Privacy HoodConfidential payments and private positions on Robinhood Chain.

Robinhood Chain put equities, stablecoins, and RWAs onchain for 120+ countries. Everything is now composable, programmable, and permanently visible. Privacy Hood adds the missing layer: the ability to use those assets without broadcasting your net worth, your positions, and your payment graph to anyone with a block explorer.

Three complementary privacy layers, one deposit flow, and native composability with USDG and Stock Tokens.

• EVM-native (Arbitrum Orbit). Standard tooling, standard proof systems, no exotic cryptography rewrites. The stack ports cleanly.
• USDG is native. A dollar-backed stablecoin already circulating on the chain gives Privacy Hood a liquid, trusted base asset from day one.
• Stock Tokens are onchain. Tokenized NVDA, GOOG, AAPL and others are composable DeFi assets here - meaning private equity positions are possible, not just private stablecoin transfers. No other privacy protocol can offer that.
• Real users, real volume. 28M+ Robinhood users and a well-capitalized parent mean demand exists before the privacy problem is even obvious to most of them.

The moment retail realizes their tokenized portfolio is fully public, they need somewhere to put it. Privacy Hood is that place.

Adversaries observe the public ledger, the mempool, and the relayer network. Privacy Hood is designed to hide, from all three, the transfer amount, the sender-recipient link, and the receiving wallet identity - while remaining fully verifiable on-chain and non-custodial end to end.

Deposits enter a shielded pool as Pedersen commitments. Transfers inside the pool are validated with Groth16 zk-SNARKs, which prove a transaction is valid (inputs exist, nothing is double-spent, balances net to zero) without revealing amounts, sender, or recipient.

• Breaks the amount link and the sender ↔ recipient link.
• Nullifiers prevent double-spends without exposing which note was consumed.
• Works identically for USDG and for tokenized Stock Tokens - each asset gets its own commitment set.

Every incoming payment resolves to a fresh, one-time stealth address derived from the recipient's published meta-address. Only the recipient can compute the private key for it.

• Breaks the recipient identity link. An observer sees funds land at a never-before-seen address with no onchain tie to the receiver's known wallet.
• No coordination or pre-shared secret needed - senders derive the stealth address unilaterally from the public meta-address registry.

Claims and withdrawals are submitted by a decentralized relayer pool via meta-transactions. The recipient never pays gas from a doxxed wallet, and the withdrawing address has no funding history linking it to the depositor.

• Breaks the metadata / gas-funding link, which is where most "private" systems actually leak.
• Enables gasless claims and account-abstraction flows - a mainstream-friendly UX where users never touch native gas.
• Relayers are fee-compensated and stake-bonded; no single relayer sees the full path.

1. Deposit. User deposits USDG (or a Stock Token) into the shielded pool. Public event: "an address deposited into Privacy Hood." Nothing else.
2. Transfer. User sends privately inside the pool. A zk proof validates it; amount and counterparty stay hidden.
3. Claim. Recipient receives at a fresh stealth address; a relayer submits the withdrawal gaslessly. The receiving wallet has no traceable link to the sender.

At no point does the public ledger reveal who paid whom, how much, or in what asset.

• USDG - private stablecoin transfers and settlement.
• Stock Tokens - confidential holdings and transfers of tokenized equities. Hold private NVDA / GOOG / AAPL exposure without publishing your portfolio.
• RWAs / ETFs - any Robinhood Chain real-world-asset token can be shielded with the same commitment machinery.

• Chain: Robinhood Chain (Arbitrum Orbit L2, EVM).
• Proof system: Groth16 zk-SNARKs; Pedersen commitments; nullifier set.
• Standards: ERC-5564 stealth addresses, ERC-6538 meta-address registry, ERC-4337 account abstraction for gasless claims.
• Relayers: stake-bonded pooled relayer network, meta-transaction submission.
• Oracles: Chainlink (native to the chain) for any asset pricing needs.
• Frontend: React / TypeScript / Tailwind. Wallet support via Robinhood Wallet and standard EVM wallets.

$PHOOD (placeholder ticker) - protocol token for relayer bonding, fee routing, and governance over pool parameters and supported-asset onboarding. Fee capture from shielded-pool usage funds buybacks. No pre-mine, no VC allocation - clean positioning against the "brokerage-owned chain" narrative.

• Only privacy layer that shields tokenized equities, not just stablecoins. This is the moat - it exists because of the chain, and it can't be trivially replicated on Base or Solana where Stock Tokens aren't native.
• Native USDG base - no bridging, no wrapped-asset risk.
• Three complementary layers that each close a distinct leak (amount, recipient, metadata), rather than one primitive marketed as complete privacy.
• Mainstream UX - gasless claims, stealth addresses handled invisibly. Built for the 28M-user retail audience the chain already has.

• Regulatory surface. Privacy on a brokerage-operated, RWA-focused chain invites scrutiny. Positioned as consumer financial privacy, not evasion; designed with optional compliance disclosures (view keys) available to the user, not mandatory backdoors.
• Relayer liveness. The relayer pool must be sufficiently decentralized to avoid a censorship or availability chokepoint.
• Chain maturity. Robinhood Chain is new infrastructure. Proof-system audits and conservative pool caps at launch.

1. Shielded USDG transfers (Layer 1 + 3) on testnet.
2. Stealth-address layer (Layer 2) + gasless claims.
3. Stock Token shielding - the headline capability.
4. Mainnet, audit, token.