Bounty · Robinhood Chain mainnet

BREAK THE SEAL.

100 USDG sits sealed in the Notary. Prove our tech doesn’t work, and it’s yours.

Querying Robinhood Chain mainnet...

Checking live status...

You can see it go in. You can’t see it after.

That’s the point. Once shielded, the balance no longer shows as anyone’s. What stays public is proof it entered, and proof it hasn’t been spent.

Shielded deposit parameters on Robinhood Chain mainnet
Bounty wallet0x51A8b456…E43B330F
Shield transaction0x8fa97607…e422f281
Amount100 USDG
Note commitment0x2e8fbfcf…e4612e31
Nullifier0x9c3e6598…aae5d24b
Sealed at2026-10-08T00:00:00Z (UTC)

The nullifier is published in advance. It only shows up onchain if the note is spent. As long as it hasn’t appeared, the seal holds. Anyone can check this, any time, without trusting us.

What breaks the seal.

  1. I

    Deposit, withdrawal, or transfer failure

    A shield, unshield or shielded transfer fails in a way you can reproduce on mainnet.

  2. II

    Trapped capital

    Funds get stuck. A user can’t withdraw their own shielded balance.

  3. III

    Onchain balance deanonymization

    A balance is linked to its owner using onchain data alone, beyond what’s disclosed on /privacy as still building.

  4. IV

    Soundness or verification breach

    A forged proof is accepted, or a note is spent twice.

  5. V

    Disproved truth

    Any claim on this site is false and you can show it onchain.

Layers still marked “Building” on /privacy are known gaps and don’t count.

How to claim.

  1. I

    Responsible disclosure

    Report privately. DM us on X or email us. Never post a working exploit publicly.

  2. II

    Verifiable evidence

    Show the proof. Include transaction hashes on Robinhood Chain mainnet and the exact steps to reproduce.

  3. III

    Containment

    Don’t drain anything. Demonstrate the issue with the smallest possible amount of your own funds. Do not take or move funds that aren’t yours, including the bounty note.

  4. IV

    Priority

    First valid report wins. We verify, then pay 100 USDG to the address you choose.

  5. V

    Transparency

    We publish the result. Every claim goes into the log below, valid or not.

Good-faith research that follows these rules won’t be treated as an attack. Taking or moving funds that aren’t yours is not research and is not covered. The bounty is paid by the team after verification; it is not something to be taken from the pool directly. One payout per issue.

Every claim, in public.

No valid claims yet. The seal holds.

Speak little. Prove everything.

Don’t trust us. Check the seal.