Transparency

What the hood hides. And what it doesn't.

COWL uses stealth addresses (ERC-5564). It breaks the on-chain link between a payment and the person who receives it. It does not make transactions invisible. Here is the full picture.

On-chain visibility

Information	Status	Why
Receiver's main wallet	Hidden	Funds go to a one-time address derived from the receiver's public keys and a random value only the sender knows.
Link between two payments	Hidden	Each payment uses a new one-time address.
Receiver's private keys	Never shared	Derived from a wallet signature inside the browser. Never sent to any server.
Amount and asset	Public	Transfers on Robinhood Chain are public. COWL does not encrypt amounts.
Sender's wallet	Public	The payer signs a normal transaction from their own wallet.
Withdrawal destination	Public	Withdrawing to your main wallet links that payment to it. Withdraw to a fresh wallet to stay hidden.
Registered receive keys	Public	Registering a short link publishes your public keys next to your address. Incoming payments are still unlinkable.

Contracts

ERC-5564 Announcer	Standard contract, deployed with the canonical CREATE2 address. Logs each payment.
ERC-6538 Registry	Standard contract. Maps a wallet to its public receive keys.
COWL Router	`Deploying` Sends ETH or a token to the one-time address and calls the Announcer in the same transaction. No owner, no fee, no admin functions, never holds a balance. Source verified on Blockscout.

Mainnet proof

Before launch, the router was deployed and tested with real funds on Robinhood Chain. Every step is public.

Router deployed	18 Oct 2026 · 20:44 UTC · `0x66dc…aaa1`
Source verified	Blockscout, solc 0.8.26, optimizer 1,000,000 runs · read the code
First private payment	0.0002 ETH to one-time address `0x7711…2e22` · tx
First withdrawal	Found with the viewing key, moved with the one-time key · tx
Pre-mainnet tests	Router unit tests and the full app flow (register, send ETH, send NVDA, scan, withdraw) passed on a fork of Robinhood Chain using the live Announcer and real NVDA stock tokens.

The message you sign

Your keys come from your wallet's signature of this exact text. Signing it costs nothing and authorizes nothing. If any site asks you to sign it, it can derive your COWL keys, so sign it only on cowl.pro.

COWL · Unlock your private receive keys

Signing is free. It sends nothing and moves nothing.
This signature stays in your browser.

Network: Robinhood Chain (4663)
Key version: 1

Not done yet

Independent audit: not yet. The router is short and verified; the cryptography follows ERC-5564 scheme 1 with the audited @noble/curves library.
Relayer: withdrawals currently use a small amount of ETH sent along by the payer. A relayer is next.
Hidden amounts: not planned without zero-knowledge proofs and an audit. We will not claim it.

Outside COWL's control

Robinhood stock tokens are issued with controls: the issuer can pause transfers or block addresses. COWL cannot override this. Timing and amount patterns can also hint at who received a payment; vary them if that matters to you.