Private payments. Non-custodial. On Robinhood Chain.

Private payments. Non-custodial.

CA:0xee2d...a05a
Stake $PRIV to unlock 100% gasless transactions sponsored by protocol.
2-of-3 Threshold Custody

Hold, send, and swap frontier assets (USDG & native ETH) privately with a signing key split into three independent shards (2-of-3 quorum).

Network
Robinhood Chain (Chain ID: 4663)
PRIVATUM gradient background
Overview

Why choose Privatum for private self-custody?

A 2-of-3 smart wallet architecture engineered for Robinhood Chain: frontier asset settlement (USDG & native ETH), automated policy co-signing, and passkey recovery.

Single-Key Hot Wallet

Stores the complete private key in one browser or device, so one compromise can authorize every transaction.

Hardware Wallet

Improves offline key isolation but adds hardware cost, firmware trust, shipping friction, and seed backup burden.

2-of-3 Threshold Quorum

Splits signing authority mathematically across client Shard A (OS Keystore), Shard B (Co-signer policy engine), and Shard C (Hardware passkey). No single party can move funds.

Architecture

The 5-Step Signing Pipeline

Zero single points of failure. Every transaction requires off-chain ECDSA shard aggregation from two independent parties before executing on Robinhood Chain.

1

Build

Desktop or SDK

Prepares an unsigned ERC-4337 UserOperation for USDG stablecoin or native ETH transfer.

unsigned userOpHash
2

Client Sign

Local OS Keystore (Shard A)

Client decrypts Shard A via device credentials (Keychain, DPAPI) and signs the userOpHash.

sigA (65 bytes)
3

Co-Sign

Co-Signer API (Shard B)

Payload dispatched over TLS. Engine evaluates daily spend limits and velocity rules, then signs with Shard B.

sigB (65 bytes)
4

Combine

Aggregation Engine

The two 65-byte signatures merge into an aggregate 130-byte threshold payload without assembling the root key.

sigA || sigB (130B)
5

Settle

Robinhood Chain

Dispatched to Robinhood Chain bundler. PrivatumAccount contract validates 2-of-3 quorum and executes.

EntryPoint (Chain 4663)
Emergency Recovery Quorum (Shard C + Shard B): If your client device is lost or compromised, Shard C (Hardware Passkey / WebAuthn) combines with Shard B (Co-signer) to initiate emergency key rotation or fund migration without exposing a seed phrase.
Protocol Specs

Robinhood Chain Specifications & Endpoints

Execution Network
Robinhood Chain Mainnet
Network Stack
Arbitrum Dedicated L2
Chain ID
4663
Native Gas Token
ETH
Frontier Settlement Assets
USDG & Native ETH
Account Abstraction
ERC-4337 v0.6
Co-Signer Engine API Endpoints
MethodEndpointDescriptionPayload / Notes
GET/healthService health, version, and Robinhood Chain ID check{ status: "ok", chainId: 4663 }
POST/v1/walletsRegisters a new 2-of-3 threshold smart account{ address, shardAPubkey, shardBEncrypted, shardCPasskeyPubkey }
POST/v1/cosignSubmits UserOp for policy validation and Shard B co-signing{ walletAddress, asset, amount, userOpHash, recipient }
Highlights

Private frontier asset payments built for Robinhood Chain

Privatum delivers non-custodial USDG and native ETH settlement with 2-of-3 threshold security, automated policy co-signing, and passkey recovery.

PRIVATUM desktop command center
Latest Release v0.1.0

Download Privatum Desktop

Threshold custody, frontier asset settlement (USDG & native ETH), stealth addresses, and atomic swaps natively on your desktop. Built with Tauri v2 and Rust, connected directly to Robinhood Chain.

Detected OS

Windows

64-bit (x64)
PlatformWindows 10 / 11
PackageSetup (.exe)
Target FilePRIVATUM_0.1.0_x64-setup.exe
Download for Windows (.exe)
Double-click the installer to launch Privatum setup.

macOS

Apple Silicon (arm64)
PlatformmacOS 11.0+
PackageApp Bundle (.tar.gz / .dmg)
Target FilePRIVATUM_aarch64.app.tar.gz
Download for macOS
Extract archive and move Privatum.app to Applications.

