Your own node
The wallet talks to your node and no one else's — no third party ever sees your wallet exists.
In development · Rust-native · Open source
A Monero wallet built to disappear.
The ermine turns white in winter — not to hide that it exists, but to be indistinguishable from the snow. That's how your money should move.
0third-party serversyour node, your rules
0telemetry or trackerswe can't see you either
1Tor circuit per accountidentities never share a path
100%open sourceRust, end to end
Built to vanish. Built to prove it.
Five privacy pillars, one discipline: nothing ships on trust alone.
Tor isolation per account
Each identity walks its own Tor circuit. Your accounts can never be linked by the network.
Automated churn
Your history quietly sheds its past on a randomized schedule — the molt, automated.
Plausible deniability
A wallet that can honestly show nothing — decoy and duress wallets by design, not as an afterthought.
Proven, not promised
Every privacy invariant is enforced by a machine-checked assurance harness, built in the open.
Rust, end to end
Memory-safe from key handling to interface — no legacy C++ core, no bolted-on bindings.
Where the build stands
We build in the open, one proven slice at a time.
Now
- Architecture locked: Rust end to end, specs written in the open
- Phase 0: the full wallet loop on Monero stagenet — create, scan, sign, broadcast, restore
Next
- Your own node, bundled and supervised
- Per-account Tor stream isolation
- Automated churn with randomized timing
Later
- Plausible deniability: decoy & duress wallets
- Change-privacy controls
- Public assurance dashboard: every invariant, machine-checked
Support development
Ermine is unfunded, unsponsored, and will never sell your data — it can't see any. If you want this wallet to exist, the only fuel it takes is Monero.
446UKXAjf9PPHCaoiCz1cTCP5bcohbKTQS3c78CXPDVUWtXNuFy2b1UCkRgdAJL7MRbyD4t2eLFP9SgUqfqCu9oZ1tbzsiE
Scan with any Monero wallet
We build in the open.
No release yet. No downloads, no promises sold — just a wallet earning its claims one proven invariant at a time. Follow along.
Follow development