Local Verification

Sanke Wallet verifies everything locally — no RPCs, no centralized servers, no hidden intermediaries.
Most wallets depend on centralized RPC providers to read state, simulate transactions, fetch balances, and broadcast activity. If those RPCs go down, censor traffic, log metadata, or serve incorrect state, the wallet becomes unreliable — and the user becomes exposed.
Sanke removes this dependency entirely by running verification on your device, powered by Kohaku’s light client + minimal execution stack.
Why Local Verification Matters
Centralized RPC = a single point of failure.
RPCs can:
See your IP, metadata, and transaction patterns
Censor requests
Serve manipulated responses
Log every dApp interaction you make
Break during congestion (preventing swaps, buys, mints)
Local verification ensures:
Data never leaves your device
Your wallet works even if RPCs fail
You get honest, verifiable blockchain state
No metadata leakage
Local verification is the foundation of private, reliable onchain activity.
How Sanke Verifies State Locally
Sanke uses Kohaku’s state-verification pipeline:
1. Helios Light Client in the Browser
Sanke runs a light client directly inside the extension. It verifies:
recent block headers
validator signatures
execution payload integrity
Your device confirms chain state without trusting any provider.
2. Minimal Execution Layer (Local eth_call)
Instead of asking RPCs to simulate transactions, Sanke performs:
local eth_call execution
local storage lookups
Backed by:
TEE + ORAM, with future goals of pure cryptography (PIR)
Oblivious state reads so no one knows what storage slots you're querying
This prevents RPCs from learning:
what dApp you’re interacting with
what contract method you’re calling
what storage slot you touched
3. Secure Fallback (Killswitch-Protected)
If a fallback RPC is ever needed:
You explicitly approve it
A killswitch can disable RPC completely
Sanke hijacks RPC traffic to prevent accidental leakage
ERC-7811 asset discovery happens privately
Fallback is allowed only when:
the light client is syncing
or the user opts in
The system always prioritizes privacy-preserving paths.
How Sanke Broadcasts Transactions Without RPCs
Sanke can broadcast transactions through:
p2p relaying (optional)
Kohaku’s decentralized broadcast flow
Fallback RPC if user allows (opt-in)
Broadcasting does NOT reveal:
your address
your IP
your activity graph
Even broadcasting remains privacy-preserving.
What Users Experience
Despite sophisticated cryptography under the hood, the UX remains simple:
Balances update reliably
dApps load instantly
Simulations are accurate and trustless
No “RPC overloaded” or “network error” moments
No metadata leakage during interaction
Local verification is invisible — but it changes everything.
Why This Matters for Privacy
Every wallet leak starts with metadata:
when you load a dApp
when you check balance
when you simulate swaps
when you sign
when your RPC sees your IP
Sanke prevents all of these by verifying locally.
A private wallet cannot rely on centralized RPCs. Local verification is the only path.
Where This Is Going
As Kohaku evolves, Sanke will adopt:
full private execution reads (pure cryptographic PIR)
zk-EVM client-side verification
private pre-confirmations
privacy-first account abstraction flows
Sanke becomes the first wallet designed for the next era of trustless, private Ethereum.
Last updated