Linux

x64 / amd64
PlatformUbuntu / Debian / Arch / Fedora
Packages.deb • .rpm • AppImage
Target FilePRIVATUM_0.1.0_amd64.deb
Download for Linux
Debian/Ubuntu: sudo apt install ./*.deb • Arch/Fedora: run AppImage or native binary
Bridge Rebates

Bridge across four chains and earn the spread back

Every bridge pays the relayer a spread on top of destination gas. Privatum returns 25% of that spread to you in PRIV, settled on Robinhood Chain.

EthereumChain ID 1
BaseChain ID 8453
ArbitrumChain ID 42161
Robinhood ChainChain ID 4663
1

Bridge through Privatum

Move ETH or USDG between Ethereum, Base, Arbitrum and Robinhood Chain. Routing and quotes come from Relay.

2

The spread is measured, not estimated

Every quote separates destination gas from the relayer's margin. Only that margin - the spread - is rebated.

3

Claim in PRIV on Robinhood Chain

Rebates accrue once a bridge settles and are claimable in PRIV, with the amount fixed at the price on claim.

Worked example25% of spread
RouteBase → Robinhood Chain
Bridged0.1 ETH
Relayer fee$0.0795
— destination gas$0.0099
— relayer spread$0.0695
Your rebate$0.0174 in PRIV

Figures from a live Relay quote. Rebates accrue per bridge and are claimable in PRIV on Robinhood Chain once the bridge settles.

PRIVPrivatumRH • 18 decimals • Robinhood Chain
0xee2ddd7128c291b027712eca157b3ff31a55a05a
Overview

Build and launch private payment flows with confidence

Create threshold-secured payment workflows for users, teams, and developers using a native desktop app and open SDK.

Private send and stealth receive

Send USDG and native ETH to handles or raw addresses, then receive payments through one-time stealth destinations.

In-wallet USDG & ETH swaps

Route USDG and native ETH swaps through Robinhood Chain liquidity with clear quote and slippage controls.

2-of-3 threshold signing

The desktop client signs locally with Shard A, the co-signer validates policy and signs with Shard B, and signatures merge into an aggregate 130-byte threshold payload.

Native desktop command center

Manage USDG and native ETH balances, shard health, recovery passkeys, spending policy controls, swaps, and private payment activity from one desktop surface.

Overview

Reliable custody that continuously verifies itself

Continuously monitor shard readiness, policy checks, activity, and recovery paths before funds move.

Shard health monitoring

Check client, co-signer, and passkey readiness before a transaction reaches the signing pipeline.

Co-signer policy enforcement

Validate session, transaction intent, spending limits, velocity, and anomaly signals before the second signature.

Activity and recovery visibility

Track settlement history, export activity, rehearse recovery, and rotate a lost client shard without a seed phrase.

Try our live demo

Discover the full potential of Privatum Live

See how threshold custody coordinates private send, stealth receive, swaps, policy checks, and recovery in one operational flow.

Download
Integrations

Connect every payment touchpoint effortlessly

Private Send

Phone

Transfer stablecoins through a two-shard signing flow with policy checks.

Stealth Receive

Checkmark

Share one handle while incoming payments arrive at one-time addresses.

In-Wallet Swaps

Swaps

Swap supported stablecoins with route, quote, and slippage visibility.

Open SDK

npm →
Code icon

Embed threshold wallets into applications with a Viem based TypeScript SDK.

