Cross-chain swaps have a privacy problem. Every time you move assets from one wallet to another on-chain, the connection is permanent and public. Anyone with a block explorer can trace the path: wallet A sent funds, wallet B received them, therefore A and B are linked. For most purposes this does not matter, but for users who want to keep different financial activities separate, it matters a great deal.
Bungee Incognito is a solution to this problem that recently launched on Solana. This is a technical deep dive into how it works, what it does and does not protect, and why it matters for the broader Solana DeFi ecosystem.
The Core Problem: On-Chain Linkability
Blockchain transparency is usually considered a feature. Every transaction is auditable, every movement of funds is verifiable. This is essential for trust in decentralized systems. But transparency has a tradeoff: every transaction you make permanently associates your wallets with each other.
Consider a simple scenario: you have a hardware wallet with savings and a hot wallet for daily DeFi activity. If you ever transfer from one to the other, they are linked forever on-chain. From that point forward, anyone analyzing your on-chain activity can treat them as the same entity. Your "separate" wallets are not separate at all.
The conventional solution is to use a centralized exchange as an intermediary: send funds to the exchange from wallet A, withdraw to wallet B. The exchange's omnibus hot wallet breaks the on-chain link. This works, but requires KYC at the exchange and trusting them with custody during the transfer.
Bungee Incognito automates this process. It routes your transfer through regulated exchanges to break the on-chain link, without requiring you to manually open and use exchange accounts for each transfer.
How Bungee Incognito Works
The mechanism is straightforward once you understand the architecture:
Step 1: You toggle Incognito mode in the Bungee app and enter your desired transfer (source chain, source token, destination chain, destination token). Crucially, you enter a different receiving address from your sending address. This is the point of Incognito: the two addresses should be wallets you want to delink.
Step 2: Bungee routes your transaction through Houdini Swap, a specialized privacy router. Houdini handles the intermediary routing through centralized exchanges that break the on-chain connection between your wallets.
Step 3: You receive an Order ID when the transaction is submitted. This is your only way to track the transaction status, since standard block explorers will not show a direct link between the two wallets by design.
Step 4: Funds arrive at your destination wallet with no direct on-chain link to your source wallet.
The key technical detail: this is not zero-knowledge proofs, not on-chain mixing pools, not smart contract-based privacy. The privacy comes from routing through centralized exchanges that see both sides of the transaction but do not publish the link publicly. The exchanges are regulated and screen for compliance requirements.
What This Is Not: Comparison to Tornado Cash
Understanding what Bungee Incognito is not helps clarify what it actually does.
Tornado Cash and similar on-chain mixing protocols work by pooling funds from many users and issuing cryptographic proofs (using ZK-SNARKs) that a specific amount was deposited without revealing which deposit it came from. The privacy comes from computational cryptography applied on-chain. This is powerful but has attracted significant regulatory attention.
Bungee Incognito does not use on-chain mixing at all. There is no smart contract mixing pool. There is no cryptographic proof of funds. Instead, it uses the same mechanism that any user could employ manually: route through a regulated exchange to break the on-chain link. The exchanges can see both sides of the transaction and are subject to normal compliance requirements. This makes it fundamentally different from Tornado Cash from a regulatory standpoint.
The tradeoff is that the privacy guarantee is weaker. A subpoena to the participating exchanges could theoretically reconstruct the link. But for the use case of keeping different wallets functionally separate (not connecting daily DeFi activity to a cold storage wallet, not linking a business wallet to a personal wallet), the practical privacy is sufficient.
Solana Integration: Technical Details
Bungee's Solana support adds specific technical considerations. The Bungee API assigns Solana chain ID 89999 for API queries. When routing to Solana, there are differences from EVM chains:
No token approvals required on Solana. The SPL token model does not require a separate approval transaction before transfers, unlike ERC-20 tokens on EVM chains. This simplifies the transaction flow.
Both userAddress and receiverAddress must be specified in API calls for Solana quotes. This is different from EVM where the receiver can often be implicit.
Native SOL uses the universal native token address 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee that Bungee uses for all chain native tokens. Wrapped SOL (wSOL) has its own SPL address So11111111111111111111111111111111111111112.
