ZKID on HashKey Chain

Prove Compliance.
Preserve Privacy.

HSK Passport enables privacy-preserving KYC verification on HashKey Chain. Issuers grant credentials. Users prove them with zero-knowledge proofs. dApps verify without seeing any personal data.

Try the DemoIntegrate

How It Works

1

Issuer Verifies

A trusted issuer (e.g., HashKey Exchange) verifies a user's KYC off-chain and adds their cryptographic identity commitment to a credential group on-chain.

2

User Proves

The user generates a zero-knowledge proof in their browser: "I am a member of the KYC_VERIFIED group." No personal data leaves the device.

3

dApp Verifies

Any dApp on HashKey Chain calls verifyCredential() — gets a boolean result. Zero personal data on-chain. Full compliance.

Architecture

  Issuer (KYC Provider)          HSK Passport Contract          dApp (RWA, DeFi, etc.)
  ┌───────────────────┐         ┌──────────────────────┐        ┌──────────────────┐
  │                   │         │                      │        │                  │
  │  Off-chain KYC    │────────>│  Semaphore Groups     │<───────│  verifyProof()   │
  │  verification     │  issue  │  (Merkle trees of    │ verify │  => true/false   │
  │                   │  cred   │   identity commits)  │        │                  │
  └───────────────────┘         └──────────┬───────────┘        └──────────────────┘
                                           │
                                           │ ZK proof
                                           │
                                ┌──────────┴───────────┐
                                │     User Browser      │
                                │                       │
                                │  Semaphore Identity    │
                                │  + Proof Generation    │
                                │  (WASM, client-side)   │
                                └───────────────────────┘

Why HSK Passport

Privacy by Default

Users prove credential ownership without revealing identity. Powered by Groth16 zero-knowledge proofs via Semaphore v4.

Compliance Ready

Multiple credential groups: KYC Verified, Accredited Investor, HK Resident. Each with independent issuance and revocation.

One-Line Integration

Any dApp on HashKey Chain can gate access with a single require(passport.verifyCredential(...)) call.

Revocable Credentials

Issuers can revoke credentials at any time. Revoked users' proofs immediately fail verification.

Client-Side Proofs

Proof generation runs entirely in the browser via WASM. No personal data ever touches a server.

Built for HashKey

Designed for HashKey Chain's compliance-first architecture. Enables KYC-gated RWA, DeFi, and institutional use cases.

Ready to add ZK credentials to your dApp?

Read the DocsGitHub