How it actually works.

Corvane is a non-custodial wallet for Robinhood Chain with a chat box instead of a form. You say what you want in plain language; an AI agent works out what you meant, drafts the transaction, and hands it back for you to approve.

The agent is a translator, not a trustee. It holds no keys, has no signing authority, and cannot move a single unit of anything on its own. Everything below is an elaboration of that one sentence.

1. 01

   Log in

   Email or a social account. No browser extension to install, no seed phrase to write down.

2. 02

   A wallet is created for you

   An embedded non-custodial wallet is generated on the spot. You do not choose or import it; it is yours from the moment it exists.

3. 03

   Fund it with testnet ETH

   Robinhood Chain uses ETH for gas. On testnet you can pull some for free from the faucet. See the network section below.

4. 04

   Say something

   Start with a read. Reads are instant and cost nothing: "what’s my balance?"

You do not need to understand any of the rest of this page to use Corvane. It is here because a wallet that asks you to trust it should show its work.

Your keys. Your funds. When you log in, an embedded walletis generated for you. “Embedded” means it lives in the app rather than in a browser extension. It is non-custodial, which is the part that matters: Corvane holds no custody and cannot sign on your behalf, which is exactly why nobody else can either.

There is no seed phrase to write down and no extension to install. Signing authority sits with you, and it stays there.

• Only you can move your funds. Corvane has no signing path of its own.
• Only you can authorise a transaction, at the confirmation card, every time.
• Recipient addresses are shown in full, in monospace, before you approve.
• Confirmed transactions settle on chain and are final. That is a property of the network, not a Corvane setting.

A custodial account is one someone else keeps for you. This is a wallet that is yours.

Custody

Yours

Seed phrase

None to write down

Extension

Not required

Corvane can sign

No

Robinhood Chain is a permissionless, EVM-compatible Ethereum L2 built on the Arbitrum stack, using ETH as its gas token. It settles crypto and tokenized equities on the same rails. That is why a single chat box can reach both.

Both chain IDs below were verified by querying eth_chainId against the live RPC endpoints, not copied out of a document.

This deployment currently targets Robinhood Chain Testnet (chain 46630).

28 assets settle on the same chain: crypto (ETH, WETH, USDG), 20 tokenized equities, and 5 tokenized funds. The full list, with every contract address in full, is on the markets page.

USDG, not USDC

The stablecoin on Robinhood Chain is USDG (Global Dollar, issued by Paxos). USDC exists on the chain but is essentially unused. If you ask Corvane to send USDC, it will tell you so rather than quietly substitute something.

USDG also uses 6 decimals; every other listed asset uses 18. Corvane pins both in code, so the agent never has to infer them.

The allowlist

The asset list is an allowlist, not a catalogue. The agent resolves a symbol to a contract address fixed in code. It never discovers a token by searching. An asset that is not on the list is declined, not guessed at.

The reason is visible on chain today. Searching the explorer for USDG returns the real Global Dollar and also a second token also named “Global Dollar” with the same ticker at a different address, plus impostors called unstable degen and Upside Down Gorilla claiming the same symbol. The real NVDA has roughly 6,350 holders; a fake sits beside it with 155.

Tokenized stocks are not shares

A tokenized stock tracks a share’s price. It is not the share. It carries no ownership, no voting rights and no dividend entitlement. They are issued by Robinhood Assets (Jersey) Ltd, not by Corvane, and are not offered to US persons. Corvane cannot mint them; it can only read and move ones that already exist.

There is no command syntax to memorise. Say it however you would say it. What matters is the distinction below.

Corvane asks instead of assuming

Any of these gets a question, not a guess: a missing amount, a half-typed address, an asset that isn’t on the allowlist. The agent is not permitted to invent a recipient.

This is the whole mechanism. Five steps, and the interesting part is what the model is not allowed to touch.

1. 01

   You type an instruction

   Plain language. It goes to the model along with read-only context: your address, your balances, the allowlist.

2. 02

   The model returns an intent, not a transaction

   It emits structured JSON: an action, an asset, an amount, a recipient. It never writes calldata, and it never composes the text you are about to be shown.

3. 03

   Code validates it, or refuses

   Address checksum, asset against the pinned allowlist, amount against your balance. Anything that fails is rejected here, before it can be displayed, let alone signed.

