Hold and send USDG and native ETH with a signing key split into three independent shards. Any two can sign — no single party, including us, can move your funds.
Hot wallets keep one key in one place. Hardware wallets add cost and friction. Arcane splits authority across three shards and enforces your limits before anything is signed.
The full private key lives in one browser. One phishing page or malicious extension can authorize every transaction.
Better key isolation, but adds hardware cost, firmware trust, shipping, and a 24-word seed you must never lose.
Shard A on your device, Shard B with a policy co-signer, Shard C as your recovery code. Two are required — one alone is useless.
Every transfer passes your device, the co-signer's policy engine, and an in-memory quorum before it reaches Robinhood Chain.
Prepares an EIP-1559 transfer of USDG or native ETH and checks balance and gas.
unsigned tx · chain 4663The request is signed by a non-exportable device key with a timestamp, so it can't be forged or replayed.
sig_device(intent, ts)Per-transaction cap, daily limit, velocity and freeze state are checked. Only then is Shard B released for this one signature.
policy ✓ → shard BShards A + B reconstruct the key in memory, sign once, and are wiped. The key is never stored whole.
A ⊕ B → secp256k1 sigThe signed transaction is broadcast and confirmed. Receipt and status are logged to your activity.
eth_sendRawTransactionStandard primitives, verifiable on-chain. Nothing exotic, nothing hidden.
| Component | Interface | Description |
|---|---|---|
| USDG token | 0x5fc5…d168 | ERC-20 stablecoin balances and transfers on Robinhood Chain. |
| Co-signer | POST /api/cosign | Verifies device signature and policy, then releases Shard B for exactly one signature. |
| Policy engine | POST /api/policy | Per-tx cap, daily limit, velocity. Tightening is instant; loosening waits 24 h. |
| Recovery | POST /api/recover | Recovery shard proof rebinds a new device and revokes the old one. |
| Stealth registry | GET /api/stealth/announcements | Public announcements for one-time addresses; scanned locally with your view key. |
| RPC | rpc.mainnet.chain.robinhood.com | Allow-listed JSON-RPC proxy for balances, gas and broadcast. |
Everything a payments wallet needs, without handing anyone custody.
Send USDG or ETH to any address — or in stealth mode to a fresh one-time address that can't be linked on-chain to the recipient's main wallet.
Your view key scans public announcements locally. Found payments can be swept into your main wallet in one click.
Set per-transaction and daily limits plus a hourly velocity cap. Freeze the wallet instantly if something looks wrong.
Lost your device? Your recovery code plus the co-signer restore access on a new one, with the old device revoked.
Arcane runs entirely in your browser tab. Keys are generated locally with WebCrypto and never leave the device whole.
Any modern browser with WebCrypto support, on desktop or mobile.
No. The co-signer holds only one of three shards, which can't sign anything alone. It can refuse a transfer that breaks your policy — it can never initiate one.
No. There's no app, extension or installer. Open the wallet in your browser, set a password, save your recovery code, and you're ready.
Use your recovery code on any browser. Combined with the co-signer shard, it restores the same address and revokes the lost device.
The sender derives a one-time address from your public stealth keys. Only you can detect and spend it, so observers can't link the payment to your main address.
You only pay Robinhood Chain network fees in ETH. Stealth USDG payments include a small ETH drip so the recipient can sweep the funds.
Not yet. Treat it as early software and keep balances small until an independent audit is published.