Documentation/Ghosts and privacy

Funding and moving out

How money reaches a ghost decides what can be connected to you. Through Ghost Pool, a zero-knowledge proof stands between your deposit and the ghost. From an exchange, your main wallet is in no transaction at all. From another chain, it stays off this chain's explorer but the bridge record names it. From your wallet is fast and linked. The app tells you which is which.

5 min read

From Ghost Pool

The way in from your own wallet without a line on the explorer. Deposit USDG or ETH into Ghost Pool from your wallet, then, from the ghost's Fund sheet, take it out into the ghost with a zero-knowledge proof. The relayer sends the withdrawal and pays its gas. On chain, your wallet deposited into the pool and the pool paid the ghost; nothing says the two are the same money. It works when others have deposited too, the amounts differ and some time has passed: the sheet checks that for you before you withdraw.

From an exchange

The most private path. A ghost's key works on every EVM chain, so its address on Base, Arbitrum, Ethereum or BNB Chain is the same as on Robinhood Chain, and only your ghost root can spend from it there too. You withdraw from an exchange straight to that address, then the ghost bridges what arrived to itself on Robinhood Chain, signing on the source chain in your tab.

  1. 1
    Open From an exchange

    On a ghost, press Fund. From an exchange is the first tab. Pick the network your exchange will send on: Base is the cheapest to bridge from.

  2. 2
    Withdraw to the ghost

    Copy the ghost's address or show its QR code, and withdraw ETH to it on that network. ETH pays the bridge's gas. For USDC, also withdraw a little ETH, about 0.00003 on Base or Arbitrum.

  3. 3
    Wait for it

    The sheet watches the ghost's address on that chain every few seconds, through the Ghostdex relay, and shows what arrived.

  4. 4
    Bring it over

    Choose what the ghost receives, ETH or USDG, and sign as the ghost. A little ETH stays behind on the source chain to pay for that transaction. The relayer pays the ghost on Robinhood Chain, usually within minutes.

WhoWhat they can see
Anyone reading the chainsThe exchange's hot wallet paying the ghost on the source chain, then the ghost bridging to itself, then a relayer paying it here. Your main wallet is in none of it.
LI.FI's public historyA route from the ghost to the ghost. Nothing about your main wallet.
The exchangeWhich of its accounts withdrew to the ghost, and when. That is in its own records, which it can be made to hand over.

Two things undo it. Sending the same amount from your main wallet to the exchange just before you withdraw: matching amounts and times can pair the deposit and the withdrawal. And picking a network that is not EVM, such as Solana, Bitcoin or Tron, in the exchange's form: funds sent there do not reach the ghost.

From another chain

On a ghost, press Fund and pick From another chain. Pick the chain and token you hold (ETH or USDC on Ethereum, Base or Arbitrum, BNB or USDC on BNB Chain) and what the ghost should receive, ETH or USDG. LI.FI finds a bridge route whose recipient is the ghost.

Your wallet pays on the source chain. On the destination chain, the bridge relayer pays the ghost from its own address. On that chain's explorer, the ghost's first deposit comes from the relayer, which pays many recipients, and not from you. Before you sign, Ghostdex checks that the route really delivers to the ghost; if it does not, nothing is sent.

  1. 1
    Choose the source

    The chain and token you hold. Your wallet switches to that chain when you sign.

  2. 2
    Choose what arrives

    ETH pays the ghost's gas; USDG is ready to trade. A ghost with no ETH cannot send anything, so start with some ETH.

  3. 3
    Review and sign

    The review shows the estimated time, what the ghost receives and every fee. Approve the token on the source chain if asked, then sign.

  4. 4
    Wait for the relayer

    Most routes arrive within minutes. The ghost's balance updates when they do.

Direct transfer

The fast path sends ETH or USDG straight from your main wallet to the ghost. It is one transaction and arrives at once, but the explorer then shows your main address as the ghost's funder, permanently. The app labels this option Fast, but linked, warns you before you sign, and marks the ghost as linked.

Funding an agent

An agent's ghost is funded the same way, from the agent's card, with the agent's budget as the suggested amount. See Agents.

Moving out

Move out of a ghost offers four destinations. Each one leaves a different trace.

DestinationWhat the explorer shows
Another ghostA transfer between two addresses with no visible link to you. The two ghosts are now linked to each other.
Another chainA bridge route: the bridge pays the recipient on the other chain from its own address. ETH and USDG can leave this way; stock tokens stay on this chain.
Any addressA plain transfer to the address you enter, such as an exchange deposit or a cold wallet. Whatever that address is linked to, the ghost is now linked to.
Your main walletA direct transfer that draws the line between you and the ghost. The app warns you and marks the ghost as linked.

Habits that keep ghosts apart

  • Fund from an exchange when you can, from another chain otherwise, and from your main wallet only for ghosts you do not mind being linked.
  • Vary amounts and timing. A deposit and a ghost funded with the same amount minutes later can be matched by anyone patient.
  • Do not sweep straight home. If the money has to come back to you, a bridge to another chain avoids the direct line, though matching amounts and times can still connect the two ends.
  • Keep separate ghosts for activity you want kept apart, and do not move funds between them.
  • Run Trace check after you fund a ghost or move money out of one: it shows what can be followed, ghost by ghost.

Bridges and LI.FI know both ends of a route they carry. With LI.FI, the transaction you sign on the source chain names the ghost as the recipient, and LI.FI publishes a transfer history that anyone can look up by address. The chain's explorer does not show that link, but someone who checks bridge records can find it. Trace check shows which of your ghosts can be followed this way, and Privacy model explains the rest.