What stays private and what does not

At a glance

Balances held in the pool are public per address, like any token balance. Commits show that an address placed an order in a market, not what the order is.

The reveal window

Reveals are public during the last 5 seconds of a batch. By then the price is fixed and the batch is closed to new orders, so nobody can trade against a revealed order inside the batch. Someone watching can still learn that size moved in a market. A later version may move matching into a TEE so orders are never public; it is not part of this release.