Whitepaper
Confidential payments and private positions on Robinhood Chain — shielded pool, stealth addresses, and pooled relayers for USDG and Stock Tokens.
Chapter I
Why Robinhood Chain
Robinhood Chain is a financial-grade Ethereum L2 built around real-world assets. Three facts make it the right home for a confidential rail.
- Stock Tokens are onchain. Tokenized equities — NVDA, AAPL, GOOG — are composable assets here. Private positions become possible, not just private stablecoin transfers. No other chain offers this.
- USDG is native. A dollar-backed settlement asset already circulating on the chain gives the rail a liquid, trusted base from day one.
- Financial-grade execution. Predictable, low-latency L2 execution designed for money that never sleeps.
Chapter II
The problem: transparency by default
On a transparent ledger, every position is a public document. Anyone — neighbors, employers, bots — can read your balances, your counterparties, and your strategy, forever, for free.
A transparent chain is surveillance by default. Privacy is the exception — and the exception has to be built.
Chapter III
Three locks on one door
- Layer I — The shielded pool (Phase II). Deposits enter a pool as cryptographic commitments. Transfers inside the pool are validated by zero-knowledge proofs: the proof shows a transaction is valid — inputs exist, nothing is double-spent, balances net to zero — without revealing amounts, sender, or recipient.
- Layer II — Stealth addresses (Phase II). Every incoming payment resolves to a fresh, one-time address derived from the recipient's published meta-address (ERC-5564 / ERC-6538 pattern). Only the recipient can compute its private key. An observer sees funds land at a never-before-seen address with no tie to any known wallet.
- Layer III — Gasless relayers (Phase III). Claims and withdrawals are submitted by a pooled relayer network via meta-transactions. The recipient never pays gas from a wallet that could identify them, and the withdrawing address has no funding history linking it to the depositor.
Chapter IV
The handover — how a payment flows
- Deposit. USDG or a Stock Token enters the pool. The public event is a commitment — not a balance.
- Transfer. Value moves inside the pool under a zero-knowledge proof. The ledger records nothing legible.
- Withdraw. Funds arrive at a fresh stealth address, delivered gaslessly. No history attaches.
At no point does the public ledger reveal who paid whom, how much, or in what asset.
Chapter V
Supported assets
- USDG — private stablecoin payments and settlement. Phase II.
- Stock Tokens — confidential holdings and transfers of tokenized equities. Hold NVDA exposure without publishing your portfolio. Phase IV.
Chapter VI
What Redact is not
- Not custodial. Redact never holds funds. There is no vault to raid.
- Not an identity service. No accounts, no names, no profiles.
- Not a promise. Every capability on this site carries its phase. What does not run today is labeled; what runs will be verifiable.
Chapter VII
Risks and considerations
- Privacy is a design property, not a magic cloak. Anonymity depends on pool size and usage patterns.
- The regulatory environment for privacy tooling is evolving. The design stays non-custodial and transparent about what it is.
- Zero-knowledge systems are complex. Every component ships testnet-first, then mainnet, with public verification paths.