WhistleX Docs

Overview

WhistleX lets you sell the intel itself, not a trade. This avoids market exposure for the whistleblower and lets the buyer decide how to act. The platform uses on-chain escrow and TACo key sharding so neither party must trust the other.

The key concept is that the intel is encrypted locally, the ciphertext is stored on-chain, and the decryption key can only be reconstructed if on-chain conditions are met.

Trust Model

WhistleX is designed so the backend never sees plaintext intel or decryption keys. The only on-chain payload is the ciphertext blob, and the only key material is protected by TACo under an on-chain policy. Learn more by exploring Marketplace pools and the Create flow.

The “blob” is simply the encrypted intel bytes (ciphertext) stored as hex. It is public but useless without the symmetric key. TACo shards that key across independent nodes; the key is released only if the on-chain policy is satisfied.

• The intel is encrypted locally in the whistleblower’s browser. Only ciphertext is stored and shared.
• The ciphertext is embedded in the pool creation calldata and stored on-chain as bytes.
• The symmetric key is wrapped and sharded by TACo nodes. The key never passes through WhistleX servers.
• The TACo policy is tied to the pool contract and decrypt floor; if unmet, the key cannot be reconstructed.
• Contributors can refund if the pool fails to unlock by the deadline.

Data Paths

On-chain: pool parameters, ciphertext blob, thresholds, and unlock state. Off-chain: pool metadata (title, description), attachments, and TACo policy reference. The backend never stores or transmits the decryption key. You can view live pools in Marketplace.

Buyers download ciphertext from the pool and request a TACo key once eligible. Decryption happens in the browser. WhistleX acts as a coordinator and indexer, not a trusted custodian.

Protocol Flow

• Whistleblower encrypts intel locally and creates a pool on-chain with threshold, decrypt floor, and deadline.
• TACo generates a policy bound to the pool contract and shards the symmetric key across nodes.
• Contributors fund the pool. When threshold is met, the pool unlocks.
• Eligible contributors request the key from TACo and decrypt locally.
• If the deadline passes without unlocking, contributors can claim refunds on-chain.

Roles

Whistleblower: Creates pools, encrypts intel locally, and sets thresholds.

Contributor: Funds pools, gains decrypt rights when eligible.

Buyer: Usually a contributor who uses decrypted intel to take action.

Pool Anatomy

• Threshold: Total funding required to unlock the pool.
• Decrypt floor: Minimum individual contribution required to request the TACo key.
• Deadline: If the pool fails to unlock before this time, refunds are enabled.
• Ciphertext: Encrypted intel bytes stored on-chain.
• Attachments: Optional images/PDFs stored off-chain for context.

Contributing

Contributors fund pools in USDC on Polygon Amoy. If you contribute less than the decrypt floor, you may help unlock the pool but will not be able to decrypt.

Contributions are escrowed by the pool contract until unlock or refund. WhistleX does not custody funds.

Unlock & Decrypt

Once the threshold is reached, the pool unlocks. Eligible contributors request the TACo key and decrypt locally. The whistleblower cannot block this process once the policy is met.

Refunds

If the pool does not reach threshold by the deadline, contributors can claim refunds on-chain. This enforces a fair outcome without relying on the whistleblower.

Profiles & Reputation

Every whistleblower has a profile page with a marketplace rating derived from contributor feedback weighted by each voter's contribution amount. Buyers can evaluate track record, see contributed/created pools, and make informed decisions before funding a pool. Visit a Profile to explore ratings and history.

Profiles also display Polymarket activity (recent trades, category exposure, and PnL by category). This helps contextualize the whistleblower’s market expertise and past performance.

Polymarket Integration

The Whistle widget surfaces live Polymarket markets. A whistleblower can click “Whistle” on a market to prefill pool metadata and create an intel pool tied to that market. Try it from Marketplace.

Pool metadata includes embedded Polymarket references, enabling the marketplace to show tips available for specific markets and allow buyers to jump directly to relevant pools.

Attachments

Pools can include up to three optional attachments (images or PDFs, 5MB max each). Attachments are stored off-chain and previewed in the pool card and detail page.

Security Notes

• Never share plaintext intel or the symmetric key outside WhistleX.
• The ciphertext is public by design; security relies on the key remaining protected by TACo policy.
• Use a wallet you control; refunds and decrypt requests are on-chain actions.

Usage Examples

Political transcript: You obtained a draft transcript for an upcoming speech. Trading the market is risky because the speech may change. WhistleX lets you sell the transcript itself without market exposure.

Regulatory leak: A regulator is about to issue a notice that affects a sector. You monetize the intel without directly trading the market; the buyer decides how to act.

Sports lineup: You have a confirmed lineup change before public release. You sell the intel and the buyer places the trade.

FAQ

Can I see the intel before contributing? No. The ciphertext is public, but only eligible contributors can request the TACo key.

What if the whistleblower disappears? The ciphertext and policy are already on-chain. If the pool unlocks, TACo can still release the key.

What if the pool never unlocks? Contributors can refund. The key cannot be reconstructed if the policy is unmet.

Get Started

Create your first pool in Create, or explore open pools in Marketplace.