Networks

Two chains, one shielded pool design

Gloam is not a chain. It is a shielded-pool contract plus verifiers, deployed to the chains where the money already moves. The same circuits, the same vault design, and the same SDK run on both networks. What differs is the asset each chain leads with: USDG and $GLOAM on Robinhood Chain, dollar stablecoins on Tempo. The app switches networks at runtime and points at the right pool for each.

Mainnet

Gloam went live on Robinhood Chain and Tempo mainnet on 21 October 2026, 13:00 UTC. This is beta software. The mainnet pools (ShieldPoolPayments) take shield, private send, cash out and proofs, and have no swap code. Private swaps run through a separate router on each chain, which uses only the vault's normal calls.

Assets and beta limits

• Beta deposit limits. Each stablecoin: 500 per deposit and 25,000 in total. $GLOAM: 25,000 per deposit and 250,000 in total. The app shows the room left before you sign.
• Never limited: private payments and cash outs.
• Changes are public. Raising a limit or adding an asset waits a public 3-day timelock. The owner can lower limits or close deposits at once, which never stops a withdrawal.
• Fees. Deposits and private payments are free. A cash out costs 0.25%, kept by the pool. A private swap pays the same 0.25% on the amount swapped, plus a price buffer (0.5% on Robinhood Chain, 0.1% on Tempo) whose unused part goes to the swap treasury.

Keys and accounts

• Proving keys, the final keys from the 13-contributor trusted setup (drand round 6561386, release ceremony-final). Mainnet proofs must use them; the Robinhood Chain and Tempo testnets keep the dev keys.
• PoseidonT3 (both chains), 0x1a32C2c2A77225EC2dD3BF7be1018819b1039Cb4
• Owner, 0x76b7E410a227c888aBD2Bdc24Ee32E094B0FD4D8. One wallet at launch; a multisig is planned. It cannot withdraw pooled funds: there is no admin withdraw.
• Treasury, 0xB3900ac9350903218e4c7597bAb0f008F01B30B8. Cash-out fees go here since 24 October. Both swap routers also send what a swap does not use here; that address is fixed in each router and cannot change. The routers have no owner, no admin and no upgrade.
• Relayer, 0xb1E994586E62994648a0b866BF33F2EDd942512e. Run by the Gloam team. It only submits already-proven transactions and pays the gas; it cannot move or redirect money.

Every address on every network, with what each vault reads on chain right now and a CSV download, is on Verify.

Robinhood Chain

An Arbitrum Orbit L2 built for financial services and real-world assets, and the surface where tokenized stocks and onchain culture already settle. Standard EVM tooling and Uniswap-class paths exist. Gloam adds the private layer next to them.

• Mainnet chain ID, 4663
• Mainnet RPC, https://rpc.mainnet.chain.robinhood.com
• Mainnet pool, 0x39e28cde55cab798874746ac52cb4b5cc99a0194
• Mainnet assets, USDG and $GLOAM to add privately. Stock tokens, ETH (held as WETH) and the other listed tokens come in through a private swap. Native ETH pays gas.
• Mainnet swap router (GloamVaultSwapV4, Uniswap v4), 0xfCa1887e77f738ef9C5751974b3f3873d029F2DC
• Testnet chain ID, 46630
• Native gas, ETH
• Testnet RPC, https://rpc.testnet.chain.robinhood.com
• Testnet vault (sealed pool), 0x72406D9597807A46f730d8b4fDBC5aC45Dc1d740
• Official docs, docs.robinhood.com/chain

Tempo

Tempo is a payments-first, EVM-compatible L1 (Reth) built around stablecoins, incubated by Stripe and Paradigm. It is the natural home for private payments: the chain is designed for moving money, and Gloam makes the amounts and balances private while settlement stays verifiable. Gloam is live on Tempo mainnet, and on the Moderato testnet for practice.

