Overview
A trading desk that leaves fewer tracks.
Ardea is a Solana trading terminal that runs entirely in your browser. It does what fast terminals do: a live board of new pump.fun launches, one-click buys, token pages with live trades and holders, wallet tracking, limit orders and PnL. On top of that it gives you two things the others don't: Private mode, which buys from fresh wallets funded through Monero, and the Trail audit, which shows what wallet trackers can already link to you.
Non-custodial
You sign every trade, in your wallet or in wallets derived from your own signature. Ardea never holds funds.
Best-price routing
Every swap is routed by Jupiter across Solana's DEXs and pump.fun curves.
Private funding
Stealth wallets are paid by an exchange after a Monero hop, not by you, so no transfer runs from you to them.
Static and open
The app is plain files: HTML and JavaScript you can read, host or run locally.
Wallets
One signature, every wallet.
You connect a normal Solana wallet (Phantom, Solflare, Backpack and others). That is your main wallet. When you first use the instant wallet or Private mode, the terminal asks it to sign one fixed message. The signature never leaves your browser and is never stored. From it, the terminal derives:
SHA-256(signature ‖ path): ardea/instant/0 for the instant wallet, ardea/stealth/0, /1, /2… for stealth wallets.| Wallet | Signs with | Use it for |
|---|---|---|
| Main | Your wallet app, with a popup per trade | Holding funds, funding the others, careful trades |
| Instant | A key in this tab's memory, no popups | quick buys and presets when you trade from it, plus autopilot and snipes. Fund it directly or privately. |
| Stealth | A fresh key per private buy | Buys with no direct transfer from your main wallet |
Recovery
Solana signatures are deterministic: the same wallet signing the same message always produces the same signature. Sign again on any device and you get the same instant and stealth wallets back. Nothing secret needs to be backed up beyond your main wallet.
The terminal stores a short fingerprint of the signature (8 bytes of its hash, which reveals nothing). If your wallet ever signs differently, for example a different wallet app that signs messages another way, the terminal stops instead of opening a different set of wallets.
Every derived wallet has an Export key button, so you can import it into any Solana wallet.
Only sign the Ardea message on Ardea. Anyone holding that signature can rebuild your instant and stealth wallets; the message itself warns that it opens your private trading wallets. Some hardware-wallet setups can't sign messages; with those, instant and Private mode are unavailable and you trade from the main wallet.
Trading
From click to confirmed.
- The terminal asks Jupiter for a quote: your amount, slippage from the active preset, routes limited so the transaction has room for the fee.
- It fetches Jupiter's swap instructions, not a finished transaction, and assembles the transaction itself: compute budget, the fee transfer, the swap, cleanup.
- You sign. Main-wallet trades open a popup; instant and stealth trades sign in the tab.
- It sends the transaction, rebroadcasts it every 2 seconds until it lands or its blockhash expires, and reports the result.
Presets
Three presets set slippage, priority and Jito. Switch with 1 2 3 on a token page; edit them in Settings.
| Preset | Slippage | Priority fee | Jito tip | MEV-protect |
|---|---|---|---|---|
| P1 | 3% | High, up to 0.001 SOL | none | off |
| P2 | 10% | Very high, up to 0.003 SOL | 0.0005 SOL | off |
| P3 | 20% | Very high, up to 0.01 SOL | 0.001 SOL | on |
Jito and MEV-protect
With a tip set, the transaction pays it to one of Jito's tip accounts and is also sent to Jito's block engine, which helps it land in busy blocks. With MEV-protect on, the terminal simulates the transaction first and sends it only to Jito, never to a public RPC node, which keeps it away from sandwich bots watching the network.
Fees
0.5%, in SOL, in the open.
Every terminal trade pays a 0.5% fee in SOL, inside the same transaction as the swap. You see it in the trade panel and in your wallet's preview before you sign.
- Buys: 0.5% of the SOL you spend, transferred before the swap.
- Sells: 0.5% of the minimum SOL the route guarantees, transferred after the swap, so a fill better than the minimum is all yours.
- Private buys and arming: 0.5%, taken inside the Monero route as Houdini partner markup (0.25% on each of its two legs) and paid to Ardea's Houdini partner account. Your funding is one plain transfer to a one-time address, with no transfer to Ardea in it, so nothing on-chain marks it as an Ardea route.
- Not charged: stealth exits, deposits to and withdrawals from your instant wallet, and limit orders (Jupiter fills those).
