Overview
Gargantua is a trading agent for Robinhood Chain with two parts. The agent answers questions about coins, stocks and wallets. Your messages are encrypted in your browser to a key that only exists inside a hardware enclave, and your browser checks a signature on every answer.
The desk handles trades. Your private balance sits in the Privacy Cash pool, and each trade goes through a new wallet that the Privacy Cash relay funds, so the coin never touches your main wallet.
Part of the revenue goes to $GARGANTUA stakers in USDG and ETH, and part buys back and burns $GARGANTUA. The shares are fixed in the contract.
The agent
Encrypted in your browser
Before you send anything, your browser asks NEAR AI Cloud for the model's hardware attestation and checks it: an Intel TDX quote for the machine, NVIDIA's signed result for the GPUs, and the model's encryption key tied to both. Each message is then encrypted to that key (X25519 key exchange and XChaCha20-Poly1305, with a new key for every field). Our server adds the API key and forwards the bytes unchanged. It sees how big they are and how many tokens were used, and nothing else.
Models
We only use models that NEAR runs in its own enclaves with end-to-end encryption. Today that means Qwen 3.8 27B (the default) and GLM 5.3 Flash. We don't offer models hosted by partners or closed models that are only proxied.
Signed answers
The enclave signs each answer over a hash of the exact request and the exact response. Your browser checks that signature before it shows the answer or runs anything the model asked for. If one byte had changed on the way, the check would fail and you would not see the answer. Click Signed under an answer to see the details.
Reading the hardware check
Gateway enclave and Model enclave mean the Intel TDX quote is valid, fresh, and not in debug mode. NVIDIA GPU means NVIDIA's attestation service approved the GPUs, and your browser checked NVIDIA's signature on that result. Approved build means the software that was measured matches a build we pinned. End-to-end key means your messages are encrypted to the key from the verified report. Intel TCB is Intel's patch level for the machine: NEAR's servers currently report OutOfDate, with the advisories listed.
Data lookups
When the model needs data, your browser fetches it directly from DexScreener, GeckoTerminal or the Robinhood Chain RPC. Those services see a request from your IP address. Our servers don't see what you looked up. Nothing is saved, so closing the tab deletes the conversation.
Free messages and credits
Every wallet gets 10 free messages a day. After that, credits cost 1 USDG for 40 messages. Signing in proves you own a wallet, and our server counts messages per wallet without reading them.
The desk
Your private balance
To unlock it, your wallet signs Privacy Money account sign in. That signature opens your Privacy Cash account, which is the same account on every Privacy Cash site. It stays in this tab and is gone when you close it. Your ghost wallets are derived from the same signature, so the same wallet always finds the same ghosts. Never sign that message on a site you don't trust.
How a ghost trade works
- You choose a coin and an amount. By default the desk changes the amount by up to 15%. You can also add a random wait of 1 to 10 minutes.
- Your browser builds a zero-knowledge proof, and the Privacy Cash relay sends ETH from your balance to a new ghost wallet. Your wallet doesn't have to sign anything.
- The ghost buys the coin: through Uniswap v3 for Robinhood stock tokens, Uniswap v4 for Pons coins that have graduated, and the Pons curve for the ones that haven't.
- Later you sell from My ghosts and send the ETH back to your private balance. The ghost pays its own gas, and a small amount of dust stays in it on purpose.
Costs
The Privacy Cash relay charges 0.00055 ETH plus 0.35% on each withdrawal, so a ghost trade only makes sense from about 0.05 ETH, where the cost stays under 1.5%. Each ghost keeps 0.0003 ETH for gas. Depositing into the pool is free. The desk charges 0.3% of what you add to your private balance, paid from your own wallet.
Timing and amounts
We looked at four days of withdrawals from the Robinhood Chain pool. About a third matched the exact amount of an earlier deposit, most of them less than a minute later, which makes them easy to link. The desk changes amounts, tells you when your deposit is still fresh (under six hours, or fewer than 60 new notes in the pool since), and warns you before you take out the exact amount a ghost just sent back. Trades never wait unless you ask for it.
Recovery
Ghosts are numbered from your signature. On a new device, unlock with the same wallet and the desk will find them. The desk's notes on your device (the ghost list and your activity) are encrypted with a key that only that signature opens. If your wallet ever produces a different signature, the desk stops, because a different signature means a different account.
Where the money goes
Everything goes through GargantuaRevenue, and the shares are constants in the code. For agent credits paid in USDG, 15% goes to stakers, 15% buys back and burns $GARGANTUA, and 70% pays running costs such as inference, relays and hosting. For the desk fee, paid in ETH, half goes to stakers and half to the buyback.
The stakers' share goes straight to GargantuaStaking, which splits each payment by stake as soon as it arrives. You can claim at any time, and you can unstake 24 hours after your last stake. Money that arrives while nobody is staking waits until at least 2 million $GARGANTUA are staked, so one tiny stake can't take all of it.
The burn reserve can only leave through buyback, which swaps it into $GARGANTUA and sends the tokens to the dead address. Nobody, including the owner, can move staked tokens, rewards or the burn reserve anywhere else. Two things still depend on us: our keeper decides when the buyback runs and sets its minimum price, and the owner sets the token and staking addresses once. Check both addresses below before you stake or buy credits.
Contracts
Our contracts are covered by tests, including buybacks run on a copy of Robinhood Chain, but they have not been audited. The Privacy Cash pools are external and audited by their own team. Privacy Cash's multisig can upgrade and pause them.
Limits
Privacy is not anonymity. Deposits into the pool and their amounts are public, and so is the fact that a ghost traded. Paying the desk fee or buying credits shows that your main wallet uses Gargantua, but not which ghosts are yours. Timing and amounts can still connect trades, which is why the desk changes amounts and tells you when a trade would be easy to link.
Privacy Cash can see which notes you spend and your IP address when your browser asks it for Merkle paths. Our RPC relay also receives requests, and we don't log them. Use a VPN if your IP address matters to you.
You also have to trust the site itself. End-to-end encryption protects you from our server, its logs and NEAR's staff, but not from a modified version of this page. The source code is published so anyone can check it.
Robinhood can filter transactions at the Robinhood Chain sequencer. Stock tokens follow their issuer's terms: they are not available to US persons and can be paused.
Nothing here is financial advice. The agent gives you data and its reading of it, and you make the decision. Gargantua is not affiliated with Robinhood, NEAR AI or Privacy Cash.