4. 04

   You see a confirmation card

   Rendered from that validated object: the full recipient address, the exact amount, the fee, and your balance afterwards.

5. 05

   You tap Confirm. Only then does it sign

   Your wallet signs the call built from that same object. Cancel, and nothing was ever broadcast.

What the model emits

That is the entire surface. Everything downstream is derived in code from that object plus the pinned allowlist: the contract address, the decimals, the calldata, the gas.

Corvane separates understanding from authority. The model reads your words and drafts a transaction. It never holds your keys, and it never touches the signer.

Address poisoning

An attacker sends dust from an address engineered to share the first and last few characters of one you have used before. In a truncated history, 0x4b6F…a1C3 looks like the address you know. Truncation is what makes the attack work.

So Corvane shows recipients in full, in monospace, at the moment of confirmation. You read the address, not a shape.

Prompt injection

Any AI that touches money will have people trying to talk it into things. Corvane assumes this will be attempted and does not rely on the model behaving. The mitigations are structural:

• The model cannot emit calldata. It emits a JSON intent, which is then validated in code.
• Assets resolve only to contract addresses pinned in code. A convincing story about a new token changes nothing.
• There is no server-side code path that signs a transaction. Execution is reachable only from the Confirm button in the UI.
• The card you read is generated from the same validated object that gets signed, so a manipulated model cannot show you one thing and sign another.

A model that misbehaves, hallucinates, or is successfully manipulated still cannot spend anything. The guarantee lives in code, not in a system prompt.

Robinhood Chain uses ETH as its gas token. Every transaction needs a little ETH to broadcast, including a transfer of USDG or a stock token. The thing you are sending is not the thing that pays the fee.

The confirmation card shows the estimated network fee before you approve, along with what your balance will be afterwards. Reads cost nothing at all.

Corvane operates on Robinhood Chain, over a fixed asset allowlist, and never executes without your confirmation. Those boundaries are deliberate. In practice:

• Every spending action stops at a confirmation card and executes only when you tap Confirm.
• Symbols resolve to the pinned allowlist. An asset outside it is declined, not looked up.
• Robinhood Chain only. Corvane does not reach other networks.
• Tokenized stocks are issued by Robinhood Assets (Jersey) Ltd. Corvane reads and moves them; it does not mint them.
• Corvane drafts what you asked for. It does not give financial advice or recommend what to buy.
• Prices are set by the market, not by Corvane. The card shows an estimate, and the chain settles the trade.
• Once a transaction is confirmed, the network settles it and it is final.

The disclosures that matter, in one place.

• Digital assets carry risk, including total loss. Nothing here is financial advice.
• Corvane is non-custodial. Your keys are yours, and a confirmed transaction is final.
• Every spending action stops at a confirmation card showing the full recipient and the exact amount. Read it before you approve.
• Tokenized equities are issued by Robinhood Assets (Jersey) Ltd and represent price exposure, not share ownership. They are not offered to US persons.
• Corvane runs on Robinhood Chain testnet today.
• Impostor tokens exist on this chain. Corvane's allowlist covers the assets it supports; outside it, verify contract addresses yourself.

Non-custodial

You hold the keys. Only you can move your funds, and only you can authorise a transaction.

Embedded wallet

A wallet created inside the app rather than a browser extension. Convenience of a login, custody of a wallet.

Intent

The structured JSON the model emits: an action, an asset, an amount, a recipient. Not a transaction, and not calldata.

Calldata

The encoded instruction actually sent to a contract. Corvane builds it in code from a validated intent; the model never writes it.

Allowlist

The fixed set of assets, each pinned to a contract address. Symbols resolve against that list rather than a search.

Address poisoning

An attack that plants a lookalike address matching the first and last characters of a real one, hoping a truncated display hides the difference.

Prompt injection

Getting an AI to follow instructions hidden in its input. Corvane assumes it will happen and removes the model's ability to act on it.

Decimals

How a token subdivides. USDG uses 6; every other listed asset uses 18. Corvane pins both in code, so the agent never has to infer them.

Gas

The fee to broadcast a transaction. On Robinhood Chain it is paid in ETH, whatever asset you are moving.

Testnet

A parallel network used for testing, with funds that carry no market value. Corvane targets it today.