Building on Robinhood Chain

Hold dollars.
Keep them private.

Mint PUSD, a dollar designed to be backed 1:1 by USDG on Robinhood Chain — then opt in to the shielded pool, with zero-knowledge proofs generated in your browser.

How it works

Three steps, one dollar.

Mint a public dollar, shield it when you want privacy, redeem it back — no lockups, and no pause path on the way out. The same dollar you put in, all the way through. None of it is deployed yet.

Step 01

Deposit USDG,
mint PUSD.

Send USDG — the Paxos-issued Global Dollar — on Robinhood Chain and receive PUSD 1:1, with no fee on the ramp. What you get is an ordinary, fully public ERC-20: one PUSD for every USDG the vault locks. Both are 6-decimal tokens, so the 1:1 invariant needs no scaling.

9:41
usePrive
Robinhood Chain

Deposit & mint

Mint PUSD

You deposit

USDG (Global Dollar)

USDG

Global Dollar · Paxos

1,000.00

USDG

You receive

PUSD

1:1 USDG-backed by design

1,000.00

PUSD

Rate 1 USDG = 1 PUSDRamp fee None

1:1 by design · no ramp fee

Step 02

Opt in to
the shielded pool.

Privacy is a step you take, not a default you inherit. Shield your PUSD and it becomes a private note: from then on, amounts and counterparties stay off the public ledger, while zero-knowledge proofs — generated locally in your browser — still prove every transfer is valid.

9:41
usePrive
Robinhood Chain

Shielded balance

PUSD · Shielded

Hidden by a zero-knowledge proof

Shielded because you opted in
Proofs run in your browser

Recent activity

Sent

To ••••

•••• PUSD

Received

From ••••

•••• PUSD

Private, not hidden from math

Step 03

Redeem back
to USDG.

Burn PUSD and withdraw USDG 1:1, fee-free, with no lockups. Redemption has no pause path — the guardian cannot switch it off. Two conditions do sit on the way out and we would rather name them: the redeem ramp refuses a payout address on the screening blocklist, and unshielding a private note reverts until the guardian has accepted a covering association root.

9:41
usePrive
Robinhood Chain

Redeem

Redeem to USDG

You redeem

PUSD

Available ••••

500.00

PUSD

You receive

USDG (Global Dollar)

USDG

Global Dollar · Paxos

500.00

USDG

Rate 1 PUSD = 1 USDGRedemption fee None

No pause path · Screening at the ramp

Privacy, on your terms

Dollars that mind their own business.

On most chains, your balance and every payment you make are public by default. Privé keeps the dollar exactly as it is — and gives you a shielded pool to step into when the amounts are nobody else's business.

Privacy you opt into

Minting gives you a public dollar. Shielding it — a separate, proof-gated step — is what makes the balance yours alone. A deliberate choice, not an inherited default.

Backed by design

Every PUSD is designed to be backed 1:1 by USDG locked in the vault — the contract cannot mint one without locking the other. Nothing is deployed, so nothing is backed today. USDG is issued by Paxos, which retains the ability to freeze and to wipe balances; anything holding USDG inherits that risk.

Redeem, unpausably

Burn PUSD for USDG 1:1, fee-free, with no lockups and no pause path — the guardian cannot switch redemption off. Two conditions do gate the exit: a blocklisted payout address is refused at the ramp, and unshielding needs an accepted association root.

Built for Robinhood Chain

PUSD is designed for Robinhood Chain (chain 4663) — an EVM network where USDG already circulates. Familiar rails, quieter ledger.

How the privacy works

Shielded by zero-knowledge proofs.

Once you shield, Privé works on zero-knowledge proofs generated in your own browser. Your shielded balance and the amounts you send stay off the public ledger — yet the math still proves, to anyone, that every transfer is valid and that the pool never creates a dollar the vault is not holding.

It's privacy for normal people — payroll, savings, a quiet treasury — not a way to hide where money came from.

  • Amounts & counterparties stay off the public ledger
  • Validity is still provable to anyone — no trust required
  • Proofs run locally in your browser; no proving service, no middleman holding your funds
Zero-knowledge
Shielded transferRobinhood Chain
From0x9f4c…2e1a
To••••••••••
Amount•••••• PUSD
Proof valid· backing provable, amounts hidden
Two tokens, one firewall

$PUSD & $PRIVE, side by side.

