01 / 04
Your loan is public.
On a transparent chain anyone can read your collateral, your debt and exactly how close you are to liquidation.
Encrypted money markets · Robinhood Chain
Private borrower positions.Public market accountability.
FHE-powered confidential lending architecture for Robinhood Chain. Collateral, debt and health factor are designed to stay ciphertext once FHE ships — every market stays auditable. Testnet runs a simulated adapter.
- Chain
- 46630 · testnet
- Contracts
- Deployed
- Privacy
- Public · FHE pending
- Audit
- None yet
§01 — The problem
Privacy—
is a solvency
problem.
02 / 04
That is a target.
Visible thresholds invite liquidation hunting and copy-trading. Treasuries and funds stay away.
03 / 04
Privacy can't break solvency.
Hiding positions is worthless if liquidations stop working. The market must stay auditable.
04 / 04
So we encrypt the position, not the market.
Collateral and debt become ciphertext. Totals, rates, oracles and curator actions stay public.
Veilbook · Veilbook · Veilbook
§02 — Veilbook
Ciphertext
in. Solvency
out.
Encrypt the borrower, not the market. Toggle the view to see what an observer would get once confidential mode ships.
- Collateral0x9f3a…c41e
- Liquidation threshold80% (public)
- Debt0x07bd…e902
- Health Factorebool → solvent
Example from the brief. Not live — positions are public until FHE support reaches this chain.
What an observer seesTodayTarget
- Assets, risk params, caps, ratesPublicPublic
- Oracle price, timestamp, validityPublicPublic
- Market totals & utilizationPublicPublic
- Wallet address & action timingPublicPublic
- ERC-20 transfer amountsPublicPublic
- Your collateral amountPublic◆ Encrypted
- Your debtPublic◆ Encrypted
- Your Health FactorPublic◆ Authorized only
- Liquidation eligibilityPublic◆ Minimum signal
§03 — Ironclad
One number
decides
liquidation.
HF = collateral × LT ÷ debt.
Below 1.00, the forge takes it.
Illustration only. Live markets use curator-set parameters, oracle prices and accrued interest, computed in fixed-point with debt rounded up and collateral rounded down.
HF = ($10,000 × 80%) ÷ $5,000
Health Factor
1.60
Healthy
01.00 liquidation23+
Collateral would have to fall 37.5% before this position becomes liquidatable.
§04 — The stack
Six modules.
One forge.
Status is what exists in this repository — not a roadmap. Click a tag to read it.
§06 — Contracts
Verify, don't trust.
Every contract this app talks to, per network. Switch networks and the list follows; each address links straight to the block explorer.
Robinhood Chain Testnet · 18 contracts
- FORGEHUBLiquidityHubShared liquidity hub · spoke credit limits0x4E424aB496725DDeAe2890d193f07889248e6B920x4E424a…8e6B92explorer ↗
- FORGEHUBMarketFactoryVerifies and registers markets0x9484889951FCde41BE56C5bDE93EAFfaa98D15eE0x948488…8D15eEexplorer ↗
- FORGEHUBMarket · tETH/tUSDIsolated spoke market0x6F16DDDc77b14129C2ae50Bd4aD079eec3243c1A0x6F16DD…243c1Aexplorer ↗
- FORGEHUBCuratorRegistryRegistered markets and curators0x665728868c7Ac7EbbF0fdE5Bd30Af5094e3211B70x665728…3211B7explorer ↗
- IRONCLADRiskEngineHealth factor and solvency checks0x30E67Bf7e1dDA34f8F7B0B261f358e7d0AA348100x30E67B…A34810explorer ↗
- IRONCLADLiquidationEngineLiquidation math0x3370C37629dE14256077e939076db4EDe405E2600x3370C3…05E260explorer ↗
- FORGEHUBInterestRateModelVariable rate curve0xA0f58c025d524985AdB823c3be736570cf1537D70xA0f58c…1537D7explorer ↗
- IRONCLADOracleAdapterPrice feeds with staleness bounds0x138445E4Eb800afB44835dbB5CE0Dfd58269f81F0x138445…69f81Fexplorer ↗
- VEILBOOK · mockPlaintextFHEAdapterFHE interface stand-in (no encryption)0xa431F2621Da10eDAcF5263168cF9aCe67165cd140xa431F2…65cd14explorer ↗
- STEEL LENSLensReaderRead-only market and user snapshots0x8C1E90549DAd239a1661f8E107D1Db8C0fD3902e0x8C1E90…D3902eexplorer ↗
- IRON GATEAllowlistEligibilityOptional borrower allowlist0xF7517854b0C868BEADEAF9c5a4a38750fDfC12a40xF75178…fC12a4explorer ↗
- BREAKGLASSEmergencyControllerPause switches0x9A09a39Fbf18E8D0c85e834eaDF0BaeB87eb2B160x9A09a3…eb2B16explorer ↗
- GOVERNANCEForgeAdminDeploys timelock + registry0xEAd08A816C74f8F73B440729D90Db6BD668935500xEAd08A…893550explorer ↗
- GOVERNANCETimelockControllerGovernor and curator of every market0x0e2A711D76b4b9fe652bf2915635fc314a9280dF0x0e2A71…9280dFexplorer ↗
- TEST ASSET · mocktUSDMock loan token (no value)0xE29eFd2Df92921B36448f9519A83dCDEEeb4ea7E0xE29eFd…b4ea7Eexplorer ↗
- TEST ASSET · mocktETHMock collateral token (no value)0x8Bc345FBB223ecD2566e80a576A60c4d4BE174730x8Bc345…E17473explorer ↗
- TEST ASSET · mockFeed · tUSD/USDMock price feed, fixed 1.000xaAf7e3A4131426C296B8D5B44487c10aCcBE397D0xaAf7e3…BE397Dexplorer ↗
- TEST ASSET · mockFeed · tETH/USDMock price feed, fixed 2,000.000x84048883d4608F5D27fB432EAd85d89F41Cb0dA30x840488…Cb0dA3explorer ↗
Mock entries are testnet stand-ins: tokens and feeds have no value, and PlaintextFHEAdapter performs no encryption.