Shield, send, withdraw. Nothing to install.
Runs in your browser. Keys and proofs never leave your device, and the pool is live on Robinhood Chain testnet today.
Your notes, rebuilt from the chain every time you open it.
Deposit
Move a stock token, WETH or USDG into the pool. This step is public: your address, the amount and an owner key are all on the chain, and the wallet tells you so before you sign.
Send privately
Pay any pool address. The chain records that a transaction happened and nothing else: no sender, no recipient, no amount, not even which ticker moved. A broadcaster submits it, so your own address never appears.
Withdraw
Out to any public address you choose. The asset, amount and destination are public again, which is the weakest link and the one place to take care.
Every ticker, one pool
196 stock and ETF tokens plus WETH and USDG, all in the same pool. Privacy comes from the size of the crowd, so splitting each asset into its own pool would split the crowd.
Your balance is yours alone
Deposits become encrypted notes. Only your phrase can read them or spend them, and nothing is stored on a server.
A seed phrase is the whole wallet
Twelve words rebuild your balance and history from the chain on any device. No account, nothing to back up, nothing to seize.
Someone else pays your gas
A broadcaster submits your transaction and takes its fee from inside the pool. Recipient, amount and fee are sealed in the proof, so it cannot alter a thing.
Read-only keys, on purpose
A viewing key reveals your history to an accountant without ever letting them spend. Privacy that survives contact with the real world.
Built as one half of a two-entrant build-off, judged blind against a human-built pool and then audited. The weaknesses we already know about are written down before anyone else finds them.