Intelena

Intelena

Dark routing on Robinhood Chain: trade on the market's intel without leaking yours.
Name Intelena
Website intelena.app
Ticker $INTEL
Network Robinhood Chain
Version Whitepaper v1.0 — September 2026

Abstract

Intelena is a private trading layer on Robinhood Chain. Users deposit ETH, USDG, or Robinhood stock tokens into a shielded pool where balances, orders, and trade history are not visible on public explorers. When a user swaps, Intelena encrypts the intent and first attempts to cross it against other shielded orders at the oracle midpoint. A matched trade never touches a public liquidity pool, so its size and counterparties never appear on-chain. Only the unmatched remainder is routed to Uniswap, split into randomized pieces sent from one-time addresses, with proceeds re-shielded automatically.

Privacy on Intelena is not opacity toward everyone. Every spend carries a zero-knowledge proof that its funds belong to an approved association set, and scoped viewing keys let a user disclose a precise slice of their history to an auditor or tax authority without disclosing it to the world.

1. The Problem: Every Public Trade Is Intel

On a transparent chain, a trade is not just a transfer of value. It is a broadcast. The moment it lands in the mempool or a block, it hands information to parties whose business is to exploit it:

  • Wallet trackers and labelers map addresses to people, funds, and strategies, then sell or publish the result.
  • Copy traders mirror positions the instant they are visible, compressing the edge of the original trader to zero.
  • MEV bots read pending orders and front-run or sandwich them, extracting value directly from the trader's size.
  • Stop hunters see resting orders and trigger levels, and push price to them deliberately.

The result is a structural asymmetry: the market sees you in full, and you see the market only after everyone else has acted on what you revealed. Tokenized stocks make this sharper. A position in a stock token is a position in a real-world company, and exposing entry prices, sizes, and timing on a public ledger is a disclosure that no traditional brokerage would force on its clients.

Intelena reverses the flow of information. You see the market. The market cannot see you.

2. Design Principles

  1. Private by default. Balances, orders, fills, and history live inside a shielded pool. Nothing is published unless the user chooses to publish it.
  2. Match before you route. The most private trade is one that never reaches a public pool. Intelena always tries to cross shielded orders internally first.
  3. Measure the leak. Privacy is a spectrum, not a switch. Every route is scored for exposure before the user signs.
  4. Provable innocence, selective disclosure. Funds prove they come from an approved set; users prove exactly what they want to prove, to exactly whom they choose.
  5. Never trap funds. Every convenience layer (relayers, batching, private RPC) has a direct on-chain exit that requires no third party.

3. Architecture Overview

Intelena consists of five layers:

┌──────────────────────────────────────────────────────────────────┐
│  Client (browser / wallet / agent SDK)                           │
│  • holds notes & keys locally  • builds ZK proofs  • Leak Score  │
├──────────────────────────────────────────────────────────────────┤
│  Relayer Network                                                 │
│  • submits txs from one-time addresses  • private RPC            │
│  • pays gas from shielded balance  • batches deposits            │
├──────────────────────────────────────────────────────────────────┤
│  Dark Crossing Engine                                            │
│  • encrypted order book  • midpoint matching at oracle price     │
├──────────────────────────────────────────────────────────────────┤
│  Routing Engine                                                  │
│  • Uniswap v2/v3/v4 fallback  • order splitting  • timing jitter │
├──────────────────────────────────────────────────────────────────┤
│  Shielded Pool (Robinhood Chain contracts)                       │
│  • note commitments  • nullifiers  • association-set proofs      │
│  • viewing-key encryption  • emergency exit                      │
└──────────────────────────────────────────────────────────────────┘

3.1 Shielded Pool

The shielded pool is a set of smart contracts on Robinhood Chain holding ETH, USDG, and Robinhood stock tokens. Ownership inside the pool is represented as notes: encrypted records of (asset, amount, owner key, randomness). Only a cryptographic commitment to each note is stored on-chain, in a Merkle tree.

