Privacy for Uniswap v4 — Robinhood Chain
The chain seesthe batch. Not you.
Watch hooks that run in your browser and never leave it. Pools settled in batches, so the ledger records one net swap instead of yours. Nothing to sign until you act.
What it is
Brand is a privacy workspace for Uniswap v4 on Robinhood Chain: rules sealed in your browser, pools that settle in batches, and a chain that only ever sees the residual.
Capabilities
A hook that never leaves the browser
A watch hook is a rule: when a balance, a block or a pool price crosses a line, fire. The rule is sealed under a key your browser generated and will not export. The only thing it ever sends anywhere is a read.
One read for every rule
Every thirty seconds, while the tab is visible, all of your rules become one multicall. The RPC sees a list of addresses and slots. It does not see which rule asked, what the line is, or what happens when it is crossed.
The chain sees the batch, not you
A pool under the batch hook cannot be swapped directly. Orders are cast into a batch; when it settles, buys and sells are matched at the pool's own price and only the residual touches the pool. One swap per batch is what the ledger records.
Trades come out of the shade
A cast can be paid from a shielded note. The pool unshields into the batch and re-shields the output to a one-time key, so the address that settled the batch is the pool, not the person.
Pools, with their hooks named
Every Uniswap v4 pool on Robinhood Chain, with the hook it runs under. The hook address itself says what it is allowed to do: the lowest fourteen bits are its permissions, and the pools page decodes them.
Nothing to sign until you act
Reading a chain needs no wallet, so the site asks for none. A wallet is connected for one transaction and the connection is not remembered. Your keys, your transactions, and your rules.
Four rooms
One workspace, four rooms.
How it works
From order to residual.
- 01Shade
- 02Cast
- 03Settle
- 04Surface
Shade
Deposit a token into the pool of notes. What you hold is a commitment in a Merkle tree, encrypted to your own viewing key, that nobody can spend but you.
Privacy
Three things hidden, and what each still shows.
Privacy that does not say what it leaks is marketing. Each layer here names its own edge.
Watch hooks
Running nowHidden
- The rule itself: name, line, edge, what it means to you
- Which address belongs to which rule
- That a rule fired, and when
Still visible
- A public RPC sees the addresses and slots it is asked to read
- Your IP address, as with any read from a browser
The batch hook
Designed · deployingHidden
- Your footprint on the pool: its price, its Swap event and its storage see the batch's net residual, not your swap
- What each order paid: one blended price per side, so a cast is not a price point
- Who traded against whom
Still visible
- The cast itself, size, direction, recipient, unless it comes from the shade
- The batch total, the residual and its output, on the ledger
The shade
In designHidden
- Who cast: the pool is the batch's counterparty and the spender is a nullifier
- Who received: the output goes to a one-time key
- Balances and transfers inside the pool
Still visible
- Shield and unshield amounts, in and out of the pool, and the size of a shielded cast
- The set of addresses that have ever shielded