Robinhood ChainArbitrum L2 (Chain ID 4663)
USDG & Native ETHFrontier settlement assets
2-of-3 QuorumECDSA shard aggregation
Co-Signer EngineAutomated spend & velocity policies
ERC-4337 v0.6Smart accounts & UserOps
Passkeys / WebAuthnHardware recovery Shard C
Viem Open SDK@privatumrh/robinhood-chain-sdk
Tauri v2 DesktopEncrypted OS keystores
ERC-5564 StealthOne-time destination addresses
Screened PoolsAssociation-set ZK proofs
Robinhood ChainArbitrum L2 (Chain ID 4663)
USDG & Native ETHFrontier settlement assets
2-of-3 QuorumECDSA shard aggregation
Co-Signer EngineAutomated spend & velocity policies
ERC-4337 v0.6Smart accounts & UserOps
Passkeys / WebAuthnHardware recovery Shard C
Viem Open SDK@privatumrh/robinhood-chain-sdk
Tauri v2 DesktopEncrypted OS keystores
ERC-5564 StealthOne-time destination addresses
Screened PoolsAssociation-set ZK proofs
Robinhood ChainArbitrum L2 (Chain ID 4663)
USDG & Native ETHFrontier settlement assets
2-of-3 QuorumECDSA shard aggregation
Co-Signer EngineAutomated spend & velocity policies
ERC-4337 v0.6Smart accounts & UserOps
Passkeys / WebAuthnHardware recovery Shard C
Viem Open SDK@privatumrh/robinhood-chain-sdk
Tauri v2 DesktopEncrypted OS keystores
ERC-5564 StealthOne-time destination addresses
Screened PoolsAssociation-set ZK proofs
Compliance & Security

Enterprise security for every private payment

Security shield

Data Protection

Protect local shards with encrypted storage, OS keychains, isolated environments, and strict session controls.

Lightning bolt

Policy Controls

Enforce daily limits, velocity checks, anomaly detection, and transaction intent validation before co-signing.

Security shield

High Availability

Maintain co-signer availability with monitored infrastructure, failover planning, and operational alerts.

Lightning bolt

Secure Access Control

Use passkeys, session checks, and quorum rules to manage access without giving any one party custody.

Connected

Reach users across every payment surface

Privatum connects desktop, Viem SDK, Robinhood Chain, USDG & ETH swaps, stealth receive, and recovery surfaces in one 2-of-3 custody model.

Roadmap

Roadmap to native privacy.

Phase 1
shipped

Robinhood Chain Custody MVP

ERC-4337 smart accounts, 2-of-3 threshold sharding and passkey recovery, live on Robinhood Chain mainnet with a Tauri v2 desktop client.

ERC-4337 accountsThreshold shardingPasskey recoveryDesktop client
Phase 2
in progress

Open SDK & Developer Ecosystem

A public, typed TypeScript toolkit built on Viem (@privatumrh/robinhood-chain-sdk), with guides, sample apps and audit-ready threshold primitives under MIT licensing.

npm SDK →Viem APIsDeveloper guidesMIT licensed
Phase 3
in progress

DEX Aggregation & USDG/ETH Swaps

Low-slippage USDG and native ETH routing with transparent quotes, slippage controls and policy-checked execution across desktop and SDK.

USDG / ETH swapsAggregated routesQuote previewsSlippage controls
Phase 4
next

Privacy Plane One

Threshold ECDSA and blind co-signing with ZK policy proofs, so signatures look standard and policy runs without profiling.

Threshold ECDSABlind co-signingZK policy proofsInvisible setup
Phase 5
planned

Privacy Plane Two

ERC-5564 stealth addresses, receiver unlinkability and screened privacy pools with association-set proofs for compliance-aware privacy.

Stealth addressesUnlinkabilityPrivacy poolsProvenance checks
Phase 6
planned

Multichain expansion

Additional EVM adapters and new L2 networks with one shard model, a portable co-signer and a consistent desktop experience everywhere.

EVM adaptersNew L2sPortable co-signerUnified recovery
FAQ

Common Questions

What does Privatum do?
How does 2-of-3 threshold custody work?
How does the 5-step signing pipeline work?
What happens if I lose my computer?
Does Privatum have custody of funds?
Which network and assets does Privatum support?
What are the Co-Signer API endpoints?
When will native privacy launch?

Build private payments on Robinhood Chain

Read the developer docs, explore the architecture, and follow the roadmap to native privacy.

PRIVATUM gradient background