Your keys stay with you
Everything sensitive happens in the app running in your browser. It holds your keys, builds the privacy proofs, decrypts your private balance so only you can see it, and signs every transaction. The Void DEX server only ever handles public data: price quotes, token lists and market prices. It prepares an unsigned transaction with the best route, and you sign it locally.
The design assumes the server could be compromised one day. Even then, it never sees your private key, your viewing key, your balance or which funds are yours, so a breach could not steal funds or reveal your trading history.