Network costs are separate and go to Solana validators: the base fee, the priority fee from your preset, and a Jito tip if set. Jupiter's routing is free.
Arm a wallet
Do the slow part first. Fire when it counts.
A private route through Monero takes 10–40 minutes, too slow for a coin that's moving. Arming moves that wait to before you need it. You fund one to five clean stealth wallets through Monero ahead of time. Each one is armed once its SOL lands, and with Private mode on, any buy or ⚡ quick-buy fires the oldest armed wallet instantly.
- Choose a total and a number of wallets (one to five, up to 5 SOL each in beta). The total is split into uneven, non-round sizes.
- For each wallet the terminal derives the next fresh stealth wallet, checks the chain that it has never been used, opens a Houdini private-send order forced through Monero, and checks the order exactly as a private buy does. Anything off and it refuses.
- You approve every funding transfer in one wallet prompt: each a plain transfer to its order's one-time deposit address, nothing else. The 0.5% fee is taken inside the routes. The terminal sends them 3–15 seconds apart, at random.
- Each route crosses Monero in 10–40 minutes, in the background, and resumes after a reload. When a wallet's SOL lands it's marked armed.
- Firing uses the oldest armed wallet: it swaps its whole balance (keeping 0.01 SOL for fees and token-account rent) through Jupiter, signed in your tab, with no fee. Each armed wallet fires once.
- Disarming sends a wallet's SOL, or what's left after selling, back to your wallet through the same Monero route.
Why it's more private, not just faster
The simplest way to unmask a private buy is to match it to its funding: SOL leaves your wallet, a similar amount reaches a fresh wallet, and that wallet buys soon after. Arming breaks that pattern. The funding happens earlier, at uneven sizes, at random intervals, and the buy happens whenever you fire, with whatever arrived after the route's fees.
What arming doesn't change. Houdini sees both ends of each route, and each exchange sees its own leg. An armed wallet's key lives in your browser, derived from your wallet's signature like every stealth wallet: anyone with that signature could rebuild it, so keep in armed wallets only what you mean to trade. Arming makes tracing slower and less certain; it doesn't make it impossible.
Private mode · through Monero
Monero pays your stealth wallet. You never do.
Trackers link wallets by following SOL: whoever funds a wallet is assumed to own it. Private mode breaks that link by never sending SOL from your wallet to the stealth wallet. Instead your SOL crosses Monero, whose ring signatures, stealth addresses and RingCT hide sender, receiver and amount on its own chain. Houdini Swap's private send runs the route: one exchange swaps your SOL to XMR, the XMR moves on Monero, and an unrelated exchange swaps it back to SOL and pays the stealth wallet from its own hot wallet. You never hold XMR or need a Monero wallet.
- The terminal derives the next stealth wallet from your signature and checks the chain that it has never been used, so a cleared browser or a new device never reuses one.
- It asks Houdini for a private-send quote with Monero forced as the bridge (
useXmr=true), takes the best private route, and opens the order with the stealth wallet as receiver and your wallet for refunds. If no Monero route is available, nothing is sent; there is no other path. - It checks the order before you sign: it must pay exactly the stealth wallet, swap SOL to SOL on Solana, be a private (anonymous) route, keep the amount, use a deposit address that isn't one of yours, need no memo, and not expire too soon. Otherwise it refuses.
- You approve one transaction: a plain transfer of the amount to the order's one-time deposit address, nothing else. The 0.5% fee is taken inside the route. The terminal shows the SOL that will arrive and the route time first.
- The route runs in the background, usually 10–40 minutes (exchange confirmations plus Monero's confirmation and lock time). Some exchanges wait for 20 Monero confirmations before swapping back, about 40 minutes on their own, so a route can take up to about an hour. The terminal prefers the fastest route within 2% of the best payout, and the route tracker shows exactly where each one is. The terminal stays usable, follows the order's status, and picks it back up if you reload.
- When the SOL lands, Strong mode (the default) waits a random 30 seconds to 3 minutes, then the stealth wallet buys on Jupiter, keeping 0.01 SOL for network fees and token-account rent. Fast mode buys on arrival.
Exiting
What it costs
The Ardea fee, Solana network fees, and the route's own cost: two exchange swaps, network fees and Houdini's commission, all inside the quote. It's roughly double a single swap, so the terminal shows exactly how much SOL arrives before you sign, and each route has a minimum amount. Private buys are capped at 5 SOL while Private mode is in beta.