• Mainnet chain ID, 4217
• Mainnet RPC, https://rpc.tempo.xyz
• Mainnet explorer, https://explore.tempo.xyz
• Mainnet pool, 0x39e28cde55cab798874746ac52cb4b5cc99a0194
• Mainnet assets, USDC.e, pathUSD, USDT0 and OUSD (TIP-20, 6 decimals)
• Mainnet swap router (GloamVaultSwapTempo, Tempo's stablecoin exchange), 0xfCa1887e77f738ef9C5751974b3f3873d029F2DC
• Testnet name, Tempo Moderato
• Testnet chain ID, 42431
• Native currency, USD (gas is paid in a stablecoin, not ETH)
• Testnet RPC, https://rpc.moderato.tempo.xyz
• Testnet explorer, https://explore.testnet.tempo.xyz
• Testnet sealed pool (hardened), 0x841DC046Ea3CC842BA3A855731472c6Eb0F2d5eb
• Testnet shieldable asset, PathUSD (6-decimal stablecoin), 0x20c0000000000000000000000000000000000000

Integration notes (what is different from an ETH chain)

Tempo is stablecoin-native, so the vault integration differs from an ETH-gas chain in a few concrete ways. If you build against Tempo, these are the things that bite:

• No native value transfers. Tempo does not carry value in msg.value. You shield an ERC-20 stablecoin, not a native coin, so the shield path always moves a token with transferFrom, never a payable call.
• 6-decimal accounting. Tempo stablecoins use 6 decimals, not 18. Amounts, notes, and disclosures normalize decimals per asset. Do not assume 1e18.
• 30M gas cap per transaction. Proof-verifying calls are heavy, so deploys and some calls run near the cap. Tune your gas estimate multiplier down (we deploy at ~1.12x) rather than letting an estimator overshoot the 30,000,000 limit.
• Testnet faucet is an RPC method. Fund a testnet address with the tempo_fundAddress RPC call rather than a web faucet. The in-app "Get testnet funds" link uses it.

On Tempo the product is private stablecoin payments, for people and for agents: shield a stablecoin, pay and send to a receive tag without showing your size, swap one stablecoin for another from your private balance, prove a balance when you have to, and cash out to a public balance whenever you want it public. Tokenized-equity markets are a Robinhood Chain testnet feature and do not appear on Tempo.

Base

Base is an Ethereum L2 (OP Stack) where a lot of USDC already moves. Gloam on Base is the same vault as on the other mainnets: ShieldPoolPayments, the ceremony's final keys, beta deposit limits and the 0.25% cash-out fee. Base Sepolia comes first as the testnet, then Base mainnet on the same code once it is tested end to end. Both are live: Base mainnet is beta software, Base Sepolia is its testnet.

• Mainnet chain ID, 8453
• Mainnet RPC, https://mainnet.base.org
• Mainnet explorer, https://basescan.org
• Mainnet pool, 0x39E28Cde55CAB798874746ac52cb4B5Cc99a0194
• Mainnet payment-message board, 0xfCa1887e77f738ef9C5751974b3f3873d029F2DC
• Mainnet assets, USDC, EURC, USDT (6 decimals each) and ETH. USDC and EURC are Circle's; USDT is Tether bridged from Ethereum over Base's standard bridge.
• Testnet name, Base Sepolia
• Testnet chain ID, 84532
• Testnet RPC, https://sepolia.base.org
• Testnet explorer, https://sepolia.basescan.org
• Testnet pool, 0x39e28cde55cab798874746ac52cb4b5cc99a0194
• Testnet assets, Circle's test USDC and EURC and test ETH. There is no USDT on Base Sepolia. Faucets are in the testnet guide.
• Native gas, ETH, and ETH is a pool asset here (it is not on Robinhood Chain mainnet)
• Beta limits, both networks, each stablecoin 500 per deposit and 25,000 in total; ETH 0.2 per deposit and 10 in total

Integration notes for Base

• Base Sepolia runs the mainnet keys. It is a testnet, but the same contract, keys, limits and cash-out fee as Base mainnet, so proofs for chain 84532 use the final keys, not the dev keys the other testnets use.
• Log reads. Base's own public RPCs cap eth_getLogs at 200 blocks (Sepolia) or refuse it (mainnet), and rebuilding the vault tree needs logs. Gloam reads Base through publicnode (50,000 blocks a read); use your own RPC if you sync often.
• EURC is a euro stablecoin. The app never counts it as a dollar.
• Issuer controls. Circle can blacklist an address on USDC and EURC. If it ever blacklisted the vault itself, that asset would be frozen in the vault; other assets keep working.
• Not on Base yet. Private swaps (next, through a router on Uniswap v4) and bringing money over from another chain (the Relay bridge). Payments, payroll, payment requests, claim links and proofs work as on the other chains. Base and Base Sepolia each have a payment-message board, so a payment can be found by scanning with your Gloam address.

Ethereum

Gloam on Ethereum mainnet is the same vault as on the other mainnets: ShieldPoolPayments, the ceremony's final keys, beta deposit limits and the 0.25% cash-out fee. Its testnet is Ethereum Sepolia, below, on the same contract and keys. Ethereum mainnet is live as beta software.

