How It Works

Every deposit is identity-gated and sanctions-screened, regardless of mode or amount.

Deposit Modes

Public mode: Tokens arrive as transparent, traceable assets on Aztec.

Private mode: Tokens arrive as “Clean” tokens (e.g., cUSDC) on Aztec’s private layer.

Deposit Flow

1. User connects wallet and selects token + amount
2. Identity verification check (PoCH or Human Passport)
3. Sanctions screening against 23 international sources via sanctions.io
4. TokenPortal contract on Ethereum locks ERC-20 collateral
5. Cross-chain message instructs Aztec token_bridge contract to mint corresponding amount on L2

Withdrawal

Tokens move back to Ethereum L1 by burning the Aztec representation and consuming an L2-to-L1 message on the L1 portal contract.

Exit Modes

• Public exit: Burn public tokens on Aztec, claim underlying ERC-20 on Ethereum
• Private exit: Burn Clean tokens on Aztec’s private layer, claim underlying ERC-20 on Ethereum

Both modes require fresh identity attestation and sanctions screening. Exit attestations use a one-time nonce, preventing captured attestation replay.

Custody

Tokens are not held by human.tech, Aztec, or any operator at any point in the bridge flow.

• Deposit: TokenPortal contract on Ethereum locks ERC-20 collateral. Cross-chain message instructs Aztec token_bridge contract to mint corresponding amount on L2.
• Withdrawal: Aztec token_bridge burns L2 tokens and emits L2-to-L1 message. L1 portal consumes message and releases original ERC-20 to Ethereum address.

Both contracts are open source. No party has custody of bridged tokens during transit.