Two chains, one source of truth per token, no bridge
A token lives on exactly one chain, its home. Other chains don't get a copy; they get proof. When value has to change hands across chains, both people lock on their own chain and one secret settles both locks. Here is each mechanism, then the order to try them in.
Try it in order
- Create a token on Sepolia (its home). Pick the name, symbol, decimals and supply; the factory derives a definition id from them.
- Send some of it on Sepolia, or create and send a second token on Robinhood. Sends stay on their chain.
- Prove your Sepolia balance on Robinhood: deliver a block hash, then let the Robinhood cache check the proof and print the grade.
- Swap your Sepolia token for a Robinhood token with someone, or with yourself using one wallet on both sides.
- Watch every step land on its own chain in the Explorer, and read exactly what each grade does not establish in Trust.
Create a token
The same ownerless factory runs on both chains. A token's home is the chain you create it on: there it is a plain ERC-20 with a fixed supply, no owner, no pause, and no mint after creation. Its definition id hashes the name, symbol, decimals, home chain, code, creator, supply and recipient together, so nobody can create a look-alike under your definition.
Definition
What the factory will record
- Definition id
- Preview to compute it from chain
Your tokens
Send, on each chain
A send never leaves its chain. Sending a Sepolia token changes Sepolia state only; Robinhood keeps showing the balance as of the last proven block until someone proves a newer one. That gap is shown, never hidden.
Prove a Sepolia balance on Robinhood
Three permissionless writes, anyone can make them: deliver a Sepolia block hash to Robinhood, register the token's definition on Robinhood once, then prove the balance. Each proof is checked on-chain; the line in the box is what the resolver contract itself returns.
- Deliver a Sepolia block hash to Robinhood
Robinhood's newest Sepolia root: …One transaction on Sepolia pays for a retryable ticket that runs on Robinhood. Measured arrival on this testnet: about 8 to 13 minutes (it waits for Sepolia finality). Just before sending, the page captures the proofs for the token and holder above at that block, because public Sepolia nodes only serve proofs for the newest few blocks; it submits them once the root arrives. Refunds of unused fees go to your address on Robinhood.
- Register the token's definition on Robinhood (once per token)
…
- Prove the balance on Robinhood
What this grade does not establish
Tokens that already existed (Milestone 3)
Tokens not made by the ChainRender factory can be shown too. Snapshot mode proves what the token's own balanceOf returned inside a Sepolia transaction; adopted mode proves storage under a published layout claim and is never above Grade C.
Swap across chains, with no bridge
You lock a Sepolia token; your counterparty locks a Robinhood token. Their lock refuses to open until Robinhood has proven yours. Revealing the secret on Robinhood pays you, and the same secret then pays them on Sepolia. Use one wallet as both people to try the whole flow alone.
Offer a swap
You lock on SepoliaAnswer an offer
You lock on RobinhoodSwaps you are part of
Explorer
Every event from the contracts this page uses, on the chain where it happened. Read from public RPCs, so it is ungraded: it shows what happened, and the Prove and Swap tabs show what was proven.
- Loading…
- Loading…
What you are trusting, compared
ChainRender grades every cross-chain fact by the weakest thing it rests on, and prints what the grade does not establish. Here is the same yardstick applied to Robinhood's canonical bridge, tacit and EEZ. Facts about the other systems come from ChainRender's reviews of their contracts and source (docs/175 §2.7, §2.8; docs/177 §11.2); dated, and worth re-checking.
| This page (ChainRender) | Robinhood canonical bridge | tacit | EEZ (Gnosis rollup0) | |
|---|---|---|---|---|
| How value crosses | It doesn't. Balances are proven; swaps change ownership on each chain with one secret. | Escrow on Sepolia, a second token minted on Robinhood; withdrawals burn it and release escrow. | Confidential notes; Bitcoin ↔ Ethereum by zero-knowledge proofs; its EVM pools move value through each rollup's canonical bridge. | Synchronous calls between L1 and member L2s inside one L1 transaction; value sits at domain-controlled proxies. |
| Who holds value in between | Nobody else. A swap lock holds two parties' amounts and can pay only them. | The gateway escrow, holding every bridged token at once. | Its pools (immutable core; periphery governed by a 2-of-4 multisig with a 1-hour delay). | Domain proxies, functionally a domain-held escrow. |
| How the other chain is known | A Sepolia block hash via Robinhood's own inbox, then Merkle proofs checked on-chain. | Messages through the same inbox; the rollup's outbox for the way back. | SP1 proofs; the Ethereum sync committee (512 members) for Ethereum state. | An ECDSA attester that re-executes blocks; not a succinct proof. |
| Who can change the rules | No one for ChainRender's contracts (ownerless, immutable). Robinhood's keys still govern Robinhood itself. | One ProxyAdmin upgrades bridge and rollup instantly (1-of-2 Safe as of 2026-10), plus gateway and router owner roles. | Ops multisig over the periphery and a one-shot successor. | Upgradeable proxies; on the Gnosis mainnet deployment ChainRender inspected (2026-10-06), the upgrade owner was a single externally owned account. |
| Exit if operators stop | Refund after your own deadline on your own chain. Once you reveal the secret, being paid needs Robinhood to include your claim, directly or through Sepolia's delayed inbox. | Forced inclusion on the rollup, then the confirm period. | Exits stay open on a retired pool; Bitcoin side waits 24 confirmations. | None in the reviewed repos: no forced inclusion or L1 exit for value at a proxy. |
| Grade by ChainRender's rules | Aproven reads, relative to Robinhood, always with its facet. Cthe swap as a whole (inclusion before deadlines). | Cat most while upgrades are instant. | Cfor value moved between its EVM pools (canonical bridges with instant upgrades). | Cat most (attester key, upgradeable, no exit). |
What is new here
Every graded line on this page is returned by a resolver contract, with the host's trust facet appended. The page cannot make it look better than the chain says.
Bob's Robinhood lock opens only if Robinhood has proven Alice's Sepolia lock: open, same hash, paying Bob, outlasting his by the safety gap.
The swap contract's balance of a token is only the sum of its open locks, and each lock can pay only its own two parties. The same contract, at the same address with the same code, runs on both chains.
Anyone can deliver roots, register tokens, prove balances and locks, and finish a swap; there is no ChainRender operator. Writes on Robinhood still go through its sequencer, or its delayed inbox on Sepolia.
Contracts this page talks to
Each address is a pointer, not a promise: its code hash is read from chain on load and compared with the published one. A mismatch disables every write to it.
| Chain | Contract | Address | Code |
|---|---|---|---|
| Loading… | |||
What each grade does not establish, read from the contracts
Your activity on this page
- Transactions you send from this page appear here with explorer links.