A shared pool on Robinhood Chain that holds ETH and listed dollar tokens as private notes. Inside the pool, balances and transfers are not visible on chain. You enter with a deposit from your wallet and leave with a withdrawal to any address.

You keep using the wallet you already have. It signs one message to create your account keys, and it signs every send and withdrawal after that. There is no new seed phrase.

1. Open the app and connect your wallet.
2. Sign the account message. This creates keys that can read your balance and cannot move it.
3. Publish your account with one transaction, so others can send to your address.
4. Deposit ETH or USDG. The deposit is screened, then credited to your private balance.
5. Send privately to other Hushwave accounts, or withdraw to a fresh address.

Deposit

Your address, the asset and the amount.

Private send

That a transfer happened. Not the sender, the recipient or the amount.

Withdrawal

The destination, the asset, the amount, the fees and the time.

Account

Your wallet address and your public account keys, once you publish them.

Each send or withdrawal is an EIP-712 message your wallet signs: kind, token, amount, recipient, network fee and a one-time number. The browser then builds a zero-knowledge proof that the signer owns the notes being spent, without revealing which notes or which address. The pool checks the proof and marks the notes and the signed message as used, so neither can be spent twice. The relayer submits the transaction, so your address never appears as its sender, and it cannot change the recipient, the amount or its own fee without breaking the proof.

A wave leaves every 15 minutes. Withdrawals that choose a wave are held by the relayer and sent together at that time, in shuffled order. You can choose any of the next eight waves and cancel until it leaves. If the network fee rises above the fee you signed, the withdrawal moves to the next wave; after 24 hours it is dropped and the funds stay in your private balance.

A fast withdrawal is sent at once and usually lands within a minute.

Deposit

0.5% of the amount, taken when the deposit is credited.

Withdrawal

0.5% of the amount withdrawn.

Private send

No Hushwave fee.

Network fee

Paid to the relayer in the asset you move, quoted before you sign.

Limits

The pool contract caps both percentage fees at 1%.

Every deposit is checked against sanctions lists, including the U.S. Treasury's SDN list, before it is credited. A refused deposit is returned in full to the address it came from. While a deposit waits, you can take it back yourself at any time. Deposit only from an address you control, since refunds can only go back to it. Withdrawal destinations are checked too, and some can be refused.

The relayer only carries transactions. It never holds funds or keys. If it stops answering, the app reads your balance straight from the chain, and the Withdraw tab offers one more way out: send the withdrawal from your own wallet.

That way pays no relayer fee. Your connected wallet pays the network fee in ETH and appears on chain as the sender, which links the withdrawal to it, so it is meant for when the relayer is down. Private sends and waves wait until the relayer is back, and a waiting deposit can always be taken back.

Your wallet

The only key that can spend your notes.

Account keys

Read your balance and history. They live in your browser tab and cannot spend.

Operator

Can pause new deposits and sends, list assets, set fees within the cap and choose the screener.

Never paused

Withdrawals. The pool contract has no switch for them.

Upgrades

None. The pool contract cannot be changed; a new version would be a new pool.