  • Depositing creates a new note and inserts its commitment into the tree.
  • Spending publishes a nullifier (a one-way tag derived from the note) and a zero-knowledge proof that (a) the note exists in the tree, (b) the spender owns it, and (c) the nullifier is correctly derived. The nullifier prevents double-spending without revealing which note was spent.
  • Balances are simply the sum of a user's unspent notes, computed client-side. No contract or indexer ever holds a plaintext balance.

Because commitments are unlinkable to deposits and nullifiers are unlinkable to commitments, an observer of the chain sees only that some value entered and some value moved — never whose, nor how much in aggregate per user.

3.2 Dark Crossing Engine

A swap on Intelena begins as an encrypted intent: asset in, asset out, size, and limit constraints, encrypted to the crossing engine. The engine maintains a book of resting shielded orders and continuously attempts to match opposite intents.

  • Matches execute at the oracle midpoint — the mid-price of the referenced oracle feed at the time of crossing — so neither side pays spread or price impact.
  • A matched trade is settled as a note-for-note exchange inside the shielded pool. No public swap occurs. Size, price, and counterparties do not appear on-chain.
  • Partial fills are supported. Whatever portion cannot be crossed is handed to the Routing Engine.

3.3 Routing Engine and Uniswap Fallback

The unmatched remainder is executed against public liquidity on Uniswap v2, v3, and v4 deployments on Robinhood Chain. To prevent the public leg from revealing the original intent:

  • The order is split into pieces of randomized size.
  • Pieces are dispatched with timing jitter — randomized intervals — so they do not read as a single trade.
  • Each piece is submitted by a relayer from a one-time address with no prior history.
  • Proceeds are re-shielded automatically into fresh notes, so the output never sits in a traceable public wallet.

3.4 Leak Score

Before signing, the user sees a Leak Score for the proposed execution: a rating of how much information the route will expose, derived from the share that crosses internally versus routes publicly, the number and size distribution of public pieces, and the freshness of the addresses used.

A single slider lets the user move between best price (more public routing, tighter execution, higher leak) and least exposure (more patient crossing, more fragmentation, lower leak). The choice is explicit and made by the user, not by the protocol.

3.5 Compliance Layer: Proof of Innocence and Viewing Keys

Intelena is designed to be private toward the public, not opaque toward legitimate oversight.

  • Proof of innocence. Every spend includes a zero-knowledge proof that the spent funds descend from deposits in an approved association set — a curated set of deposit commitments that excludes sanctioned or illicit sources. The proof reveals membership in the set without revealing which member.
  • Scoped viewing keys. A user can derive a read-only key limited to a single asset, a date range, or both, and share it with an auditor, accountant, or tax authority. The key can be revoked. It reveals exactly the scoped history and nothing else.

4. Utilities

4.1 Shielded Assets and Trading

  1. Shielded balances — Hold ETH, USDG, and Robinhood stock tokens in a private pool, invisible to explorers and wallet trackers.
  2. Private stock token trading — Buy and sell tokenized stocks without exposing positions or entry prices.
  3. Dark crossing — Encrypted orders match against each other at the oracle midpoint, with no public swap, no visible size, and no visible counterparty.
  4. Uniswap fallback routing — Unmatched volume routes across Uniswap v2/v3/v4 on Robinhood Chain from one-time addresses, with proceeds re-shielded automatically.
  5. Order splitting and timing jitter — Large orders are broken into randomized sizes and intervals so they don't read as one trade.
  6. Leak Score — A pre-trade visibility rating for every route, with a slider from best price to least exposure.

4.2 Private Order Types

  1. Private limit orders — Encrypted resting orders that reveal nothing until filled.
  2. Private stop-loss and take-profit — Trigger prices stay encrypted, so nobody can hunt your stops.
  3. Private TWAP and DCA — Recurring buys and sells that don't create a trackable on-chain pattern.

