Gloam is the privacy layer for Robinhood Chain. Shield a balance, then hold, pay, and send tokenized assets without exposing your size or holdings. Settlement stays verifiable to anyone who needs it.
Robinhood Chain puts tokenized equities and onchain money on public rails, so every balance, trade size, and move is visible to anyone with a block explorer. That is fine for transparency and terrible for real financial privacy.
Gloam is a self-custodial ZK shielded pool on top of Robinhood Chain. You shield an asset into a sealed balance, then pay, send, and prove things about it without revealing amounts or holdings. Cash out to a public balance whenever you want it public. You can also make a selective disclosure: prove you hold a specific balance to a counterparty or auditor without revealing anything else.
Teams can run private payroll: upload a CSV, pay everyone in one run, and each person gets a claim link. The public sees private transfers, never names or amounts. An optional Gloam relay submits private sends for you, so your wallet never shows up as the sender.
It runs its own privacy, so no operator or sequencer can see inside. Every private action is proof-gated on-chain with circom and Groth16, Poseidon hashing, and a depth-20 incremental Merkle tree. No mock fills and no theatrical privacy: if a path cannot be both private and solvent yet, it stays off.
Beyond the app, Gloam ships @gloamtrade/sdk so any app or AI agent can plug into the private path, including x402 private payments through an MCP agent server. The same core is live on a second network, Tempo, to show the design is portable.
Status: live on Robinhood Chain testnet (chainId 46630, pool 0x72406D9597807A46f730d8b4fDBC5aC45Dc1d740) and Tempo testnet (chainId 42431). Shield, private send, private payroll, the relay, cash out, and selective disclosure all work. The contracts went through two multi-agent security audit passes with the findings fixed, then were redeployed on 2026-09-29 with no admin escape hatch: no emergency withdraw, and every admin change waits behind a 3-day timelock. 93/93 contract tests green.
This is testnet with a development proving ceremony; a production multi-party ceremony and an external audit are the gate before mainnet.