Agent-Safe Wallets
At /agent-safe, users can create isolated Morph Wallets for AI agents or automated tooling. Each wallet can be bound to a local spend policy:
- Max ETH per transaction
- Allowed contract addresses only
- Specific destination address allowlists
This limits blast radius if an agent key is ever compromised.
$MORPH
Tier System
Default eligibility tiers are computed from Robinhood Chain metrics:
TierRequirementsBRONZEAge ≥ 30 days, tx count ≥ 10SILVERAge ≥ 90 days, tx count ≥ 50, ≥ 0.5 ETH or ≥ 5 ETH recentGOLDAge ≥ 180 days, tx count ≥ 100, ≥ 25 ETH recentOBSIDIANAge ≥ 365 days, tx count ≥ 250, ≥ 100 ETH recent
Partners can configure their own policies, thresholds, and required tiers in the campaign builder.
Ca: 0x8cb84643f3306df07db448a0c054a83e37d90212
How It Works: The Morph Sequence
The protocol follows a five-step pipeline:
Main Wallet - The user signs a challenge with their real Robinhood Chain wallet.
Proof - HoodMorph reads on-chain metrics from the signed wallet: age, transaction count (nonce), ETH balance, and recent activity.
Capsule - A signed credential is issued. It contains the tier and eligibility result, but never the proving wallet address.
Morph Wallet - A fresh secp256k1 keypair is generated in the browser. The secret key is encrypted locally with AES-GCM + PBKDF2.
Campaign Access - The Morph Wallet registers for the campaign. Partners see only the morph address, tier, and valid capsule.
The Problem
On-chain identity is public by default. If you want to join a token presale, claim an airdrop, or enter a DAO-gated community, you usually have to connect or reveal your main wallet. That leaks:
Your full transaction history
Your token balances and net worth
Your other positions and affiliations
Your real-world identity, if any address is ever doxxed
HoodMorph breaks that link. It lets you prove that you meet a policy (e.g., "wallet is 180 days old with 25 ETH in recent activity") without revealing which wallet satisfied it.
Core Components
1. Morph Capsules
A Capsule is the portable credential at the heart of HoodMorph. It is an Ed25519-signed JSON object that proves a wallet met a campaign's eligibility policy at a specific point in time.
Each capsule includes:
Tier and tierLabel - the eligibility level achieved
morphWallet - the fresh EVM address used for the campaign
Nullifier - a deterministic hash that prevents double-registration
PolicyHash - binds the capsule to a specific campaign policy
IssuedAt / expiresAt - time bounds
Signature - issuer signature over the canonical body
Capsules can be verified offline with the issuer's public key. No blockchain query is required to check validity.
The Problem
On-chain identity is public by default. If you want to join a token presale, claim an airdrop, or enter a DAO-gated community, you usually have to connect or reveal your main wallet. That leaks:
Your full transaction history
Your token balances and net worth
Your other positions and affiliations
Your real-world identity, if any address is ever doxxed
HoodMorph breaks that link. It lets you prove that you meet a policy (e.g., "wallet is 180 days old with 25 ETH in recent activity") without revealing which wallet satisfied it.
What is HoodMorph?
HoodMorph is a privacy-preserving identity and access layer built for Robinhood Chain. It lets users prove reputation, eligibility, or wallet history from a main wallet, then "morph" that reputation into fresh, purpose-specific Morph Wallets that can be used for campaigns, whitelists, presales, DAO gates, private airdrops, and AI-agent sessions - without ever exposing the original proving wallet.
The core idea is simple but powerful: prove the shape of your wallet, hide the source.