demoSimulated vault, prices and swaps. No funds move and no transaction is sent.Simulated data. No funds move.What is real?
tubelane
Robinhood Chain

Private routing for coins

Send from one wallet.
Arrive in another.

Your coins go into a shared vault and come out at a fresh address, as the same coin or a different one. On chain, the deposit and the payout aren't linked. We tell you exactly who else can link them.

Vault nowsimulated
Batches settled
…
Last batch
…
Coins listed
…
ETH in the vault
…
…through the vault
Recipient receives ≈
0
Recipient wallet
Privacymore time = more cover

Random pauses between steps, trades split up, and the payout arrives as 2 or 3 round amounts over a few hours.

Demo mode: prices, balances and swaps are simulated. No funds move.

How it moves

One thread in, many threads out.

Deposits land in one shared vault. Positions inside it belong to one-time keys, not wallets. Batches settle many of them together, trade on public markets, and pay out to fresh addresses.

WhoCan seeCannot see
The public chainYour depositVault tradesRecipient payoutwhich deposit became which payout
The operatorYour depositThe one-time keysRecipient payoutnothing about this swap
The recipientA payout from the vaultwho sent it, unless you tell them
The vault, live

How much company do you have?

Open the vault page
deposits trades payouts

No batches yet.

Every batch the vault settled, newest last. In the demo they are simulated and not clickable.

Activity cover needs an indexer in live mode.

Trust model

What is guaranteed, and what is trust.

Tubelane does not make your coins invisible. It breaks the public link between a deposit and a payout, and it is explicit about who could still draw that line.

The contract enforces

  • Coins leave only against a position in a signed root, only once, and only to the address that position's key signed for.
  • No root can promise more coins than the vault actually holds.
  • A deposit not credited within 24 hours can be taken back by the wallet that made it.
  • If the operator posts nothing for 48 hours, anyone can freeze the vault. Every position can then be withdrawn with its recovery code and a Merkle proof.

Anyone can verify

  • Your deposit: the wallet, the coin, the amount and the time. It is an ordinary public transaction.
  • Every batch: its root, how many deposits, trades and payouts it settled.
  • Every trade the vault makes on a Pons curve or Uniswap pool.
  • Every payout: which address received what, and when.

The operator can see

  • This swap's one-time keys and its recipient(s), in the sealed note you hand over.
  • So the operator can link your deposit to your payout. The chain can't; the operator can.
  • For a by-hand swap, the refund address as well.

The operator controls

  • Today a single operator runs every batch and signs every new root.
  • You trust it to move balances only as their keys instruct, and to finish your swap on time.
  • Holding your swap's keys gives it no new power: an operator willing to cheat could already do so through the roots it signs. It is what lets your swap finish without your tab open.

You must keep

  • The recovery code. It is the only key to follow a swap, and to withdraw it yourself if the vault freezes.
  • It is stored in this browser too, until you clear its storage. That is not a backup.
  • A fresh recipient wallet. Paying yourself back to the sending wallet links the two again.

If something goes wrong

  • Price moves past your protection: the swap waits. After 6 hours, what it holds goes to your refund address.
  • A coin sells out its curve mid-swap: it waits for the Uniswap pool, same 6-hour limit.
  • Deposit never credited: take it back after 24 hours from the depositing wallet.
  • Operator silent for 48 hours: freeze the vault and withdraw with your code, from any wallet.
  • Code lost: the swap still finishes, since the operator holds its keys. You just can't follow or rescue it.
FAQ

Straight answers.

Is this a mixer?

It is a shared vault that trades. Everyone's coins sit in one contract and positions belong to one-time keys, so a deposit and a payout are not visibly connected on chain. It only holds ETH and listed Pons coins, and every trade settles on the coin's own public Pons curve or Uniswap v4 pool. The operator can still link your deposit and payout: see the trust model.

Can I pay without connecting a wallet?

Yes. Choose "Any wallet, by hand" and you get a one-time deposit address for that swap. Send the exact amount to it in a single transfer, from any wallet or exchange. The address is watched for 24 hours. If nothing arrives, nothing happens; anything sent late can be refunded with your recovery code.

Which coins can I move?

ETH and Pons coins paired with ETH that are listed in the vault. Anyone can list another one from the coin picker by pasting its address. Coin to coin always goes through ETH, so it is two trades inside the vault. Picking the same coin on both sides is a private send: nothing is traded.

What does it cost?

Tubelane adds no fee. You pay gas for your own deposit. Trades pay the coin's normal Pons fee (1% plus any creator tax) but only on the part that isn't matched against other users inside the vault. The operator pays gas for every batch, your payout included.

How long does it take?

Each step waits for the next batch, and batches run a few minutes apart while there is work. A private send needs 2 batches, a swap with ETH on one side 3, coin to coin 4. Standard privacy finishes in about 15 to 25 minutes; High and Max add random pauses and split payouts, so 1 to 4 hours or up to half a day.

What if the price moves before it fills?

Before each trade the operator checks that the market still pays your minimum (your price protection). If it doesn't, the swap waits. After 6 hours, whatever it holds at that moment goes to your refund address.

What if a coin sells out its curve mid-swap?

A Pons coin that completes its curve pauses until its Uniswap pool opens. Swaps that need it wait, then carry on. If that takes longer than 6 hours, what the swap holds goes to your refund address.

What if I lose my recovery code?

The swap still finishes, because the operator holds its keys. You just can't follow it here or withdraw it yourself if the vault freezes. Codes are also kept in this browser until you clear its storage, which is not a backup.

Does Tubelane run a server?

Tubelane keeps no account and no record tied to you. It does hand each swap's sealed note to the operator's intake endpoint, which is a server. If that is unreachable, the note can be posted to the vault's on-chain inbox instead.