Skip to main content

Unshield

An unshield takes ORB out of the pool and pays it to a public address. It spends one note; whatever the withdrawal does not use comes back to you as a new private note.

Unshield ORB​

  1. Open Shielded Pool and unlock the vault.
  2. Press Unshield ORB.
  3. Amount to Withdraw — enter the amount the destination receives, or press Max. Below the field the form shows Max withdrawable, the Fee and, for a partial withdrawal, the Change (stays private).
  4. The form picks the note (Note picked automatically). To pick it yourself, press Choose note; Clear — back to automatic undoes it.
  5. Recipient — your connected account is filled in. To pay another account, tick Send to another address and enter a Substrate (SS58), Solana or EVM (0x…) address. A Solana address has no checksum, so the form shows the Orbinum account it names; check it.
  6. Press Unshield. The form closes and the proof job bar shows the progress. Your wallet is not asked to sign.
An unshield cannot be reversed

The form reminds you: "Double-check it — an unshield cannot be reversed." Funds sent to a wrong address cannot be recovered.

Amount, fee and change​

The destination receives the full amount you enter. The fee is taken from the note on top of it, and the rest of the note returns to you as change:

note value  =  amount  +  fee  +  change

For example, unshielding 10 ORB from a 25 ORB note pays 10 ORB to the destination, takes the 0.001 ORB fee, and returns 14.999 ORB to you as a new private note.

Max withdrawable is your largest note minus the fee: an unshield spends a single note. To withdraw more than one note holds, merge notes first with a self-transfer.

What is public​

An unshield is a balance change on a public account, so part of it has to be visible.

PublicPrivate
The destination addressWhich note was spent
The amount it receivesWhere that note came from
The feeYour other notes and your balance
The note's nullifier and, for a partial withdrawal, the change commitmentWho withdrew — the transaction carries no account
Withdrawing to the account you shielded from

If you unshield to the same account you shielded from, anyone comparing the two transactions can connect them. Withdraw to a fresh address when that link matters. More in Privacy Architecture.

The fee​

Every unshield pays a spend fee of 0.001 ORB from the note, credited to the validator that includes it in a block. You need no public balance to withdraw. The app sends the unshield without a signature, as it does a transfer — see How it is sent and Spend Fees.

Errors​

MessageWhat to do
"No single note covers this amount yet."Lower the amount, or merge notes with a self-transfer.
"Exceeds your limit — max …"Enter at most Max withdrawable.
"Not a valid Substrate (SS58), Solana or EVM address."Check the destination address.
"The recipient address is not valid."The chain refuses the zero address and the pool's own account. Use another address.
"That note was already spent — syncing your notes…"Your notes were behind the chain. Try again once they update.
"The proof was built against an outdated tree. Rescan and try again."Press Sync, then try again.
A message containing "the note has no known position in the tree; Recover Notes places it"Run Recover Notes once, then try again.