Private - DZap

Ghost Mode keeps the recipient out of your transaction. With private: true, DZap routes the trade through a privacy exchange. Your transaction sends the tokens through the DZap router to the exchange’s deposit address, the recipient is paid separately, and the transaction itself is still public. Ghost Mode is EVM-only and works for swaps and bridges on the pairs the privacy exchanges support. Expect it to be slower and pay out less than the recommended public route.

Setup

This example bridges 100 USDC from Arbitrum to another wallet on Base, signing with walletClient, a viem wallet client built from the private key in PRIVATE_KEY. Set RECIPIENT to that wallet; sending to your own address defeats the purpose. Amounts are strings in the token’s smallest unit, and no API key is needed.

import { DZapClient, Services, ApprovalModes, TxnStatus, type TradeStatusResponse } from '@dzapio/sdk';
import { createWalletClient, http } from 'viem';
import { arbitrum } from 'viem/chains';
import { privateKeyToAccount } from 'viem/accounts';

const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
const walletClient = createWalletClient({ account, chain: arbitrum, transport: http() });
const dzap = DZapClient.getInstance();

const USDC_ARB = '0xaf88d065e77c8cC2239327C5EDb3A432268e5831';
const USDC_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
const RECIPIENT = '0xYourOtherWallet';                // a different wallet on Base
const AMOUNT = '100000000';                           // 100 USDC (6 decimals)

Steps

Quote

getTradeQuotes with private: true returns only privacy-exchange routes. The flag is top-level, so it applies to every pair in the request. pair.quoteRates lists the routes, recommendedSource names DZap’s pick, and each route’s duration is its estimated time in seconds.

const quotes = await dzap.getTradeQuotes({
  fromChain: 42161,
  account: account.address,
  private: true,             // Ghost Mode
  data: [{
    srcToken: USDC_ARB,
    destToken: USDC_BASE,
    amount: AMOUNT,
    toChain: 8453,         // Base, different chain = bridge
    slippage: 1,           // 1 = 1%
  }],
});

const [pair] = Object.values(quotes);
const route = pair.quoteRates?.[pair.recommendedSource];
console.log(route?.destAmount, route?.duration); // USDC out on Base, estimated seconds

Approve

The DZap router on Arbitrum needs permission to move your USDC, as in a regular bridge. getAllowance reads the current allowance, and if it’s too low, approve() approves exactly the bridge amount.

const { data } = await dzap.getAllowance({
  chainId: 42161,
  sender: account.address,
  tokens: [{ address: USDC_ARB, amount: AMOUNT }],
  service: Services.trade,
  mode: ApprovalModes.Default,
});

if (data[USDC_ARB].allowance < BigInt(AMOUNT)) {
  await dzap.approve({
    chainId: 42161,
    signer: walletClient,
    tokens: [{ address: USDC_ARB, amount: AMOUNT }],
    service: Services.trade,
    mode: ApprovalModes.Default,
  });
}

Build

buildTradeTxn with private: true opens an order with the exchange and returns the transaction to send, private: true as confirmation, and a txId. Keep the txId: it’s the only way to track a private trade. additionalInfo holds the order details, including the exchange’s deposit address. Private trades can’t be gasless, so gasless stays false.

const request = {
  fromChain: 42161,
  sender: account.address,
  refundee: account.address,
  gasless: false,
  private: true,
  data: [{
    srcToken: USDC_ARB,
    destToken: USDC_BASE,
    amount: AMOUNT,
    toChain: 8453,
    protocol: pair.recommendedSource,
    recipient: RECIPIENT,
    slippage: 1,
  }],
};

const built = await dzap.buildTradeTxn(request);

Send

trade() signs and sends the built transaction; passing it as txnData skips a second build. The transaction moves your USDC through the router to the exchange’s deposit address, and the recipient doesn’t appear in it.

const result = await dzap.trade({ request, signer: walletClient, txnData: built });
if (result.status !== TxnStatus.success) throw new Error(result.errorMsg);

Status

The recipient is paid after your transaction confirms, which takes minutes. Poll getTradeTxnStatus with the build’s txId until the status leaves PENDING. The status comes back empty until DZap picks up the trade, which the loop treats as “not yet”. The catch skips only the 429s that the keyless limit of 5 requests a minute can cause and rethrows anything else. The loop gives up after 30 minutes, and the check after it throws unless the status is COMPLETED.

let status: TradeStatusResponse | undefined;
for (let i = 0; i < 120; i++) {  // gives up after 30 minutes
  await new Promise((r) => setTimeout(r, 15_000));
  try {
    status = await dzap.getTradeTxnStatus({ txId: built.txId, chainId: 42161 });
  } catch (e: any) {
    if (e.response?.status !== 429) throw e;
  }
  if (status && status.status !== 'PENDING') break;
}
if (status?.status !== 'COMPLETED') throw new Error(`Not completed: ${status?.status ?? 'no status'}`);

console.log(status.status); // 'COMPLETED'

