Skip to content
HOOD USDB.

Send money like a text — privately.

The confidentiality and reach layer for money on Robinhood Chain.

A payment leaves a sender, drops through the Robinhood Chain rule into the privacy pool — at which point the block explorer's amount and recipient fields go blank — then rises back out far from where it entered as a one-time pay link, which the recipient claims with no wallet, no seed phrase and no gas.
USDG settlement on Robinhood Chain — Arbitrum Orbit L2, chain ID 4663.
Robinhood ChainPrivacy poolAmount obfuscationUSDG stablecoinOne-time pay linksMixer routingPrivate ledgerRobinhood ChainPrivacy poolAmount obfuscationUSDG stablecoinOne-time pay linksMixer routingPrivate ledger
Arbitrum OrbitPooled accountsRelayer-paid payoutsWallet signature authx402 requestsLedger settlementScoped agent keysArbitrum OrbitPooled accountsRelayer-paid payoutsWallet signature authx402 requestsLedger settlementScoped agent keys
About HOOD USDB§ 01 — Overview

Stablecoins solved speed and cost. They did not solve exposure, and they never solved reach.

Hood USDB is the confidentiality and reach layer for money on Robinhood Chain. Your balance moves off your own address into a pooled reserve, deposits are split and routed so there is no on-chain edge back to you, and you spend by @username, by a one-time link, or through an agent working under limits you set.

Send privatelyHow it works
Chain
June 30, 2026
Robinhood Chain mainnet — an Arbitrum Orbit L2 built for regulated finance. Chain ID 4663.
Privacy
3 levels
Public, Partial or Full. Chosen per payment, priced accordingly. Privacy is a dial, not a switch.
Settlement
USDG · ETH
USDG when you want dollars — Paxos-issued, MAS/MiCA-regulated. ETH when you want the strongest privacy.

Stablecoin payments today are Exposed.

Every balance and every counterparty on a public L2 is legible to anyone holding a block explorer. And a transfer can only reach someone who already owns an address — which rules out nearly everyone you would actually want to pay.

ConfidentialityReachRegulated settlement
The problem§ 02 — Diagnosis

Fast rails, zero privacy, no reach.

A public L2 broadcasts every payment by default, and a token transfer can only land on an address that already exists. Both are dealbreakers the moment real money and real people are involved.

01

Exposure

Every balance and every payment is legible. Anyone can profile what you hold, who you pay and how often.

Default
02

Reach

You can only pay an address that already exists — which rules out nearly everyone you would actually want to pay.

Blocked
03

Onboarding

Receiving crypto normally means an app install, a seed phrase written on paper, and a working theory of gas.

Broken
04

The price of privacy

Existing tools are all-or-nothing and expensive, with no way to trade confidentiality against speed and fee.

Rigid
BaselinePUBLIC L2 · TODAY

What is visible on-chain today

Balance visibility100%
Transfer traceability96%
Counterparty exposure92%
Recipient onboarding friction88%
Reach without a wallet8% → 96%
Privacy flexibility12% → 100%

Dark bars measure a public L2 as it stands. The two lime extensions mark the only figures Hood Hood USDB changes — reach, and the ability to choose.

How it works§ 03 — Mechanism

Three parts. One payment that behaves like a message.

Pay anyone with a link

[01]

Attach an amount to a one-time link and send it however you like — message, email, DM. The funds sit in ledger escrow until the recipient claims them, either into an account or straight out to any address they type. No wallet is needed to receive, no app to install, and the relayer covers the gas. Nothing claimed in seven days comes back to you automatically.

No wallet needed to receiveClaim to account or addressAuto-refund at 7 days
A sender escrows 0.1000 ETH against a one-time pay link, watches it claimed in a browser by someone with no wallet, and — on the alternate branch — watches an unclaimed link refund itself automatically on day seven.

Confidential by default

[02]

A full-privacy deposit lands in a fresh one-time holding address, then moves on in randomized portions across staggered hops and through a mixing stage before joining the pooled reserve. Your spendable balance is tracked on the private ledger, and the relayer signs every payout — so your own address never appears as the sender.

Off-address balancesSplit + mixer routingRelayer-submitted payouts
A deposit travels the whole pipeline: wallet, one-time holding address, split into three unequal portions on staggered timing, a routing matrix that changes both their order and their size, the pooled reserve where the tracked amount disappears into an aggregate, and the private ledger where it reappears with no source.

Privacy is a dial, not a switch

[03]

Choose per payment. Full routes ETH through the entire pipeline — strongest separation, highest fee, slowest. Partial sends USDG into the shared pool, so the deposit is visible but the spending is decoupled. Public is a plain transfer, cheapest and fastest, and we say plainly that it is fully visible. Rent can go Full. Splitting a dinner bill does not have to.

Full · ETHPartial · USDGPublic · USDG
The same payment shown at all three privacy levels, with the block explorer redrawn each time — fully populated at Public, partially decoupled at Partial, and finally empty at Full, holding only the line no matching transactions.

