Threshold custody Overview
Shielded portfolio

$24,806.42

Private USDC and USDT custody with distributed signing, policy controls, and passkey recovery.

USDC available $18,420.42 Ready for threshold signing
USDT available $6,386.00 Ready for swap routing
Quorum 2-of-3 Client, co-signer, passkey
Policy status Armed Limits and velocity checks
Liquidity rhythm

Seven day balance flow

Live posture

Signing pipeline

Ready
BuildShard APolicyShard BSettle
Latest activity

Settlement feed

Command actions

Quick operations

Private send

Compose a threshold-signed transfer.

The full private key is never assembled. Shard A signs locally, Shard B validates policy, and the aggregate signature settles on Robinhood Chain.

Available$18,420.42 USDC
Network fee0.00018 ETH
Policy statusReady for quorum
2-of-3 quorum

Two shards, one signature

Stealth receive

Share one handle. Receive at one-time addresses.

The sender derives a fresh destination from your public meta-address. External explorers cannot trivially link incoming payments to a persistent identity.

Generated address #1 0x5564f9a1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7
Receiver pattern

ERC-5564 target flow

01Publish meta-address

Your handle points to a public stealth meta-address.

02Derive destination

The sender creates a one-time address for each payment.

03Scan and unlock

The wallet detects funds without exposing a persistent identity.

Swap routing

Stablecoin conversion with policy controls.

Estimated output 249.68 USDC Rate 0.9987 · Fee 0.08% · Route: aggregate
Route intelligence

Liquidity path

USDT
Aggregator
USDC
Quoted spread0.13%
PolicyPass
SettlementL2
A
Desktop client

Shard A

Encrypted local storage or OS keychain. Signs only after local user confirmation.

Ready for health check
B
Co-signer

Shard B

Encrypted service shard. Enforces spending limits, session checks, and velocity policy.

Ready for health check
C
Recovery passkey

Shard C

WebAuthn recovery shard. Combines with Shard B when the desktop shard is lost.

Ready for health check
Quorum rule

Any two shards can approve. One cannot.

A+B=Sign B+C=Recover
Ledger

Activity and settlement history

Recovery rehearsal

Recover access without a seed phrase.

Recovery path

Shard B plus Shard C

PasskeyShard C
+
Co-signerShard B
=
New clientShard A

No raw seed phrase is displayed, copied, or stored. Recovery uses an independent quorum path.

Open SDK

Embed threshold custody with typed TypeScript primitives.

The proposed @privatum/robinhood-chain-sdk package exposes shard creation, wallet composition, threshold signing, and network submission through Viem based APIs.

Open docs
integration.ts
import { Shard, PrivatumWallet, sendUsdc } from "@privatum/robinhood-chain-sdk";

const driveShard = await Shard.create("drive");
const serverShard = await Shard.create("server");
const recoveryShard = await Shard.create("recovery");

const wallet = PrivatumWallet.twoOfThree({
  shards: [driveShard, serverShard, recoveryShard],
  threshold: 2,
});

const txHash = await sendUsdc({
  wallet,
  to: "recipient.privatum",
  amount: "50.0",
  signingShards: [driveShard, serverShard],
});
Policy engine

Configure co-signer controls.

Anomaly detectionFlag unusual amount, destination, or velocity patterns.
Stealth receive by defaultGenerate a one-time address for incoming payments.
Operational posture

Recommended defaults

Keep anomaly detection enabled.
Use a daily limit below your operating balance.
Rehearse passkey recovery after every device change.
Export activity regularly for finance operations.
Keep the co-signer shard isolated from the desktop environment.