Verify
Check it yourself
Two things anyone can check without asking us: a proof someone shared with you, and the contracts that hold the money. No wallet, no account.
What the code allows
- Admin withdrawDoes not exist
- Rule changes3-day public notice
- RelaySubmit or refuse only
- SourcePublic on GitHub
Verify a proof
Someone sent you a Gloam proof. Paste it here to check it: an exact balance, a minimum they hold, a private payment, or the total of a payroll run they paid. You see only what they chose to prove, and nothing about who they are or what else they hold.
- The proofChecked in your browser
- The vaultLooked up on chain
- Sent to GloamNothing
Starts with gloamfunds1:, gloampay1:, gloamroll1: or gloambal1:
The contracts
Gloam runs on Robinhood Chain, Tempo, Base and Ethereum mainnet, and on the testnets. Every address here comes from the list the app itself uses, and each vault is read on chain as you look. The source is on GitHub.
Robinhood Chain
Mainnet, chain 4663
Swap routerGloamVaultSwapV4b
Swaps one note through a public DEX and back into the vault. No upgrade; its owner can only add a pool, with 3 days of public notice, or take one off.
0xfCa1887e77f738ef9C5751974b3f3873d029F2DCEarlier swap routerGloamVaultSwapV4
Kept for refunds of swaps made through it. New swaps use the router above.
0x34AB06208586A737Bf1607fa996Bc9162271c52dOwner
Queues rule changes, which wait 3 days in public. Can lower a limit or the fee at once. Has no function to withdraw a balance.
0x76b7E410a227c888aBD2Bdc24Ee32E094B0FD4D8Treasury
Receives the cash-out fee and what a swap's price buffer does not use.
0xB3900ac9350903218e4c7597bAb0f008F01B30B8Relayer
Run by the Gloam team. Sends already-proven transactions and pays the gas. Cannot move or redirect money.
0xb1E994586E62994648a0b866BF33F2EDd942512eDeployer
Created these contracts and handed the vault to the owner.
0x891E74a11abC5D0eC2EE855B2BD521fF9D18F411
Read from the vault just now
Straight from Robinhood Chain, not from Gloam
No middlemen
Mainnet proofs use the final keys from the trusted setup, which closed on 17 October with 13 contributors, and Base Sepolia and Ethereum Sepolia use them too. The Robinhood Chain and Tempo testnets keep development keys. Gloam was reviewed internally before launch, and Kann Audits has since reviewed the vault contracts (report, 1 November 2026) and found no Critical, High or Medium issues. It is beta software.
No admin withdraw
The vault has no emergency withdraw and no function that lets anyone, the Gloam team included, take a balance out. Only a valid proof from the person who holds it can. The vault owner's one other money call sweeps native coin sent to the vault by mistake, never money behind a balance or an owed fee.
Three days of public notice
Setup is closed on every vault. A new asset, a higher limit or a higher fee must be queued on chain and waits 3 days before it can run. So must a new proof checker, on a vault the owner guard does not hold yet; on one it holds, there can be no new proof checker at all. Lowering a limit or the fee works at once.
Code that cannot change
The vault is not a proxy and has no upgrade function, so its code is fixed. Only the settings above can change, and only in public.
One owner wallet, then the owner guard
0x76b7…D4D8 owned every mainnet vault at launch. Each vault moves to the owner guard, a contract that forwards only deposit limit and fee changes and the sweep of coin sent by mistake, so it can then never get a new proof checker or a new owner. The checks above show which holds each vault. A handover takes two steps on chain: the new owner has to accept it, and a pending one shows above.
Keys from a public ceremony
Mainnet proofs use the final keys from a trusted setup with 13 contributors, sealed with drand round 6561386.
The ceremony-final releaseThe relay cannot redirect
Private sends and cash outs can go through the Gloam relay, and swaps always do. The proofs fix where the money goes, so the relay can only submit or refuse.
Open source
Contracts, circuits, app and SDK are public. Compare what is deployed with the repo yourself.
Beta deposit limits
On mainnet each stablecoin takes up to 50,000 per deposit and 2,500,000 in total, and $GLOAM 2,500,000 and 25,000,000. Cash outs and private payments are never limited. Raising a limit waits the same three days; lowering one is instant.
What Gloam can't see
Gloam can't see or hand over a private balance. The keys that open one, your note secrets and your receive key, are made and kept on your device.
What Gloam's servers do hold
- Recovery, if you turn it onAn encrypted copy of your notes. The key comes from your wallet signature or your passkey, in your browser, so Gloam cannot open it.
- A cash out for laterIts finished proof, until it goes out. The proof holds no secret and fixes the amount and the address, which are public once it lands.
- The relaySees your IP address and when it sends for you. It never gets a note secret.
- AgentsThe local MCP server keeps an agent's notes on the machine that runs it. The hosted one at gloam.trade/mcp only reads and plans, and never takes a key.
Report a problem
Found a bug or something that does not match this page? Tell us privately, and please don't post details until a fix ships.
- Emailhello@gloam.trade, with Security in the subject
- Direct message@gloamtrade on X
- PolicySECURITY.md
- Machine-readablesecurity.txt
Signed ownership statement
A message from the owner key, so you can check who controls these vaults without taking our word for it.
Not published yet
The owner wallet will sign a short statement naming these addresses. It will show here with its signature, and this page will check in your browser that the owner signed it.