Settled in a regulated dollar

[04]

Everything lands on Robinhood Chain, an Arbitrum Orbit L2 live since June 30, 2026. USDG is the dollar leg — Paxos-issued, MAS/MiCA-regulated, 1:1, and part of the Global Dollar Network. First-come-first-served sequencing means there is no gas auction to front-run, which matters more for a privacy protocol than it does for most.

Chain ID 4663FCFS sequencingPaxos-issued USDG
The app§ 04 — Product

A payments app where the crypto disappears.

Pick a recipient, pick an amount, sign once. The pool, the routing and the ledger stay where they belong — underneath. Your wallet is your identity, an optional @username makes you payable by name, and one toggle hides every figure on screen when someone is looking over your shoulder.

See how payments work
hoodusdp.com/dashboard
Private balance
0.5000 ETH
Tracked on the private ledger. Never on your own address.
Privacy: Full
USDG balance
$18,420.00
Public / Partial deposits
Pooled reserve
142.8109 ETH
Aggregate only
In escrow
0.1000 ETH
1 outstanding pay link
ILLUSTRATIVE PREVIEW — SAMPLE DATA, NOT LIVE PROTOCOL FIGURES
Agentic payments§ 05 — Agents

Software that can pay, under limits it cannot argue with.

An agent gets a scoped key and a spending policy: a per-transaction ceiling, a rolling 24-hour limit, recipient allow and block lists, time windows. Every call is checked server-side before anything moves, and every settlement returns a signed receipt the payee can verify without asking us.

Agent
settler-01
PassportTrust 62 / 100
Max per tx0.1000 ETH
Daily limit0.5000 ETH
Spent 24h0.0003 ETH
Scopesbalance · transfer · withdraw

An agent holds a scoped API key, never your private key. Every call is checked against this policy server-side and written to a spending log — allowed, blocked, completed or failed, with the reason. Pause or delete the agent and enforcement is instant.

POST /api/agents/transfer
curl -X POST https://hoodusdp.com/api/agents/transfer \
  -H "X-Agent-Key: <key>" \
  -d '{ "to": "@alice", "amount": 0.42, "token": "ETH" }'
403
{
  "error": "blocked_by_policy",
  "rule": "max_per_tx",
  "limit": 0.1,
  "requested": 0.42
}

Over the per-transaction limit. Refused before anything moves.

An agent presents a scoped key, is refused by the per-transaction limit with a 403 before any funds move, then settles a smaller x402 request and emits a signed receipt that verifies offline against the recorded signer.
Who it is for§ 06 — Audience

Three roles. Each with a reason to be here.

01 / Senders

Pay anyone, at the privacy you choose

Rent, payroll, a cross-border payout, or splitting a bill — each one at its own level. Send to a @username, an address, or a link that reaches someone who has neither.

Rent and bills at FullSplit a bill at PublicCross-border payouts
02 / Recipients

A link, then money, in seconds

Open the link in any browser. Connect a wallet you already have, or just paste an address and take the payout. No install, no seed phrase, no gas — the relayer covers it.

No wallet needed to receiveRelayer-paid gasHold, send on, or withdraw
03 / HUSDB holders

Lower fees now, protocol share next

Holding HUSDB moves you up the withdrawal fee tiers today. Staking for a share of protocol fees, governance over fees and privacy parameters, and USDG reserve yield share follow.

Fee tiersBuyback + burnUSDG yield share
Privacy core§ 07 — Stack

Five layers between your money and a block explorer.

A pool keeps balances off your address. Splitting and a mixing stage break the trail. The relayer signs every payout. Links remove the wallet requirement. And every one of them settles in a regulated dollar on a chain built for regulated finance.

A one-time link carries an amount and nothing else. The funds sit in ledger escrow until someone claims them, to an in-app account or to any address they type. Nothing claimed inside seven days returns to the sender automatically.

One-time linksSignature auth7-day refund

Your funds are held in a shared pool contract rather than on your own address. An observer reading your wallet learns the pool exists and nothing else; the split between accounts lives on our ledger.

Off-address balancesPool aggregate onlyPer-account ledger

A full-privacy deposit lands first in a fresh one-time holding address, then moves on in two to four randomized portions across staggered hops and through a mixing stage. Amounts are randomized or rounded to fixed denominations so the parts cannot be recombined by arithmetic.

Mixing stageWallet splittingAmount obfuscation

Withdrawals and transfers are signed and broadcast by the protocol relayer, funded from the pool. Your address never appears as the sender of the outbound transaction, and a recipient needs no ETH of their own.

Origin protectionRelayer-paid gasPool-funded

Everything settles on Robinhood Chain, an Arbitrum Orbit L2 live since 30 June 2026. USDG is the dollar leg — Paxos-issued, MAS/MiCA-regulated, 1:1. First-come-first-served sequencing means there is no gas auction to front-run, which matters more for a privacy protocol than for most.

