Donors can use Privacy Pools to contribute privately on EVM chains. Funds are deposited into a shared pool, then withdrawn to Igor's Safe multisig using a zero-knowledge proof. The proof verifies the donor isn't on any sanctions list, without revealing which deposit is theirs.
The Privacy Pool smart contract is non-custodial: it cannot freeze or redirect funds. Withdrawals are gated only by valid ZK proofs and nullifier checks (preventing double-spends). A relayer submits the withdrawal transaction so the donor's address never appears on-chain.
Once withdrawn, funds land in the same Safe multisig protected by the 2-of-3 keyholder system, the same custody model as direct EVM donations. Full technical details.