share one global key, so a breach could unlock every balance ever encrypted. Gloam's keys never leave the owner, and a payment proves in under a second instead of running heavy encrypted maths.
Where they win
Computing on data many people share, such as sealed auctions and lending pools.

vs Arcium

MPC, Solana
What they are
A network of nodes that compute together on secret pieces of data, on Solana.
Our edge
No node cluster to trust or pay for each computation, and no lock-in to one chain. Gloam runs on plain contracts on any EVM chain, starting with the two built for payments.
Where they win
Private shared state on Solana, such as dark pools and private matching.

vs Tempo Zones

Tempo's own privacy
What they are
Private side chains on Tempo, each run by an operator.
Our edge
Zones hide payments from the public, but the operator sees everything and deposits and withdrawals stay public. With Gloam nobody but the owner sees inside, and the owner chooses what to prove.
Where they win
Enterprises that want an operator in the loop, built into Tempo itself.

vs Railgun and Cloak

Same design, other chains
What they are
Client-side ZK pools like Gloam. Railgun is on Ethereum with about $113M locked; Cloak is on Solana.
Our edge
Same trust model, but on Tempo and Robinhood Chain, with payroll, proofs for one reader that expire, and agent payment rails. Railgun's viewing keys hand over your whole history.
Where they win
Railgun has years live, a public multi-party setup and external audits.

vs Payy

$6M seed
What they are
A private stablecoin wallet and Visa card on its own ZK chain. The closest funded comparable.
Our edge
No new chain to move money to. Gloam works where stablecoin payroll already lands, with business tools (payroll, proofs) and agent payments.
Where they win
Consumer users and a card in hand today.

vs Helius Privacy

Solana devnet
What they are
Private transfers on Solana where Helius generates the proofs for you.
Our edge
Helius's server receives every secret input, including amounts. Gloam's inputs never leave your device.
Where they win
Fast on low-end phones, and Solana's reach.

We found no other product on Tempo or Robinhood Chain that combines owner-only privacy, proofs for one reader, and payroll and agent rails.

Where Gloam is behind today: testnet only, a single-person setup ceremony, internal audits only, and a small crowd to hide in. The risks page covers each one.

06Is this new?

Not new cryptography. A new building block for finance.

Judges will ask whether this has been done before. Here is the exact answer.

Not new, and we say so

  • The private pool. The design goes back to Zcash in 2016. Tornado, Railgun and Cloak use it too.
  • Showing part of your money. Zcash and Railgun have viewing keys, Privacy Pools proves where money came from, and Zama grants decryption rights.
  • The proof system. Groth16 proofs written in Circom, the same proven tools much of the industry uses.

New, as far as we found

  • Payroll total proof. A company proves a run of up to 32 payments adds up to exactly the total, all paid from its own money, without showing who got what. We found nothing like it.
  • Proofs sealed to one reader and a date. Who the proof is for, when it expires, and which chain and pool it covers are sealed into the proof. Change the label and the proof fails. Anyone checks it in a browser with no wallet.
  • Private payments for AI agents. Tempo and Stripe's machine payments spec had no private method; ours is the one proposed. Gloam also seals x402 payments and gives agents handles to money instead of secrets.

In crypto, a primitive is a building block other people build on. That is how Gloam ships these pieces: the payroll total proof and sealed proofs are open to any wallet, payroll tool or agent through the SDK, the API and the MCP server, so nobody has to build their own.

Honest limits: whoever receives a proof can still pass it on, and a proof of payment shows a payment was made, not yet which side of it you were on. Locking a proof to one named reader, and giving payees a key only they hold, are the next steps.

Gloam is not a new cipher. It is a new building block for finance: private payments you can prove.

07What we built

Proofs you can show to one person, for a set time.

Hiding money is not enough for a business. An auditor, a lender or a client needs to see something. Gloam lets the owner prove one fact and nothing else.

Other private systems hand over a viewing key, which shows your whole history forever. A Gloam proof names who it is for, expires, and can be checked by anyone in a browser with no wallet.

ProofWhat it showsWhat stays private
Proof of fundsYou hold at least XYour exact balance and wallet
Proof of paymentA private payment of at least X was madeWho paid, who received, and the rest of your money
Payroll totalA run of up to 32 payments adds up to exactly the total, all funded by the proverWho got what

For people

Private balances in stablecoins, ETH and Robinhood Chain stock tokens, private payments, claim links and payment requests.

For businesses

Private payroll from a CSV, scheduled runs, and the payroll total proof for auditors.

For AI agents

A private payment method for Tempo and Stripe's Machine Payments Protocol, private x402 payments, and an MCP server with spending limits.

08Roadmap

Payments first. Private trading is underway.

Gloam leads with stablecoins, payroll and agent payments because that is where the money is moving. It is not only stablecoins.

Today, on testnet

  • Private balances and payments in stablecoins, ETH and Robinhood Chain stock tokens
  • Private payroll with scheduled runs
  • Proofs of funds, payment and payroll total
  • Private payments for AI agents

Underway

  • A new engine for private trading. Trading mixes many people's orders, so it needs its own design. Our first version is built and switched off on-chain until the new engine is ready.
  • Proofs only one named reader can check
  • Payments the payer can no longer take back

Before real money

  • A public multi-party setup ceremony
  • An external audit of circuits and contracts
  • A capped launch on Tempo and Robinhood Chain
09Traction

Built and in people's hands in under three months.

