StockoZero-knowledge ownership for onchain assets.

Robinhood Chain put equities, stablecoins, and RWAs onchain for 120+ countries. Everything is now composable, programmable, and permanently visible. Stocko adds the missing layer: the ability to own those assets without broadcasting your net worth, your positions, and everything else in your wallet to anyone with a block explorer.

Three complementary privacy layers, one commitment flow, and native composability with every asset class on the chain.

• EVM-native (Arbitrum Orbit). Standard tooling, standard proof systems, no exotic cryptography rewrites. The stack ports cleanly.
• USDG is native. A dollar-backed stablecoin already circulating on the chain gives Stocko a liquid unit to denominate and settle ownership transfers in from day one.
• Stock Tokens are onchain. Tokenized NVDA, GOOG, AAPL and others are composable DeFi assets here - meaning private equity positions are possible, not just private stablecoin transfers. No other privacy protocol can offer that.
• Real users, real volume. 28M+ Robinhood users and a well-capitalized parent mean demand exists before the privacy problem is even obvious to most of them.

The moment retail realizes their tokenized portfolio is fully public, they need somewhere to put it. Stocko is that place.

Adversaries observe the public ledger, the mempool, and the relayer network. Stocko is designed to hide, from all three, what an address owns, the link between an owner and an asset, and the identity of the wallet that receives it - while remaining fully verifiable on-chain and non-custodial end to end.

Assets enter the ownership set as commitments: keccak256 over the asset reference, a secret asset salt, a fresh one-time owner key and a per-note salt. The chain stores that 32-byte hash and nothing else. Ownership changes are authorised by a signature from the key the commitment names, so no wallet that holds anything else ever appears. A Groth16 circuit is the next layer, and hides which leaf moved as well.

• Breaks the address ↔ asset link and the owner ↔ owner link.
• A spent marker prevents double-spends without exposing which asset was consumed.
• Works identically for NFTs, fungible balances, LP positions and tokenized equities - they all share one commitment set, which is what makes the set worth hiding in.

Every commitment is owned by a fresh keypair generated in the browser - never funded, never seen on chain before. Opening one reveals a key that has held nothing else, so it says nothing about you.

• Breaks the recipient identity link. An observer sees an asset land at a never-before-seen address with no onchain tie to the collector's known wallet.
• No coordination needed beyond a receive ticket: the recipient generates the key, the sender never learns anything about their wallet.

Planned: commitments and transfers are submitted by a decentralized relayer pool via meta-transactions, so the wallet paying gas is not yours either. Today that wallet is the one remaining public link. The recipient never pays gas from a doxxed wallet, and the withdrawing address has no funding history linking it to the depositor.

• Breaks the metadata / gas-funding link, which is where most "private" systems actually leak.
• Enables gasless claims and account-abstraction flows - a mainstream-friendly UX where users never touch native gas.
• Relayers are fee-compensated and stake-bonded; no single relayer sees the full path.

1. Commit. User commits an asset - an NFT, a token balance, a position - into the ownership set. Public event: "an address committed into Stocko." Nothing else.
2. Hold & transfer. Ownership moves inside the set. A one-time key authorises it; which asset moved, and both parties, stay hidden.
3. Prove or exit. Prove ownership against the registry and reveal nothing else - or exit to a fresh address, submitted gaslessly by a relayer. The receiving wallet has no traceable link to the sender.

At no point does the public ledger reveal who owns what, how much of it, or what else they hold.

• USDG - private balances and settlement between owners.
• Stock Tokens - confidential holdings and transfers of tokenized equities. Hold private NVDA / GOOG / AAPL exposure without publishing your portfolio.
• RWAs / ETFs - any Robinhood Chain real-world-asset token can be shielded with the same commitment machinery.

• Chain: Robinhood Chain (Arbitrum Orbit L2, EVM).
• Proof system: Groth16 zk-SNARKs; Pedersen commitments; nullifier set.
• Standards: ERC-5564 stealth addresses, ERC-6538 meta-address registry, ERC-4337 account abstraction for gasless claims.
• Relayers: stake-bonded pooled relayer network, meta-transaction submission.
• Oracles: Chainlink (native to the chain) for any asset pricing needs.
• Frontend: React / TypeScript / Tailwind. Wallet support via Robinhood Wallet and standard EVM wallets.

$STOCKO (placeholder ticker) - protocol token for relayer bonding, fee routing, and governance over pool parameters and supported-asset onboarding. Fee capture from ownership-set usage funds buybacks. No pre-mine, no VC allocation - clean positioning against the "brokerage-owned chain" narrative.

• Only privacy layer that shields tokenized equities, not just stablecoins. This is the moat - it exists because of the chain, and it can't be trivially replicated on Base or Solana where Stock Tokens aren't native.
• Native USDG base - no bridging, no wrapped-asset risk.
• Three complementary layers that each close a distinct leak (holdings, owner identity, metadata), rather than one primitive marketed as complete privacy.
• Mainstream UX - gasless claims, stealth addresses handled invisibly. Built for the 28M-user retail audience the chain already has.

• Regulatory surface. Privacy on a brokerage-operated, RWA-focused chain invites scrutiny. Positioned as consumer financial privacy, not evasion; designed with optional compliance disclosures (view keys) available to the user, not mandatory backdoors.
• Relayer liveness. The relayer pool must be sufficiently decentralized to avoid a censorship or availability chokepoint.
• Chain maturity. Robinhood Chain is new infrastructure. Proof-system audits and conservative pool caps at launch.

1. Ownership set live on Robinhood Chain mainnet.
2. Stealth-address layer (Layer 2) + gasless claims.
3. Ownership proofs for gated access - the headline capability.
4. Mainnet, audit, token.