Chain ID 4663FCFS sequencingETH gas · relayer-paid
What we do not claim§ 08 — Limits

We say private, not magic.

Every other section on this site is an argument for the protocol. This one is the argument against it, written by us, at the same size as the rest.

01

Operational privacy, not cryptographic

This is privacy against on-chain observers, produced by pooling and routing. It is not a cryptographic guarantee. FHE-encrypted balances and an on-chain proof system are on the roadmap and are not shipped.

02

You are trusting a pool operator

You sign every deposit and withdrawal, and we never hold your keys — but your balance sits in a reserve Hood USDB operates and is recorded on our ledger, so withdrawals are processed by our backend rather than claimed from a contract. That is a trust assumption, and you should weigh it.

03

Off-chain adversaries are out of scope

Someone holding data that never touches the chain — an exchange record, a seized device, a legal order — is outside what routing can address. We would rather name the boundary than let you assume there is not one.

04

Public means public

The Public level is a normal token transfer and is fully visible, exactly like any other. We do not call it Standard, because that would be a euphemism, and a euphemism here would cost more than it buys.

Roadmap§ 09 — Timeline

Rails, then reach, then tiers, then scale.

Four phases, shipped in that order. What the docs describe as working is marked shipped and written in the present tense. What is not shipped sits in phase four and is named.

Levels — in progress

Public, Partial and Full selectable per payment, relayer payouts for origin protection, and the fee flywheel — collection, buyback on Robinhood Chain DEXs, permanent burn.

  • 01Privacy level per payment
  • 02Protocol relayer v1
  • 03FeeCollector + buyback
  • 04HUSDB fee schedule
FAQ§ 10 — Questions

The questions worth answering properly.

Still stuck? Ask us on Twitter, or read the docs.

Pick an amount and a privacy level, and Hood USDB mints a one-time pay link. The funds move into ledger escrow, and you share the link however you like. Whoever opens it either signs in with a wallet they already have and takes the credit into an account, or pastes any address and receives the payout directly. If nobody claims it inside seven days it returns to you automatically — no lost money, no dead ends.
Three mechanisms. A shared pool holds your funds instead of your own address, so a block explorer reading your wallet sees the pool and nothing else. A full-privacy deposit lands in a fresh one-time holding address and moves on in two to four randomized portions across staggered hops and through a mixing stage, with amounts randomized or rounded to fixed denominations so the parts cannot be recombined by arithmetic. And the relayer signs and broadcasts every payout, so your address is never the sender. This is operational privacy against on-chain observers, not cryptographic privacy — it means trusting Hood USDB as the pool operator. FHE-encrypted balances and an on-chain proof system are on the roadmap, not shipped.
Public is a plain USDG transfer, fully visible, cheapest and fastest. Partial sends USDG into the shared pool — the deposit is visible, but everything spent afterwards comes from the pool, so amounts and recipients are decoupled from your address. Full switches the asset to native ETH and routes it through the complete pipeline: one-time holding address, split across staggered hops, mixing stage, pooled reserve, private ledger. Strongest separation, highest fee, slowest. Every level pays out through the relayer.
Because the pipeline that gives Full its separation runs on the chain's native asset. USDG is the dollar leg and covers Public and Partial; ETH is the private leg, and the ledger balance that internal transfers move is denominated in it. USDG when you want dollars, ETH when you want the strongest privacy — you choose per payment, and the deposit screen tells you which you are getting.
Robinhood Chain is a permissionless EVM L2 on Arbitrum Orbit L2, in public mainnet since June 30, 2026 and built for regulated finance. Its settlement asset is USDG — Paxos-issued, MAS/MiCA-regulated, 1:1 to the dollar, and part of the Global Dollar Network, which shares reserve yield with ecosystem partners. First-come-first-served sequencing also means no gas-auction MEV, which matters a great deal to a privacy protocol.
No. A pay link opens in any browser, with no app-store detour. The recipient either signs in with a wallet they already have and takes the credit in-app, or types an address and the pool pays it out. Either way the relayer covers the gas, so they need no ETH, no seed phrase and no vocabulary. Senders are a different story: to send, you connect a wallet, sign one message, and deposit.
Exactly what your spending policy allows, and nothing else. An agent holds a scoped API key — never your private key — with a per-transaction ceiling, a rolling 24-hour limit, allowed and blocked recipients and optional time windows, all enforced server-side before anything moves. Every attempt is logged with its outcome and its reason. Agents are ETH-only, and every settlement returns a signed receipt the payee can verify offline with one signature recovery.
HUSDB is the protocol token. Holding it moves you up the withdrawal fee tiers today. Staking for a share of protocol fees, governance over fees and privacy parameters, and a share of USDG reserve yield follow — funded by a flywheel of fee collection, buybacks on Robinhood Chain DEXs and permanent burns. Fee tiers are set from a live schedule, so we publish the mechanism rather than a table that would go stale.

Send money like a text. Privately.

Connect a wallet, sign one message, and make your first private payment on Robinhood Chain.

Open AppRead the docs