End-to-end

import { DZapClient, Services, ApprovalModes, TxnStatus, type TradeStatusResponse } from '@dzapio/sdk';
import { createWalletClient, http } from 'viem';
import { arbitrum } from 'viem/chains';
import { privateKeyToAccount } from 'viem/accounts';

const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
const walletClient = createWalletClient({ account, chain: arbitrum, transport: http() });
const dzap = DZapClient.getInstance();

const USDC_ARB = '0xaf88d065e77c8cC2239327C5EDb3A432268e5831';
const USDC_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
const RECIPIENT = '0xYourOtherWallet'; // a different wallet on Base
const AMOUNT = '100000000'; // 100 USDC

// 1. Private quote
const quotes = await dzap.getTradeQuotes({
  fromChain: 42161,
  account: account.address,
  private: true,
  data: [{ srcToken: USDC_ARB, destToken: USDC_BASE, amount: AMOUNT, toChain: 8453, slippage: 1 }],
});
const [pair] = Object.values(quotes);

// 2. Approve (if needed)
const { data } = await dzap.getAllowance({
  chainId: 42161,
  sender: account.address,
  tokens: [{ address: USDC_ARB, amount: AMOUNT }],
  service: Services.trade,
  mode: ApprovalModes.Default,
});
if (data[USDC_ARB].allowance < BigInt(AMOUNT)) {
  await dzap.approve({
    chainId: 42161,
    signer: walletClient,
    tokens: [{ address: USDC_ARB, amount: AMOUNT }],
    service: Services.trade,
    mode: ApprovalModes.Default,
  });
}

// 3. Build (keep built.txId for status)
const request = {
  fromChain: 42161,
  sender: account.address,
  refundee: account.address,
  gasless: false,
  private: true,
  data: [{ srcToken: USDC_ARB, destToken: USDC_BASE, amount: AMOUNT, toChain: 8453, protocol: pair.recommendedSource, recipient: RECIPIENT, slippage: 1 }],
};
const built = await dzap.buildTradeTxn(request);

// 4. Send
const result = await dzap.trade({ request, signer: walletClient, txnData: built });
if (result.status !== TxnStatus.success) throw new Error(result.errorMsg);

// 5. Status, by txId
let status: TradeStatusResponse | undefined;
for (let i = 0; i < 120; i++) {  // gives up after 30 minutes
  await new Promise((r) => setTimeout(r, 15_000));
  try {
    status = await dzap.getTradeTxnStatus({ txId: built.txId, chainId: 42161 });
  } catch (e: any) {
    if (e.response?.status !== 429) throw e;
  }
  if (status && status.status !== 'PENDING') break;
}
if (status?.status !== 'COMPLETED') throw new Error(`Not completed: ${status?.status ?? 'no status'}`);
console.log('settled:', status.status);

API usage

The same flow over REST: send "private": true on the quote and the build, and track the trade by the build’s txId.

curl -X POST https://api.dzap.io/v1/quotes \
  -H "Content-Type: application/json" \
  -d '{
    "fromChain": 42161,
    "private": true,
    "data": [{
      "amount": "100000000",
      "srcToken": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
      "destToken": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "toChain": 8453,
      "slippage": 1
    }]
  }'

curl -X POST https://api.dzap.io/v1/buildTx \
  -H "Content-Type: application/json" \
  -d '{
    "sender": "0xYourWallet",
    "refundee": "0xYourWallet",
    "fromChain": 42161,
    "gasless": false,
    "private": true,
    "data": [{
      "amount": "100000000",
      "srcToken": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
      "destToken": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "toChain": 8453,
      "protocol": "<recommendedSource from quote>",
      "recipient": "0xYourOtherWallet",
      "slippage": 1
    }]
  }'

curl "https://api.dzap.io/v1/status?txId=<txId from build>&chainId=42161"

Approve the DZap router for the USDC first, then sign and send the transaction from the build response with your own wallet. Full reference: Quote, Build Tx, Status.

Public vs Ghost Mode

	Public	Ghost Mode
Routes	DEXs, bridges and aggregators	Privacy exchanges only
Recipient in your transaction	Yes	No
Time	Seconds on most routes	Minutes
Output	Higher	Lower
Track status by	Transaction hash	The build’s `txId` only
Gasless	Available	Not available

What can go wrong

No route: the response has no entry for the pair, or its quoteRates is empty. Private routes cover fewer pairs than public ones, and quoting again sometimes returns routes.
The build fails: buildTradeTxn throws. The error’s action says what to fix; TRY_ANOTHER_ROUTE means building with another route from pair.quoteRates.
An old build: the build opens an order with the exchange, and some orders expire an hour later (additionalInfo.expiresAt). Build again instead of sending an old build.
gasless: true: private trades can’t be gasless; the API answers Private swaps cannot be gasless.
Not completed: no status: the status stayed empty until the loop gave up. Check that your transaction confirmed and that txId comes from this build.
400 Private transaction status check is not supported: you polled with the transaction hash. Use the build’s txId.
HTTP 429: without an API key, the trade API allows 5 requests a minute in total, shared by every endpoint, and retryAfter says how many seconds to wait. The status loop skips 429s and polls again.

See Error codes for the full catalog.

​Setup

​Steps

​End-to-end

​API usage

​Public vs Ghost Mode

​What can go wrong