
tendr.bid
49 posts

tendr.bid
@tendrdotbid
End-to-end private RFP procurement on Solana. Sealed bids · anon buyer + bidder · reputation public only on claim. Live on devnet · By @0xharp




today is my first day reviewing frontier submissions who are the best teams?

"The story that Toly tells that you can get your first 1000 users from Seeker is actually true. ...the average spend for these users is insane." -Magicblock co-founder @supermarioblock Shoutout to every Seeker 🖤

Just shipped the Identity Layer for @tendrdotbid powered by @sns - every tendr.bid user now gets a personal `


To every builder who joined Solana Network State Spring 2026: You came with an idea. You shipped. You pitched. You got roasted and came back anyway. That's what this community is built on. The @solana Frontier Hackathon by @colosseum is over. Your journey isn't 🫡 Full recap 👇





Procurement on tendr.bid is now end-to-end private.
When tendr.bid launched, providers could bid anonymously - bid contents were sealed in @magicblock's TEE-backed Private Ephemeral Rollup, and bid signers were per-RFP ephemerals unlinkable to the provider's main wallet. But the BUYER still appeared on chain at every step (RFP create, award, milestone accept, dispute), and the funding USDC moved through the buyer's main wallet. Half the marketplace was private; half was not.
Now: the other half.
→ Anon buyer mode - Buyers can now toggle "Private buyer" at RFP creation. The buyer's main wallet does not appear on chain anywhere across the lifecycle (close-bidding, award, fund, accept-milestone, propose-dispute, cancel-with-penalty, refund). Public buyer reputation does NOT accumulate on these RFPs unless the buyer later opts in via Claim reputation.
→ End-to-end private funding via @cloak_ag - When the buyer funds the project, USDC flows: main wallet → Cloak shielded UTXO pool → per-RFP funding ephemeral → escrow. The on-chain trail is broken at the shielded hop, an observer scanning the escrow account can see "some funder deposited here" but cannot link the deposit back to the buyer's main wallet. The same shielded path also handles ephemeral SOL/USDC sweep + top-up, so leftover ephemeral balances can be reclaimed without re-introducing a link.
→ HD keychain primitive - One master signature per session unlocks every ephemeral the user will ever need across the app i.e. per-RFP buyer ephs, per-RFP bidder ephs, funding ephs, refund ephs, payout ephs. All derived deterministically via HKDF from a master seed. Cross-tab BroadcastChannel sync so opening a new tab doesn't re-prompt. No popup spam, no key management UI, no copy-paste of secrets. Web-app UX, on-chain anonymity.
→ Claim-based reputation, both sides - Anonymous RFPs and wins don't appear on public profiles by default. Users can CLAIM them post-completion via two new on-chain instructions (`attest_buyer_history` for buyers, `attest_win` for providers). Claim merges the reputation counters i.e. RFPs awarded, projects completed, USDC contracted, USDC released into the main wallet's public reputation in one atomic ix.
For the first time on @solana, both sides of a procurement marketplace can be fully anonymous AND optionally surface reputation, on the same primitive shape.
Genuine credit to @cloak_ag for making the shielded UTXO primitive accessible to a third-party app, without it, "anon buyer" and "end-to-end private funding" would not be real on-chain properties. And @magicblock's PER stays the load-bearing piece for sealed bid contents, the two primitives compose end-to-end now.
The full Tendr privacy stack:
- @cloak_ag shielded UTXO - bid SIGNERS, RFP buyer, and funding USDC all unlinkable to main wallets - HD keychain i.e. one master sign derives every per-RFP ephemeral; no per-action popups, no key management
- @sns - recognizable identity (`


Final call for the SNS Identity Track at the @colosseum Frontier Hackathon. If you’re building around identity, naming, agents, reputation, or community coordination on @solana, it's time to submit today. Finish strong 🦾


Major Update: tendr.bid is submitted to @colosseum's Frontier 2026. Final end to end demo 📹👇
end-to-end private RFP procurement on @solana built solo in 5 weeks, live on devnet today:
→ buyer + bidder identity remains private via @cloak_ag's shielded UTXO pool. anonymity as a cryptographic property, not a UI label. HD-derived ephemerals funded through the shielded pool break the on-chain link between main wallet and per-RFP signer.
→ sealed bids inside @magicblock's TDX-TEE Ephemeral Rollup. bid contents sealed even from the buyer until the bid window closes, enforced by code, not policy.
→ portable '

1 day left to submit your product to the @Solana Frontier Hackathon. Finish strong! 🦾

Major Update: tendr.bid is submitted to @colosseum's Frontier 2026. Final end to end demo 📹👇
end-to-end private RFP procurement on @solana built solo in 5 weeks, live on devnet today:
→ buyer + bidder identity remains private via @cloak_ag's shielded UTXO pool. anonymity as a cryptographic property, not a UI label. HD-derived ephemerals funded through the shielded pool break the on-chain link between main wallet and per-RFP signer.
→ sealed bids inside @magicblock's TDX-TEE Ephemeral Rollup. bid contents sealed even from the buyer until the bid window closes, enforced by code, not policy.
→ portable '

1 day left to submit your product to the @Solana Frontier Hackathon. Finish strong! 🦾

Major Update: tendr.bid is submitted to @colosseum's Frontier 2026. Final end to end demo 📹👇
end-to-end private RFP procurement on @solana built solo in 5 weeks, live on devnet today:
→ buyer + bidder identity remains private via @cloak_ag's shielded UTXO pool. anonymity as a cryptographic property, not a UI label. HD-derived ephemerals funded through the shielded pool break the on-chain link between main wallet and per-RFP signer.
→ sealed bids inside @magicblock's TDX-TEE Ephemeral Rollup. bid contents sealed even from the buyer until the bid window closes, enforced by code, not policy.
→ portable '






