Whitepaper · v1 · July 2026

Your wallet has an inbox. Encrypted. No middleman.

0xInbox turns every wallet address into an end-to-end encrypted inbox — and lets you send crypto to anyone, even a friend who has never touched a wallet, using only their email.

Live on Robinhood Chain · chainId 4663gas in ETHE2E · XMTP MLS
0xinbox.xyz
The 0xInbox landing page: the tagline in Robinhood lime over a cosmic dark ground, with a preview of the multi-panel messaging app.
Fig. 1The product in one screen — encrypted messaging, payments, and a wallet-native inbox.
01

The idea

Email gave everyone a free, permanent, universal address — but every message runs through a server that can read it, sell it, or lose it. Crypto fixed ownership, but made messaging and money terrifying: seed phrases, gas, hex strings, memecoins.

0xInbox takes the good half of each. Your wallet address is your inbox. Every message is sealed on your device and travels the network unreadable — no server, ours included, can open it. And because the address is already a wallet, money moves in the same gesture as a message.

Write to any address. Attach ETH. Reach people who have never heard of crypto — the message and the money wait for the day they connect.

It runs on Robinhood Chain — an Ethereum Layer 2 (Arbitrum Orbit), chainId 4663, gas paid in ETH — built for the millions of Robinhood users arriving onchain.

02

Onboarding without friction

There are two front doors, and neither shows a seed phrase. Connect an existing wallet (MetaMask, Robinhood Wallet, Coinbase Wallet), or sign in with an email — and an embedded, self-custodial wallet is created for you, invisibly.

In the email path the word “wallet” never appears. You get an 0xInbox address. Keys are generated on your device; the encryption handshake is signed in the background with no popup.

sign in
The sign-in modal: 'Your wallet has an inbox', an email field, styled in lime — powered by Privy.
Fig. 2One email, no jargon. Login methods are gated so a broken button is never shown.
Embedded wallet

Created invisibly

Social/email sign-in provisions a self-custodial MPC wallet — nothing to install, nothing to write down.

External wallet

Pinned to the chain

wagmi + viem connect MetaMask & co, and a network guard offers to switch to Robinhood Chain automatically.

03

The encrypted inbox

The app is a calm, glassy three-panel workspace: a sidebar with your identity and vault, a conversation list, and the reading pane. Messages stream in real time over XMTP with MLS end-to-end encryption.

Unknown senders don’t get to interrupt you. Conversations split into Inbox (accepted) and Requests (unknown), backed by XMTP consent states — the composer stays locked until you accept, and messages from strangers that contain links are flagged.

/inbox
The three-panel app: sidebar with a $INBX vault card, a conversation list with tabs and search, and a reading pane showing messages, an emoji reaction, a gold ETH payment bubble, a teal $INBX tip, and a violet ciphertext bubble.
Fig. 3One conversation, four content types — text, an ETH payment (gold), a $INBX tip (teal), and the ciphertext view (violet).

Groups & rich content

Group chats, emoji reactions, replies and encrypted image attachments — all native XMTP content types.

Identity, resolved

Names show in order: your nickname, then pseudo@0xinbox, then ENS, then a short address — with a deterministic identicon everywhere else.

Receipts

Every message reads Sent · Delivered · Encrypted ✓. Search runs locally over what only your device can read.

04

Money in the message

Because the recipient is an address, paying them is one tap. The button turns the composer into an asset picker — ETH or $INBX — with quick tip presets.

Before anything is signed you get an explicit confirmation: resolved recipient, amount, network, estimated fee. The transaction settles on Robinhood Chain, and a payment bubble tracks it live from pending to confirmed with a link to the explorer.

◆ ETH

Native value transfer

A plain sendTransaction on chainId 4663, blocked before signing if your balance can’t cover it.

0x $INBX

The social currency

A standard ERC-20 transfer, same UX as ETH, styled teal with quick 10 / 50 / 100 presets.

receipt

Recorded in chat

Every payment posts a custom 0xinbox/payment message, so it lives in the conversation with its status.

05

Send crypto to any email

This is the part that makes 0xInbox usable by people who know nothing about crypto. You can send ETH or $INBX to an email address — to someone with no wallet at all. They claim it simply by signing in.

