bitcoinghost
Pay

Ghost Pay.

Instant Bitcoin payments, shielded notes, Wraith mixing. Self-custodial L2 that settles to L1 on every block.

Get the app → Read the docs
payments (24h) —
wraith rounds (24h) —
settlements (24h) —
fee pool pending —
how it works

Private payments that settle.

Ghost Pay is an L2 on top of Bitcoin Ghost. Payments are confirmed instantly against shielded notes, mixed through Wraith when you want privacy, and settled on-chain every epoch. No custodian, no API keys, no chargebacks.

payment lifecycle

How the L2 actually works.

Ghost Pay is a shielded L2 on top of Bitcoin Ghost — a thin layer of cryptographic commitments that moves Bitcoin privately and instantly, then settles on L1 on a predictable cadence. Five stages in the lifecycle of any payment.

  1. 1
    Lock
    Send BTC to a Ghost Pay vault address on L1 — a P2TR output protected by a timelocked script. The sats are now held in a contract only spendable by verified L2 state transitions.
  2. 2
    Mint shielded notes
    The lock transaction triggers the mint of fixed-denomination shielded notes on L2. Each note is a Pedersen commitment — the amount is hidden, only the commitment sits on-chain.
  3. 3
    Spend, split, merge
    Transfer notes to other recipients instantly. Each spend is a zero-knowledge proof that you own the note and that inputs equal outputs — without ever revealing amounts or sender. Confirmation is sub-second.
  4. 4
    Mix through Wraith (optional)
    Join a Wraith round. Participants pool shielded inputs, run a coordinator-free protocol, and receive unlinkable outputs. Breaks the transaction graph whenever the user wants to — no one else's business.
  5. 5
    Unshield to L1
    When a holder wants to exit the L2, they burn their notes and claim the underlying BTC at a destination L1 address. The claim is included in the next epoch's settlement batch, which Ghost Pool nodes sign and broadcast to Bitcoin Ghost mainnet.
Settlement runs continuously — every L2 epoch (~1000 seconds by default) the batch of unshields gets assembled into a single L1 transaction, BFT-signed by node operators, and broadcast. Fees from the batch feed the node reward pool on the same decay schedule as block subsidy.
lifetime activity

Payments processed so far.

Pool-wide aggregates across all settlement batches. Counts only — no per-payment detail is exposed for any reason.

total payments
—
all-time L2 payments accepted
wraith sessions
—
— active right now
settlements on L1
—
batches posted on-chain
L2 fees collected across all settlements feed the node reward pool — see the Core page's lifetime totals for the pool-wide running sum.
shielded activity

Notes currently in circulation.

Unspent shielded notes are Pedersen commitments — the on-chain record reveals neither amount nor owner. Count only, no identities.

unspent shielded notes
—
total active commitments
roadmap

Where Pay is going.

shipped
  • Shielded-note L2 with ZK circuits
  • Wraith coordinator-free mixing rounds
  • L2 fee split wired to node reward pool
  • Cumulative L2-fee accumulator
active
  • Ghost Tap wallet (iOS / Android / desktop)
  • Live Pay dashboard on bitcoinghost.org
  • Settlement batching to reconciliation_state
  • Merchant terminal (Ghost Tap merchant mode)
  • Ghost Glyph readable addresses
  • GSP light-wallet backend v2
  • Multi-recipient payments in one L2 tx
  • Post-quantum signature support