How Maskhood works

Getting started

1. Open the app and connectConnecting only shares your address. The app then asks your wallet to switch to Robinhood Chain (chain id 4663).
2. Sign one messageYour wallet signs one fixed, plain-text message. It is free and is not a transaction. Your tab turns that signature into your mask keys.
3. Fund a maskBridge ETH or USDC into a mask from Ethereum, Base or Arbitrum, or send from an exchange. Avoid funding it straight from your main wallet.
4. Trade, then move onSwap stock tokens from the mask. When you are done, sweep the balance to a fresh mask or to any address.

Masks

A mask is a normal Robinhood Chain address with its own private key. Your wallet signs one fixed message, and the tab derives one key per mask number from that signature. Standard wallets give the same signature every time, so signing again rebuilds the same masks on another device.

// one personal_sign of the fixed message "Maskhood mask keys v1 …"
sig      = r ‖ s ‖ v                       // 65 bytes, normalised (low-s, v = 27 or 28)
mask i   = keccak256(sig ‖ "maskhood-mask" ‖ uint32_be(i)) mod n
agent j  = keccak256(sig ‖ "maskhood-agent" ‖ uint32_be(j)) mod n   // n = secp256k1 order

The signature and the keys live only in the tab's memory. If you choose a passcode, the signature is stored encrypted (AES-GCM, key from PBKDF2) in session storage so a reload of that tab can reopen your masks; closing the tab removes it. Nothing secret is ever sent to Maskhood.

• Live balances: ETH, USDG and every stock token, read in one batch through Multicall3 on Robinhood Chain.
• New mask: one click, no transaction. Copy the address or show its QR code.
• Privacy check: each mask is checked for links to your main wallet, such as being funded straight from it, or receiving the same amount right after a deposit.
• Sweep: move everything to a fresh mask or to any address you type.
• Export key: show a mask's private key to import it into a wallet. Anyone who sees it can spend from that mask.

Privacy model

Masks make it much harder to tie your trades to your main wallet. They do not make you invisible. This is where the line is.

Third parties

Swaps and bridges are routed by LI.FI. LI.FI and the bridges it uses see the mask address, the amounts and the route. When you bridge in, your source-chain address and the mask appear together in the bridge record. Your main address stays out of the Robinhood Chain transfer, but the link exists on the bridge.

Good habits

• Fund each mask on its own, ideally from an exchange or a bridge, not from your main wallet.
• Do not move the exact same amount in and out within minutes.
• Sweep to a fresh mask instead of back to your main wallet.

Swap

Swap any of 96 Robinhood stock tokens on Robinhood Chain, such as NVDA, TSLA, AAPL and SPY, against USDG or ETH. The token list holds the official contracts, checked on-chain.

1. Quote: the app asks LI.FI for the best route and shows the rate, every fee, the network cost and the minimum you receive.
2. Slippage: set how far the price may move before the swap fails instead of filling badly.
3. Approve: selling a token needs a one-time approval for the router. The app shows the exact spender.
4. Sign and send: from your main wallet, or signed by a mask key right in your tab and broadcast to Robinhood Chain.
5. Status: the app follows the transaction and links it on Blockscout.

Costs are gas in ETH plus the route's own fees, including LI.FI's fee (0.25% in the quote today). Maskhood adds 0%. Stock tokens are tokens on Robinhood Chain: check what each one represents and whether you may hold it where you live.

Bridge in

Bring ETH or USDC from Ethereum, Base or Arbitrum straight to a mask on Robinhood Chain. The mask is the recipient, so your main address does not appear in the transfer on Robinhood Chain.

The bridge transaction on the source chain still shows the address you sent from, and the bridge record connects it to the mask. If that link matters to you, send from an address that is not your main wallet.

Agents on a leash

An agent is a mask that trades on a mandate you write in plain words, such as "Buy $50 of TSLA if it drops 3% today. Never more than $200."

1. You write the mandateThe text goes to Maskhood's planner, an AI model that answers with a strict plan in JSON: action, token, size, condition, limits and expiry.
2. Your tab checks the planHard rules run in the tab, not in the AI: the token must be on your allowed list, each order must be under the per-order cap, the total must fit the budget and the mandate must not be expired.
3. You see a preview and approveNothing is signed before you approve. With autopilot on, plans that pass the rules run while the tab stays open.
4. The agent's own mask signsThe budget is simply what that mask holds. It cannot reach your main wallet or your other masks.

Each plan is one agent run. Runs are counted per UTC day and depend on your $MASKHOOD tier, read on-chain (balanceOf) at the moment the agent thinks. They reset at 00:00 UTC.

Mask mode

With mask mode on, balances and addresses stay blurred until you hover or tap them, so a screen share or a glance over your shoulder shows nothing. App calls to Robinhood Chain, and swap quotes from LI.FI, also go through Maskhood's relay, which only forwards a short list of read, quote and broadcast calls. The public node and LI.FI then see our server instead of your IP. The relay itself sees your IP, like any website.

Verify

The Verify page reads any address's $MASKHOOD balance with a public balanceOf call, shows the call and the block it was read at, and the tier that balance gives. It also reads the buyback and burn: transfers from the treasury wallet to the burn address.

Open Verify Check it by hand

$MASKHOOD and tiers

Masks, swap, bridge and verify are free for everyone, and Maskhood adds a 0% fee. Holding $MASKHOOD raises your agent runs per UTC day:

Creator fees from Pons go to a public treasury wallet that buys $MASKHOOD back and sends it to the burn address. See the token page for how to buy and the live numbers. $MASKHOOD is a community token with no promise of profit.

Stay safe

• Maskhood never asks for your recovery phrase. Anyone who does is not us.
• Only sign the Maskhood message on maskhood.xyz. It is plain text and never a transaction.
• Check the contract address on the home page, all 42 characters, before you buy.
• Treat exported mask keys like cash: whoever sees them can spend.
• Official links only: maskhood.xyz and the X link on this site.

FAQ