Transaction-BoundZero-Knowledge 2FA
The first TOTP wallet with cryptographically bound proofs. Each transaction requires a ZK proof tied to its exact parameters—making intercepted proofs useless for attackers.
Architecture Overview
Three-layer security architecture combining circuits, contracts, and frontend
Authentication Flow
From TOTP generation to on-chain verification
TOTP code generated locally from secret
Proof generated without revealing secret
On-chain verification without secret access
Authorized and executed securely
Key Innovations
What makes ChronoVault different from other TOTP wallets
How It Works
Secure authentication without exposing secrets on-chain
Transaction Commitment Calculation
Frontend calculates commitment = hash(to, value, data, nonce) % FIELD_PRIME, binding proof to exact transaction parameters
Two-Device Proof Generation
Authenticator device scans QR, generates ZK proof with TOTP secret + commitment, displays proof as 3 auto-cycling QR codes
On-Chain Verification
Smart contract verifies proof's commitment matches actual transaction—changing any parameter invalidates the proof
One-Time Use + Execution
Time counter marked as used, preventing replay attacks. Transaction executes only after all verifications pass
Technology Stack
Built with cutting-edge Web3 and cryptographic technologies
What Makes This Different?
Unlike existing TOTP wallet solutions that pre-compute and hash future codes into Merkle trees, ChronoVault implements the actual TOTP algorithm (RFC 6238) inside zero-knowledge circuits.
Eliminates need for client-side storage of authentication data
Removes vulnerability of brute-forcing pre-hashed values if client is compromised
Provides true cryptographic proof of secret knowledge rather than Merkle inclusion proofs
Combines usability of Google Authenticator with genuine zero-knowledge security