If something goes wrong
A route that can't complete is refunded by the exchange to the wallet that sent it, and Houdini's support can trace any order by its id, which Portfolio keeps. Stealth wallets can always be rebuilt by signing again, and Portfolio scans your stealth wallets on-chain and lists every one with funds, with buttons to exit or export its key, so nothing is stranded. If you've made many stealth wallets, Scan further looks deeper.
What Private mode does not do. Nothing makes a wallet untraceable. Houdini sees both ends of a route and keeps order data for 72 hours; each exchange sees its own leg. An observer who sees SOL leave your wallet and a similar amount reach a fresh wallet later can guess; the route's fees change the amount and its 10–40 minutes plus Strong mode's random wait blur the timing, which makes that harder, not impossible. Vary amounts, and don't send funds between stealth wallets and wallets you've used publicly. Private mode makes tracing expensive and uncertain; it doesn't make it impossible. Ardea doesn't run a mixer and never touches the funds in transit.
Why Monero
Monero is the one widely used chain where sender, receiver and amount are hidden by default for everyone, so the hop in the middle isn't a public record a tracker can read. The trade-off is time and cost: two exchange hops and Monero's lock time make a route slower and pricier than a bridge. That's why the terminal funds a stealth wallet once and lets you keep trading while the route runs.
Proof
Don't take our word for it. Check it.
Four things you can verify yourself, without trusting this page. The complete, plain-HTML record of every proof route, each matched to Houdini's own order data, is at ardeafinance.xyz/proof.
1. A live route, right now
This asks Houdini Swap, from your browser through the Ardea gateway, for a real private SOL → XMR → SOL quote with Monero forced as the bridge, exactly as a private buy does, and shows the raw answer: the route, what would arrive, how long it takes and the minimum. It's a quote only: no order is opened and nothing is sent.
2. Transactions on-chain
Private buys and exits made through the terminal, each linked to Solscan so you can see what the chain shows: the funding goes to an exchange's one-time deposit address, and the stealth wallet is paid by a different exchange's wallet after the Monero hop.
| Step | What to look for | Transaction |
|---|
3. A route every day, on the chain
Ardea runs two proof wallets of its own. On a schedule the fuller one sends a small amount to the other through the same Monero route a private buy uses (proof.mjs). This table is read live from Solana, not from our server: every transfer each wallet received should come from an exchange's wallet after a route, and none from the other proof wallet.
Reading the proof wallets…
4. The code
Private mode is stealth.js (the Monero route, order checks, transactions) and the private-buy flow in terminal.js, served as plain files you can read in your browser: stealth.js, terminal.js, config.js.
Pulse data
Where the board comes from.
Pulse is three live columns: New pairs, Final stretch (tokens past 60% of their bonding curve, adjustable) and Migrated. Each token is merged from several sources by its mint address.
- Live trades on a token page come from the chain: pump.fun trades are decoded straight from program logs, other DEX trades from the transaction's balance changes.
- Holders come from the token's largest accounts, with the bonding curve and the dev wallet labelled, plus mint and freeze authority.
- Charts are DexScreener's. Images and socials come from the token's own metadata. If a token arrives without it (a migration, a pasted address), the terminal reads its metadata account on-chain. Images are tried through several IPFS gateways, and an avatar drawn from the address shows until one loads. Every card links straight to the token's X, Telegram, website, pump.fun and DexScreener pages.
- Hover a column to pause it while you read. Filters by market cap, name and socials apply live.
Orders
Orders that run without you, and orders that run with you.
Migration sniper
Tap on a Pulse card to arm a snipe. When PumpPortal reports that token's migration, or the on-chain curve shows it complete, the instant wallet buys right away, and can set take-profit and stop-loss rules for the new position (Settings → After a snipe). Like autopilot, it needs the tab open.
The autopilot chip in the top bar counts armed rules and snipes. Portfolio → Orders lists all of them.
Tracker & PnL
Follow wallets. Keep score.
Tracker checks any wallets you add every 20 seconds and lists their new swaps, read from the chain. on a row buys the same token with your quick-buy amount, from whichever wallet you trade from (main or instant).
Portfolio shows each wallet's positions with average cost and realized and unrealized PnL, priced in SOL. It counts trades made in the terminal; Import on-chain history reads the wallet's last 100 transactions so trades made elsewhere count too. Private buys are logged under the main wallet that paid for them. Everything is stored in this browser only.