4.3 Private Payments and Transfers

  1. Private transfers — Send shielded assets to another Intelena user with no on-chain link between sender and receiver.
  2. Private payment links — Request USDG with a link; the payer never learns your balance or main wallet.
  3. Clean withdrawals — Exit to a fresh address through a relayer, with gas paid from the shielded balance, so nobody has to fund the new wallet.
  4. Batched deposits — Deposits enter the pool in timed batches, so the timing of your deposit doesn't identify you.

4.4 Identity Hygiene

  1. Per-dapp addresses — A new address for every app you connect to, so your activity can't be stitched together.
  2. Exposure scan — Before shielding, see how tracked and labeled your public wallet already is.
  3. Private RPC — Wallet queries go through the relayer network, so your IP isn't linked to your addresses.

4.5 Compliance and Reporting

  1. Proof of innocence — Every spend proves in zero knowledge that its funds belong to an approved association set.
  2. Scoped viewing keys — Revocable read access limited to one asset or date range, for tax and audits.
  3. Local tax export — CSV and tax reports generated on your device from your private notes.
  4. Local PnL dashboard — Portfolio and profit calculated client-side, with nothing sent to a server.
  5. ZK PnL proofs — Prove your return percentage or holdings range for calls and leaderboards without revealing your wallet.

4.6 Teams and Automation

  1. Shielded team vaults — A private shared treasury with multi-member approval for every spend.
  2. Private agent SDK — Bots and AI agents trade from shielded balances with spending limits, keeping their strategy off-chain.

4.7 Safety

  1. Emergency exit — Withdraw directly through the contract if every relayer goes down, so funds can never be trapped.

4.8 Token

  1. $INTEL on Uniswap — The Intelena community token launches on Uniswap on Robinhood Chain. Holding it is optional; every utility works without it.

5. The $INTEL Token

$INTEL is the community token of Intelena.

  • Launch. $INTEL launches on Uniswap on Robinhood Chain. There is no presale portal and no claim page.
  • Contract address. Announced on X (@intelenaapp) and Telegram (t.me/intelenaapp) only. Any other address is not $INTEL.
  • Optional. Every Intelena utility works without holding $INTEL.

Nothing in this document is a promise of returns or a description of a fee, tax, or buyback mechanism.

6. Threat Model and Trust Assumptions

Adversary What they see today What they see on Intelena
Block explorer / wallet tracker Full balance and history per address Aggregate pool flows only; no per-user balance or history
Copy trader Positions and entries in real time Nothing — crossed trades never hit a public pool
MEV / front-running bot Pending order size and direction Fragmented, jittered pieces from fresh addresses; crossed volume never enters the mempool as a swap
Stop hunter Resting triggers and limit levels Encrypted triggers that reveal nothing until filled
Network observer IP ↔ address correlation via RPC Queries proxied through the relayer network

Trust assumptions:

  • Relayers can delay or refuse service but cannot steal funds, decrypt notes, or forge proofs. The emergency exit removes them from the trust path for withdrawals.
  • The oracle determines the midpoint price for dark crossing. Oracle manipulation would affect crossing price; it cannot affect custody.
  • The association set is a curated list. Its curation policy and operator will be documented and, over time, decentralized.
  • Zero-knowledge proofs rely on the soundness of the underlying proving system and the correctness of the circuits, which will be independently audited before mainnet.

Intelena does not reduce the visibility of the public leg to zero; it minimizes and fragments it. The Leak Score exists precisely so that this residual exposure is measured and chosen, never hidden.

7. Summary

Public chains made every trader a broadcaster. Intelena makes them a reader again. Shielded balances hide what you hold, dark crossing hides what you trade, fragmented fallback routing hides what you couldn't cross, and the Leak Score tells you exactly how much is left to see. Proof of innocence and scoped viewing keys ensure that this privacy is compatible with the audits, taxes, and compliance that real-world assets demand.

Trade on the market's intel — without leaking yours.

This document describes the intended design of the Intelena protocol and is subject to change. It is not an offer to sell or a solicitation to buy any token or security.