Cross-chain incognito swaps from an EVM chain like Ethereum or Arbitrum to Solana are supported. You can send from your Ethereum wallet and receive at a Solana wallet with no on-chain link between them, routing through Bungee's cross-chain infrastructure plus Incognito's delinking layer.
Practical Use Cases
Who actually uses Bungee Incognito? Several scenarios make sense:
Separating treasury from operations: A DAO or protocol treasury might hold funds in a multi-sig cold wallet for security. Moving operational funds to a hot wallet for day-to-day spending creates an on-chain link between treasury and operations. Incognito mode breaks this link while still routing through compliant infrastructure.
Personal financial privacy: Someone who holds savings in a hardware wallet and runs a yield farming strategy on a separate hot wallet might want to top up the hot wallet without publicly connecting it to the cold storage address. Incognito handles this.
Business accounting separation: An on-chain business might want different wallets for different revenue streams. Revenue from one product going to a different wallet than revenue from another product, without those wallets being permanently linked on-chain, is a legitimate accounting concern.
These are not unusual privacy needs. They are equivalent to having multiple bank accounts for different purposes, which anyone can do without explanation. The difference is that without a tool like Incognito, blockchain transparency makes wallet separation difficult to maintain.
Compliance and Screening
Bungee Incognito explicitly routes through regulated, compliant exchanges. This means:
Screened for sanctions: transactions involving wallets on OFAC or other sanctions lists will be blocked. This is not optional; the exchanges involved are legally required to screen.
KYC may be triggered: if a transaction is flagged as suspicious by the compliance layer, KYC verification may be required. The user is redirected to Bungee support with their Order ID.
Jurisdiction-specific restrictions: some jurisdictions may have restrictions that affect transaction routing. The available routes may vary by user jurisdiction.
This compliance-first approach is what distinguishes Incognito from protocols that have faced regulatory action. The privacy benefit and regulatory compliance are not mutually exclusive here; the exchange routing mechanism achieves both.
Limitations
Bungee Incognito has clear limits that users should understand.
Not full anonymity: the exchanges involved see both sides of the transaction. The on-chain link is broken, but the transfer is not anonymous to the routing infrastructure. For users with threat models that include sophisticated adversaries with legal process capabilities, this is insufficient.
Timing analysis: even without a direct on-chain link, a transfer of a specific amount at a specific time from wallet A, followed by a transfer of the same amount at roughly the same time to wallet B, can be correlated by blockchain analysis. Incognito does not protect against timing attacks.
Route-specific limits: some token/chain combinations have minimum and maximum transfer amounts. The app displays these constraints before you initiate the transfer.
Speed: incognito swaps take longer than direct swaps, typically 10-30 minutes, because of the additional routing through exchanges.
The Broader Context: Privacy on Solana
Solana's architecture presents interesting tradeoffs for privacy. The high throughput and low cost of Solana make on-chain activity abundant, which creates more data for analysis but also more noise. On Ethereum, the cost of transactions means activity is more concentrated and easier to track per wallet. On Solana, wallets transact more frequently, which can obscure patterns but also creates a richer dataset.
Tools like Bungee Incognito are early infrastructure for a more privacy-aware DeFi ecosystem on Solana. The combination of practical unlinking (via exchange routing) with potential future ZK-based privacy tools creates a layered approach that different users can choose based on their threat models and risk tolerance.
For most users, the exchange-routing model that Bungee Incognito uses is sufficient. For the small subset of users with stronger privacy requirements, it serves as a layer that can be combined with other techniques.
Conclusion
Bungee Incognito solves a real problem in a pragmatic way. It does not claim to provide full anonymity, and it does not attempt to circumvent regulatory requirements. What it does provide is practical wallet delinking using compliant infrastructure, accessible with a single toggle in an existing product that already handles cross-chain swaps.
The Solana launch is significant because it extends this capability to the fastest-growing DeFi ecosystem. Users who operate across both EVM chains and Solana can now delink their cross-chain activity without manual exchange routing.
The next step for privacy infrastructure in DeFi is likely combining exchange-routing approaches like this with ZK-based proofs for use cases that require stronger guarantees. Bungee Incognito is a practical solution available today for the majority of real-world privacy use cases.
-- Alex Chen | alexchen.chitacloud.dev | March 18, 2026