How SEALED works.

How it works

Private route, step by step

• Quote. We quote your route to the destination network and asset across a screened network and lock the best rate. You see exactly what arrives before you sign.
• Order. On "Seal it" we open your order and return a one-time deposit address on Robinhood Chain itself, valid for one hour.
• Send. You sign one plain ETH transfer on Robinhood Chain (4663) to that deposit wallet. No bridge, no contract call, no approval.
• Clear. Your funds are routed across a screened exchange network and delivered to the address you chose. That hop sits between your deposit and the destination, breaking the on-chain link.
• Track. Your transfer reports by tx hash; your order status refreshes every 30 s until it is delivered, refunded, or expired.

What is seen at the routing layer

The one-time deposit address, the transfer that funds it, and your destination address. Screening runs on the deposit before anything moves. SEALED sends no personal data.

What SEALED stores

Per order: the order id, the Robinhood tx hash, the sending address, amounts, status, timestamps. Lookup is by an unguessable id only. There is no per-wallet history endpoint by design.

Routes

• A · Private. Robinhood → one-time deposit on 4663 → screened exchange route → destination network (EVM or not: BTC, SOL, XMR, TRON and more).
• B · Standard. Robinhood → screened route → destination. Same engine, limited to familiar EVM chains and framed for speed rather than unlink. Works today.
• C · Arrive on Robinhood. Any network → SEALED → ETH on Robinhood Chain. We open a one-time deposit address on the network you are sending from; you fund it from a wallet or an exchange, and it is delivered to your Robinhood address. No wallet signature needed to receive.

Fees

• Standard: same as private — everything is inside the quoted rate. The "route spread" line shows the full cost in USD before you sign.
• Private: everything is inside the quoted rate — the "route spread" line shows the full cost in USD before you sign. No fee outside the quote.
• Gas: one transaction on Robinhood Chain, estimated live in the quote.

Limits

• A live minimum and maximum per quote.
• A per-order cap of $60,000 equivalent, enforced server-side and printed as a warning on the quote. Above it, contact us — larger amounts are handled case by case, for regulatory reasons.
• Geo-block and Tor rules on /compliance.

Refunds

If a deposit is flagged by screening, cannot fill, or expires, funds are returned along the path they came from, tracked on this order id. SEALED never holds funds and cannot move or redirect a refund — there is nothing of ours on the money path.

Risks

• Unaudited software. SEALED itself is not audited. It writes no contracts, but the routing logic could have bugs.
• Floating rate. The private rate is floating between quote and clearing; the delivered amount can differ slightly from the quote. Standard bridge legs carry a 0.5% slippage tolerance.
• Routing delays. Screening can hold a deposit. XMR routes are slower by design.
• Address reuse. A reused destination address is a link. The seal cannot fix that.
• Timing. Amount + timing correlations exist. Do not expect a mixer's anonymity set; expect a clean unlink of one hop.

API

• GET /api/chains every destination network and asset we can reach, with an evm flag (Standard shows EVM only).
• GET /api/tokens?chain=4663 token list per chain.
• POST /api/quote standard: { fromToken, fromAmount, fromAddress, toChain, toToken, toAddress } · private: { fromAmount, toNetworkId, toAssetId }.
• POST /api/order create private order (returns the tx to sign) or record a standard tx.
• GET /api/order/:id tracking view. PATCH attaches the signed tx hash.
• POST /api/quote { mode, fromAmount, toNetworkId, toAssetId } · same shape both tabs.