$PUSD is the product: the dollar, designed to be backed 1:1 by USDG and redeemable 1:1. $PRIVE is a separate ecosystem token — volatile, unbacked, and not a dollar. They are two different things, and nothing about $PRIVE can reach $PUSD's backing.

$PUSD

The product · the dollar

The dollar you hold, spend, and can choose to shield.

A standard 6-decimal ERC-20 — on-chain name Prive Dollar, symbol PUSD — designed for Robinhood Chain and backed 1:1 by USDG, the Paxos-issued Global Dollar, locked in an immutable vault. The contract cannot mint one without locking the other. Nothing is deployed, so nothing is backed today.

  • 1:1 USDG backing by design — both are 6-decimal, so nothing has to be scaled
  • A public ERC-20 at mint; shielding is a separate, proof-gated step you opt into
  • Redeemable 1:1 at the ramp, fee-free, with no lockups
  • No pause path on the exit — but a blocklisted payout address is refused, and unshielding needs an accepted association root
  • Pays no yield. It is a dollar, not an investment
Contract · Robinhood ChainPublished at deploy
Backed by design · Public · Redeemable

$PRIVE

Separate token · volatile · unbacked

A separate ecosystem token. Volatile, unbacked, and not a dollar.

$PRIVE is planned to launch on PONS. No date is set. It is an access and utility token for the ecosystem around $PUSD — complementary to it, never a competitor and never a second dollar. It holds no reserve, has no peg, is not redeemable for $1, and can go to zero.

  • Volatile and unbacked — not a stablecoin, not pegged, not redeemable for $1
  • Access and utility only, and every utility is planned, not shipped
  • No yield, no APY, no staking returns, no revenue share, no buybacks
  • No claim on protocol fees, on the treasury, or on the reserves
  • Can go to zero — only ever risk what you can afford to lose
No date setNot launchedUtility planned
Contract · not launchedPublished at launch
Volatile · Unbacked · Not a stablecoin

The firewall

$PRIVE is a separate, volatile, unbacked token. It is not $PUSD and it is not a stablecoin. It has no reserve behind it, no peg, and no redemption at $1; it pays no yield and gives its holders no claim on protocol fees, treasury or reserves, and it can go to zero. Every $PRIVE mechanism lives outside the immutable core, so no $PRIVE mechanism can ever make $PUSD's 1:1 USDG backing or its solvency depend on $PRIVE — a move in the $PRIVE price, in either direction, can never touch $PUSD's 1:1 redemption. Neither token is deployed today.

$PUSD is the dollar · $PRIVE is not a dollar and is not backed

Roadmap

Where we're headed.

Nothing is deployed yet. This is the order we're doing it in — in the open, one deliberate phase at a time, and without dates, because immutable contracts ship when the review says they can.

01Done

Contracts & circuits

The immutable core — vault, ramps, shielded pool, note memo — plus the Noir circuits that prove every shield, transfer and unshield. Written, and green end to end under test.

02In progress

Testnet rehearsal

The whole round trip on the Robinhood Chain testnet (chain 46630) against the real contracts, the real proofs and the real browser client: mint, shield, private send, unshield, redeem. Rehearsed until nothing surprises us.

03Planned

Independent review & bug bounty

External security review of the contracts and the circuits, plus a public bug bounty. Findings and reports get published when they exist — we will not claim an audit we do not have.

04Planned

Guardian multisig from genesis

The guardian is a Safe multisig from the very first deploy transaction, never a single key. Its whole authority: pause entries, append association roots, and own the screening blocklist.

05Planned

Mainnet deploy on Robinhood Chain

Deploy the immutable contracts to chain 4663, verify the source on Blockscout, and publish every address on this site. Until that transaction lands, nothing is live — and the app says so on every chain.

06Planned

Compliant privacy

Association sets with selective disclosure — prove your funds are clean without exposing anyone else, and let honest exits stay honest without deanonymizing the pool.

07Planned

Private payments

Payment links, requests, and recurring transfers — so PUSD is something you spend, not just something you hold.

FAQ

Questions,
answered.

The honest version — what Privé is, what it isn't, and where it stands today.

Still curious? Ask in the Telegram

No. The contracts are written and tested, but nothing is deployed — there is no Privé contract address on Robinhood Chain or anywhere else. The app runs, and on every chain it tells you the protocol isn't deployed there yet. When the mainnet deploy lands, every address gets published on this site and you'll be able to verify them on the Robinhood Chain Blockscout explorer.

Support

Need a hand?

Questions, stuck, or just want to dig deeper? The support hub and community have you covered.

Get support