Bids stay encrypted inside Arcium's MXE until settlement. No auctioneer can see or manipulate them. The winner pays the second-highest bid — provably.