The ledger keeps
the net. You stay under it.
Watch rules that are sealed in your browser and never leave it. Pools that settle in batches, so the chain records one residual swap instead of yours. No wallet asked for until you act.
Sotto is a privacy workspace for Uniswap v4 on Robinhood Chain: rules sealed where you are, pools that net their orders before they touch the curve, and a chain that only ever sees what is left over.
Read how it works →Six things it does,
quietly.
Each piece is small on purpose. Together they move your footprint from the ledger to somewhere only you can read.
A watch that stays home
A rule is a value, a line and a side. It is encrypted under a key your browser created and refuses to export. All that ever leaves the tab is a read.
One read for every rule
Every thirty seconds, while the tab is in view, your rules collapse into a single Multicall3 call. The RPC learns addresses and slots, never which rule or which line.
Batches, not swaps
A pool under the batch hook can't be hit directly. Orders join an open batch, buys meet sells at the pool's own price, and only the leftover goes through the curve.
Orders from the undertow
A cast can be paid from a shielded note. The output lands on a one-time key, so the address the ledger shows is the pool's, not yours.
Every hook, named
All Uniswap v4 pools on the chain with the hook they run under. A hook's permissions live in the last fourteen bits of its address; we decode them for you.
Nothing to sign
Reading a chain needs no wallet, so Sotto never asks for one just to look. When a wallet is needed, it is used for one transaction and forgotten.
One workspace,
four rooms.
Two are running today, one is simulated on live pools, one is still on paper. What is real, row by row →
From order
to residual.
Four moves. Only the last one ever surfaces, and by then it is someone else's shape.
Three layers, and
what each still shows.
Privacy that won't tell you where it leaks is just a slogan. Every layer here lists its own edge.
Watch rules
RunningHidden
- The rule itself: its name, line, side and meaning
- Which address belongs to which rule
- That a rule fired, and when
Still visible
- The public RPC sees the addresses and slots it is asked to read
- Your IP, as with any browser read
The batch hook
DesignedHidden
- Your footprint on the pool: price, Swap event and storage only see the residual
- What each order paid: one blended price per side
- Who traded against whom
Still visible
- The cast itself: size, side, recipient, unless it comes from the undertow
- The batch total and its residual, on the ledger
The undertow
In designHidden
- Who cast: the spender is a nullifier
- Who received: the output goes to a one-time key
- Balances and transfers inside the pool
Still visible
- Amounts going in and out of the pool, and the size of a shielded cast
- The set of addresses that have ever deposited