Procurement on tendr.bid is now end-to-end private.
When tendr.bid launched, providers could bid anonymously - bid contents were sealed in @magicblock's TEE-backed Private Ephemeral Rollup, and bid signers were per-RFP ephemerals unlinkable to the provider's main wallet. But the BUYER still appeared on chain at every step (RFP create, award, milestone accept, dispute), and the funding USDC moved through the buyer's main wallet. Half the marketplace was private; half was not.
Now: the other half.
→ Anon buyer mode - Buyers can now toggle "Private buyer" at RFP creation. The buyer's main wallet does not appear on chain anywhere across the lifecycle (close-bidding, award, fund, accept-milestone, propose-dispute, cancel-with-penalty, refund). Public buyer reputation does NOT accumulate on these RFPs unless the buyer later opts in via Claim reputation.
→ End-to-end private funding via @cloak_ag - When the buyer funds the project, USDC flows: main wallet → Cloak shielded UTXO pool → per-RFP funding ephemeral → escrow. The on-chain trail is broken at the shielded hop, an observer scanning the escrow account can see "some funder deposited here" but cannot link the deposit back to the buyer's main wallet. The same shielded path also handles ephemeral SOL/USDC sweep + top-up, so leftover ephemeral balances can be reclaimed without re-introducing a link.
→ HD keychain primitive - One master signature per session unlocks every ephemeral the user will ever need across the app i.e. per-RFP buyer ephs, per-RFP bidder ephs, funding ephs, refund ephs, payout ephs. All derived deterministically via HKDF from a master seed. Cross-tab BroadcastChannel sync so opening a new tab doesn't re-prompt. No popup spam, no key management UI, no copy-paste of secrets. Web-app UX, on-chain anonymity.
→ Claim-based reputation, both sides - Anonymous RFPs and wins don't appear on public profiles by default. Users can CLAIM them post-completion via two new on-chain instructions (`attest_buyer_history` for buyers, `attest_win` for providers). Claim merges the reputation counters i.e. RFPs awarded, projects completed, USDC contracted, USDC released into the main wallet's public reputation in one atomic ix.
For the first time on @solana, both sides of a procurement marketplace can be fully anonymous AND optionally surface reputation, on the same primitive shape.
Genuine credit to @cloak_ag for making the shielded UTXO primitive accessible to a third-party app, without it, "anon buyer" and "end-to-end private funding" would not be real on-chain properties. And @magicblock's PER stays the load-bearing piece for sealed bid contents, the two primitives compose end-to-end now.
The full Tendr privacy stack:
- @cloak_ag shielded UTXO - bid SIGNERS, RFP buyer, and funding USDC all unlinkable to main wallets - HD keychain i.e. one master sign derives every per-RFP ephemeral; no per-action popups, no key management
- @sns - recognizable identity (`

Procurement on tendr.bid is now end-to-end private.
When tendr.bid launched, providers could bid anonymously - bid contents were sealed in @magicblock's TEE-backed Private Ephemeral Rollup, and bid signers were per-RFP ephemerals unlinkable to the provider's main wallet. But the BUYER still appeared on chain at every step (RFP create, award, milestone accept, dispute), and the funding USDC moved through the buyer's main wallet. Half the marketplace was private; half was not.
Now: the other half.
→ Anon buyer mode - Buyers can now toggle "Private buyer" at RFP creation. The buyer's main wallet does not appear on chain anywhere across the lifecycle (close-bidding, award, fund, accept-milestone, propose-dispute, cancel-with-penalty, refund). Public buyer reputation does NOT accumulate on these RFPs unless the buyer later opts in via Claim reputation.
→ End-to-end private funding via @cloak_ag - When the buyer funds the project, USDC flows: main wallet → Cloak shielded UTXO pool → per-RFP funding ephemeral → escrow. The on-chain trail is broken at the shielded hop, an observer scanning the escrow account can see "some funder deposited here" but cannot link the deposit back to the buyer's main wallet. The same shielded path also handles ephemeral SOL/USDC sweep + top-up, so leftover ephemeral balances can be reclaimed without re-introducing a link.
→ HD keychain primitive - One master signature per session unlocks every ephemeral the user will ever need across the app i.e. per-RFP buyer ephs, per-RFP bidder ephs, funding ephs, refund ephs, payout ephs. All derived deterministically via HKDF from a master seed. Cross-tab BroadcastChannel sync so opening a new tab doesn't re-prompt. No popup spam, no key management UI, no copy-paste of secrets. Web-app UX, on-chain anonymity.
→ Claim-based reputation, both sides - Anonymous RFPs and wins don't appear on public profiles by default. Users can CLAIM them post-completion via two new on-chain instructions (`attest_buyer_history` for buyers, `attest_win` for providers). Claim merges the reputation counters i.e. RFPs awarded, projects completed, USDC contracted, USDC released into the main wallet's public reputation in one atomic ix.
For the first time on @solana, both sides of a procurement marketplace can be fully anonymous AND optionally surface reputation, on the same primitive shape.
Genuine credit to @cloak_ag for making the shielded UTXO primitive accessible to a third-party app, without it, "anon buyer" and "end-to-end private funding" would not be real on-chain properties. And @magicblock's PER stays the load-bearing piece for sealed bid contents, the two primitives compose end-to-end now.
The full Tendr privacy stack:
- @cloak_ag shielded UTXO - bid SIGNERS, RFP buyer, and funding USDC all unlinkable to main wallets - HD keychain i.e. one master sign derives every per-RFP ephemeral; no per-action popups, no key management
- @sns - recognizable identity (`