First commit 14 July 2026. As of 10 October:

2

testnets live: Tempo and Robinhood Chain

100+

tester applications in about three days

88+

Telegram members in two days, with Glim, our AI helper, answering questions

4

packages on npm: SDK, MCP server, MPP plugin, app starter

93

contract tests, after two internal audits with fixes deployed

1

private payment method proposed to Tempo and Stripe's MPP spec

10Business model

Three ways Gloam makes money.

Transaction fees

0.1% on deposits and 0.1% on cash outs, from mainnet. Railgun charges 0.25% each way.

Payroll runs

A fee per payroll run with the auditor proof included, then team plans for approvals and accountant proofs.

API usage

Partner API and SDK usage, including proof checks for apps and agents.

People already pay for privacy. Railgun charges 0.25% in and 0.25% out of its pool and earned about $4.3M in fees over the last twelve months. Because Tempo and Arc may bundle basic privacy for free, Gloam prices what they do not offer: payroll, proofs and agent payments.

2030 base case, payment volume in $B (log scale). TAM: payments that need confidentiality, including agents. SAM: on the EVM chains Gloam serves, from self-custody payers. SOM: 2% of SAM. Assumes about $700B of real payments in 2026 growing 40% a year, 60% sensitive, 40% on EVM, 30% self-custody. At 0.10% to 0.25% the SOM is $4.8M to $12M a year in revenue.
11Go to market

Start with payroll. Grow into every business payment.

StepWhoWhy them
1. Land with payrollCrypto teams, DAOs and startups paying people in stablecoins on Tempo and Robinhood ChainDeel's stablecoin payouts settle on Tempo; Toku says public salaries were the blocker
2. Expand to business paymentsSuppliers, contractors and treasury moves for the same teamsBusiness to business is 58% of stablecoin payments, $226B in 2025
3. Distribute through builders and agentsWallets, payment apps and AI agents via the SDK, MCP, x402 and MPPAgent spending is public today and indexed by explorers
4. Partner with the chainsTempo and Robinhood Chain ecosystemsSelf-custody privacy for everyone Zones do not serve
5. Keep the community closeTesters become first users and ambassadors100+ applicants, an active Telegram, support at near-zero cost through Glim
12Why this pitch wins

Privacy wins when it is pitched as money.

Across five Colosseum hackathons, privacy projects took 6 of 180 placed awards. Payments and stablecoin projects took 30.

Every privacy project that placed opened with a user's problem and won through a money track. Projects that led with the technology stopped at honorable mention. So Gloam leads with private stablecoin payments for people, teams and agents, and uses the trust model as the reason a committee design cannot copy it.

Placed awards per hackathon by category. Colosseum winner announcements and Arena project pages.
13Risks and answers

What a tough judge will ask, and what we say.

Risk

The setup ceremony had one participant, so in theory that person could forge proofs.

Answer

A public multi-party ceremony, like Zcash and Railgun ran, before real money.

Risk

Audits so far are internal.

Answer

An external audit of circuits and contracts, then a capped launch.

Risk

A payer can take back a payment until the payee moves it.

Answer

Being fixed now: claiming a payment moves it to a note only the payee controls.

Risk

The crowd to hide in is small on testnet.

Answer

Payroll brings many payees at once, and agents bring volume.

Risk

A stablecoin issuer can freeze the pool contract.

Answer

Screen deposits so flagged funds never enter, so an issuer never needs to.

Risk

Privacy apps can fade, as Hinkal did.

Answer

Grow through payroll and payments that need privacy to work, not a pool people visit to hide.
14The 30-second answer

"What is Gloam standing on?"

Zama has FHE and Arcium has MPC. Both compute on encrypted data, and both need a committee to hold the key. Gloam stands on zero-knowledge proofs made on your own device. For payments that is the stronger foundation: every dollar has one owner, so nobody else ever needs a key, and a breach exposes one person instead of everyone. On top of it we built what finance actually asks for: proofs of funds, payment and payroll you can show to one person, for a set time. Private by default, provable on demand. Live on Tempo and Robinhood Chain testnets today.

Sources
  1. McKinsey and Artemis stablecoin payments study (Feb 2026), via CoinGeek, 11 Mar 2026; Allium, Stablecoins in cross-border payments 2026, 15 Sep 2026.
  2. DefiLlama stablecoin, chain and protocol APIs (Railgun, Privacy Pools), pulled 10 Oct 2026.
  3. Tempo blog, Privacy on Tempo and Introducing Tempo Zones, 16 Apr 2026; Tempo Zones docs; Matt Huang on X, 16 Apr 2026; JPMorgan Kinexys podcast, 2 Jun 2026.
  4. Zama KMS and litepaper docs; Decrypt on Zama's Series B, 25 Jun 2025; Arcium architecture docs; helius.dev/privacy and helius-labs repositories; L2BEAT Railgun page; The Block on Payy, 25 Mar 2026.
  5. FinCEN withdrawals notice, 5 Oct 2026; SEC privacy roundtable, 15 Dec 2025; Van Loon v. Treasury (5th Cir.); DOJ Blanche memo, 7 Apr 2025; GENIUS Act.
  6. Jameson Lopp's physical attack list; Tsuchiya et al., address poisoning, USENIX Security 2025.
  7. Colosseum hackathon winner posts 2024 to 2026 and Arena project pages; Crypto World's Fair rules.
  8. Gloam repository and testnet reads, 10 Oct 2026; Gui Bibeau's video review.