Trail audit
What trackers already know.
The Trail audit reads any wallet's public history and scores how linkable it is, 0 to 100, the way commercial trackers score it. It's read-only: nothing to connect or sign. Your browser sends its queries through Ardea's gateway to the RPC node, or straight to your own node if you set one under RPC node.
It reads up to 100 recent transactions, the earliest ones it can reach, and one hop out to the funder and the most-linked wallets. It also flags address-poisoning attempts. Scores: Low under 25, Moderate 25–49, High 50–74, Exposed 75 and up.
Infrastructure
Keys stay off the page.
Anything in a static site is public, so API keys can't live in it. Instead every browser sends its requests to Ardea's gateway, a small server that holds the keys and forwards them, so all visitors share paid capacity instead of free, rate-limited endpoints:
Rather not go through the gateway for reads? Paste your own RPC URL (Helius, Triton, QuickNode) in the terminal's Settings, or under RPC node in the Trail audit, and your browser reads the chain from that node directly.
Token
Utility tied to the fees.
The token's contract address is published here, on the landing page and on X at launch, identical everywhere. Nothing on this page is an offer or financial advice. Fee tiers are built into the terminal (tiers.js) and switch on as soon as the contract address is set. The other three are planned, not live yet; each will be announced on X when it ships. All of them run on the fee the terminal already earns in SOL:
Fee tiers · live at launch
Hold 0.1% of supply: 0.4%. 0.5%: 0.3%. 1%: 0.25%, instead of the 0.5% base fee. Your main and instant wallets count together, read from the chain.
Buybacks
A share of SOL fees buys the token back.
Private limits
Holders get higher Private mode limits per buy.
Referrals
A cut of referred traders' fees, paid in the token.
Security
What lives where.
| Thing | Where it is |
|---|---|
| Main wallet keys | Your wallet app. Never seen by the terminal. |
| Ardea signature, instant and stealth keys | This tab's memory only. Gone when you close the tab or disconnect; rebuilt by signing again. |
| Settings, watchlist, tracked wallets, trade log, rules | This browser's local storage. Never uploaded. |
| Stealth wallet list (addresses, route status) | This browser's local storage, under your main wallet's address. It links the two, so clear site data on a shared computer. The terminal can rebuild it from the chain. |
| Limit orders | On-chain, in Jupiter's Trigger program, under your wallet. |
| Private routes in transit | The route's exchanges (via Houdini), refundable to the sender. |
- Check the transaction preview in your wallet. A Ardea buy shows the swap, one fee transfer to the Ardea treasury, and a Jito tip if your preset sets one. Nothing else.
- Keep the instant wallet to trading money. Its key sits in an open browser tab.
- Bookmark the site. Never sign the Ardea message anywhere else.
Shortcuts
Keyboard.
| Key | Does |
|---|---|
| / | Search tokens by name, ticker or mint |
| P | Back to Pulse |
| B / S | Buy / sell on a token page, focus the amount |
| 1 2 3 | Switch preset on a token page |
| ↑ ↓ Enter Esc | Move through search results, open, close |
FAQ
Questions.
Can Ardea take my funds?
No. It has no server holding funds or wallet keys, and its gateway only forwards requests: it never signs anything. Every transaction is built in your browser and signed by you or by a key derived from your own signature. Private funds in transit are held by the route's exchanges and refunded to you if a route fails.
Why did my trade fail?
Usually the price moved past your slippage, or the transaction didn't land before it expired. Nothing but the network fee is spent when a swap fails. Try a faster preset or more slippage.
Is Private mode anonymous?
No tool makes you anonymous. Private mode removes the direct on-chain link between your wallet and the wallet that buys. Timing and amounts can still be matched by someone watching closely, so vary them.
Where are my instant and stealth wallets if I clear my browser?
Their keys were never stored, so nothing is lost. Connect the same main wallet, sign the same message, and they come back with their balances. Clearing the browser also deletes the local list linking your stealth wallets to your main wallet; the terminal finds them again on-chain.
Do limit orders pay the 0.5% fee?
Not today. Jupiter fills limit orders itself; terminal market trades and private buys pay the fee.
Why is a sniper or stop loss tied to the open tab?
Because it signs from the instant wallet, whose key only exists in your tab. Nothing on a server can sign for you. For orders that must fill while you're away, use a limit order.