Privacy Stack · Robinhood Chain mainnet

WE GO FULLY DARK.

Shielding is live. Your balance no longer shows as yours. But four leaks still follow you around the pool: your gas, your transfers, your addresses, your amounts. We’re closing all four.

4 layers live · 2 building · 2 in research

Already dark.

I · Balance privacyLive

Shield into the Notary and your funds no longer show as yours onchain. Unshield any time, to your wallet or a fresh address.

II · Order privacyLive

Every cartello is a Poseidon commitment. Side, size and limit stay sealed. The chain sees one hash.

Four leaks. Four layers.

III · Network privacy — Gasless relayerLive
The leak

You unshield to a fresh address, but it needs ETH for gas. Whoever funds it links it straight back to you.

The fix

A relayer pays the gas and takes its fee from the withdrawal. Your fresh address never needs funding. The trail stays broken.

Before and after comparison for You to Address: relayerBEFOREYouETH gas links youAddressAFTERYourelayerAddress
IV · Transfer privacy — Shielded transfersLive
The leak

To pay someone today, you unshield, send, and they shield again. Two public hops.

The fix

Send USDG from your shielded balance straight to theirs. It never leaves the pool. The chain sees a valid proof. No sender, no receiver, no amount.

Before and after comparison for You to Receiver: in-pool transferBEFOREYou2 public hopsReceiverAFTERYouin-pool transferReceiver
V · Receiver privacy — Stealth addressesBuilding
The leak

One public address shows every payment you ever received.

The fix

Every payment lands on a fresh one-time address only you can detect and spend. Built on the ERC-5564 standard.

Before and after comparison for Sender to Address: one-time addressBEFORESenderpublic addressAddressAFTERSenderone-time addressAddress
VI · Amount privacy — Split notes and staged withdrawalsBuilding
The leak

Shield exactly 5, unshield exactly 5, and in a young pool anyone can match them.

The fix

Deposits split into notes of different sizes. Withdrawals leave in parts, at different times, to different addresses. What goes in can’t be matched to what comes out.

Before and after comparison for In: 5.00 to Out: 5.00: split + delayBEFOREIn: 5.00matched by sizeOut: 5.00AFTERIn: 5.00split + delayOut: 5.00

Further into the dark.

VII · Compute privacyResearch

Blind matching: a matcher that crosses orders it can’t read. We’re evaluating co-SNARKs, fully homomorphic encryption and attested enclaves.

VIII · Selective disclosureResearch

View keys let you open your own history to an auditor or tax office, and only yours. Privacy by default, disclosure by choice.

Why every layer counts.

  1. I

    Privacy breaks at its weakest layer.

    One leak undoes everything else.

  2. II

    Real positions need real privacy.

    Tokenized stocks bring real holdings onchain.

  3. III

    Compliance stays intact.

    Every deposit still passes association-set screening.

Standing on giants.

What Tartaglia does differently: all four layers in one pool, built for tokenized stocks, native to Robinhood Chain, and wired directly into a dark pool. Shield, trade, transfer and withdraw without ever stepping into the light.

Third-party names describe prior work. No partnership or endorsement is implied.

Speak little. Prove everything.

Every layer ships when it’s proven and audited.