• Chain ID, 1
• Explorer, https://etherscan.io
• Pool, 0x39E28Cde55CAB798874746ac52cb4B5Cc99a0194
• Payment-message board, 0x8699D015087dE6D25d55d5ceB63b34b9d773f135
• Assets, USDC, USDT, USDG, PYUSD, EURC (6 decimals each) and ETH. USDC and EURC are Circle's, USDT is Tether's, USDG and PYUSD are issued by Paxos.
• Beta limits, each stablecoin 500 per deposit and 25,000 in total; ETH 0.2 per deposit and 10 in total

Integration notes for Ethereum

• Gas. A private send costs about 1.9M gas and a cash out about 0.5M to 0.7M; a deposit, which you pay yourself, about 1.3M to 1.5M. The Gloam relay pays for relayed sends and cash outs, so while Ethereum gas is above 3 gwei it waits and says so. A cash out for later still schedules and goes out once gas is back under that. With Hide my wallet off, your wallet sends and pays its own gas.
• USDT approvals. Tether's token refuses to change one non-zero approval into another, so a deposit after an old approval asks for two: one back to zero, then the exact amount. approvalSteps in the SDK gives the calls to send.
• Log reads. Most public Ethereum RPCs serve only recent logs or a few blocks a read. Gloam reads Ethereum through MEV Blocker (https://rpc.mevblocker.io), 10,000 blocks a read; use your own RPC if you sync often.
• EURC is a euro stablecoin. The app never counts it as a dollar.
• Issuer controls. Circle, Tether and Paxos can each freeze an address on their tokens. If one froze the vault itself, that asset would be frozen in the vault; other assets keep working.
• Not on Ethereum yet. Private swaps, and bringing money over into Ethereum (Ethereum stays a chain you can bring money over from).

Ethereum Sepolia

Ethereum Sepolia is Ethereum's testnet. Gloam runs it like Base Sepolia: the mainnet vault (ShieldPoolPayments, the ceremony's final keys, beta deposit limits and the 0.25% cash-out fee), deployed from the same address and nonce as the other chains, so the vault sits at the same address. It is live in the app under Testnet.

• Chain ID, 11155111
• RPC, https://ethereum-sepolia-rpc.publicnode.com
• Explorer, https://sepolia.etherscan.io
• Pool, 0x465EbfcdE1e384C7B1e8388E1aFEA95438c7A0ef, deploy block 11992914
• Payment-message board, 0x8699D015087dE6D25d55d5ceB63b34b9d773f135
• Assets, Circle's test USDC and EURC, Paxos's test USDG and PYUSD (USDC, USDG, PYUSD, EURC, 6 decimals each) and Sepolia ETH. Tether issues no USDT on Sepolia. Faucets are in the testnet guide.
• Beta limits, each stablecoin 500 per deposit and 25,000 in total; ETH 0.2 per deposit and 10 in total

Integration notes for Ethereum Sepolia

• It runs the mainnet keys. Proofs for chain 11155111 use the final keys, not the dev keys of the older testnets.
• Reads. publicnode is at the chain head but keeps only about the last 10,000 blocks of Sepolia (a day and a half), and rebuilding the vault tree needs every log since the deploy block. Tenderly's public gateway keeps the whole history but can trail the head by a minute or two. Gloam reads the head, receipts and recent logs from publicnode and older logs and state from Tenderly; the SDK's gloamReadTransport(network) splits reads the same way. Use your own RPC if you sync often.
• EURC is a euro stablecoin. The app never counts it as a dollar.
• Not on Ethereum Sepolia. Private swaps and bringing money over from another chain. Payments, payroll, payment requests, claim links and proofs work as on the other chains.

Switching networks in the app

The network selector in the app header lists every Gloam network and marks each one Mainnet or Testnet. The selector points the app at that chain's pool, explorer and, on a testnet, its faucet. The registry lives in one place (networks.ts) so the same shield, private send, cash out, and selective-disclosure flows run against whichever chain is active. Test funds never move to mainnet.

Honest status

Mainnet on both chains is beta software. It uses the final keys from the multi-party ceremony that closed on 17 October with 13 contributors, and beta deposit limits cap what the pools take. The code was reviewed internally before launch; that review finished on 20 October with no Critical or High findings open. An external audit is planned, not done. The mainnet pools are new, so their anonymity set is thin at first. The testnets run on development keys with test funds, and stay open for practice. See the production gate for what is done and what is still ahead.