1

Type an email instead of an address

In Send, enter marie@example.com. 0xInbox pre-generates a real, self-custodial wallet tied to that email, server-side.

2

Send the funds

You pick the amount and confirm; the ETH goes on-chain to Marie’s brand-new wallet address.

3

Share a claim message

You get a ready-to-copy note: “I sent you 0.05 ETH — sign in with your email to claim it.” No wallet, no seed phrase, no memecoins.

4

She signs in and it’s already hers

Marie logs in with that email; the wallet — and the funds already waiting in it — appear automatically in her account.

/send
The send flow with an email recipient: the card shows 'marie.dupont@example.com — New 0xInbox wallet · they claim it by email', with an amount field ready.
Fig. 4Paying an email. The recipient’s wallet is created for them; they claim the funds by signing in.

Built on Privy’s wallet pre-generation. The app secret stays server-side; the sender’s own wallet broadcasts the transfer. An automatic notification email (vs. the copyable claim link) is a drop-in upgrade.

06

Contacts & a proper send flow

An address book, stored locally on your device — no server sees it. Save any address or ENS name with a nickname, tap ★ in any conversation, and pay or message a contact in one tap. The standalone Send screen lets you pick a contact, choose the asset and amount, add a note, and confirm — and the payment still lands in the conversation.

/contacts · /send
Contacts list with Message and Send actions on the left, and the Send money panel with a recipient picker and contact chips on the right.
Fig. 5The address book and the send flow, side by side.
07

Provably no middleman

The claim “no one can read this” is easy to make and hard to feel. So every conversation has a Plaintext ⇄ Ciphertext toggle: flip it and each message becomes the sealed bytes the network actually carries — monospace, violet, dashed. A teaching tool that makes the encryption tangible.

Encryption keys live on your device. Our backend never touches message content — it only ever stores push-notification subscriptions. Rendered messages are plain text, never HTML, behind a strict content-security policy.

E2E

XMTP + MLS

Messaging over a decentralized network with Messaging-Layer-Security encryption. We run no message server.

waiting

Reach anyone

Write to an address that has never used 0xInbox; the sealed message waits on the network until they connect.

PWA

Installable

Install to the home screen, push for accepted contacts only, and an unread badge on the tab.

08

The $INBX token

$INBX is a plain, fixed-supply ERC-20 on Robinhood Chain — one billion tokens, minted once, no mint function, no transfer tax, no blacklist. Clean by design. It powers four utilities, all read straight from your on-chain balance — no subscription, you simply hold.

Tiers by holding
Free → Silver (1K) → Gold (10K) → Diamond (100K). Unlimited groups, larger attachments, a verified badge, priority pseudonyms — unlocked automatically from balanceOf.
Tips
Send $INBX inside any message, the social currency of the app, with its own teal payment bubble.
Pseudonyms by burn
Reserve name@0xinbox by burning $INBX — 3 chars = 50K, 4 = 10K, 5+ = 1K. A public counter shows total burned; deflation you can see.
Staking
Stake $INBX to share app revenue, paid in ETH (Synthetix-style accounting), with a 7-day unstake cooldown. Gated behind a flag pending legal review.
audited path

Contracts, tested

Three Foundry contracts, 59 passing tests (unit + fuzz + reentrancy), Slither-clean. An adversarial multi-agent review surfaced one real fund-lock bug in staking — found, fixed, re-tested.

pre-audit

Before mainnet

An external audit is mandatory before launch — the staking contract will custody ETH. Stated plainly, not buried.

09

Architecture & security

Framework
Next.js 16 (App Router) · TypeScript strict · Tailwind CSS 4
Auth & wallets
Privy (embedded + social) · wagmi v2 + viem
Messaging
XMTP v7 browser SDK · MLS end-to-end encryption
Chain
Robinhood Chain · L2 Arbitrum Orbit · chainId 4663
Contracts
Foundry · OpenZeppelin 5 · Solidity 0.8.30
Data path
No message content ever reaches a server. The backend stores only push subscriptions and pre-generates recipient wallets.
Hardening
Strict CSP + security headers, plain-text rendering, address validation, explicit payment confirmation, rate-limited API routes.
light theme
The same three-panel app in the light theme — a clean paper adaptation with an olive-lime accent.
Fig. 6Every surface is designed twice — a cosmic dark default and a clean light theme, switchable and system-aware.