Your piece lands where only you can find it.
YONDER
Normal NFTs sit in your main wallet where anyone can browse them. YONDER sends each piece to a fresh one-time stealth address made from your keys with ERC-5564. Your main wallet does not show it. Only your view key finds it.
ERC-5564 stealth delivery
Local demo. Buying and minting are not live.
Only you can find it.
Black is the machine. Lime is your coin and your piece. Tap a piece behind the helmet to see what you could find.
Why this is private
- 1A fresh address for every piece.
An ERC-5564 stealth address, made from secp256k1 ECDH.
- 2The announcement names no owner.
Only an ephemeral key and a view tag are posted, by the canonical Announcer, live on Robinhood Chain.
- 3Only your view key finds it.
Your wallet scans for it. Nothing leaves your browser.
Buy $YONDER and you get a piece.
The privacy is where it lands.
One buy, one piece.
Press a button below and watch it happen.
You buy
The piece lands
You hold the piece
Buy $YONDER. Your piece is delivered to a one-time stealth address that only your wallet keys can open.
Just trying it? Press a button.
Try a buy
Pretend to buy some $YONDER and see the piece you would get.
Demo values in $YONDER.
Demo minimum: 500K $YONDER. The 250K buy gets no piece. These are demo values only.
0 buys, 0 pieces
Your piece shows up here.
This exact mix: 1 in 0
How is my piece decided?
Four facts about a buy decide the piece: which pool, which wallet, which buy it is, and how much. They are hashed into a seed; the seed picks the five traits.
The seed for this buy
This is a demo. Buying and minting are not live.
Read the ledger, not your wallet
What is public, what stays private
Two things happen on every buy. One is visible to anyone. One is not.
Public
- The buy
- On chain, like any buy.
- The mint
- Sent from your own wallet.
- The announcement
- An ephemeral key and a view tag, posted by the canonical ERC-5564 Announcer.
Private
- The stealth address
- Which one holds your piece, to anyone reading only the announcements.
- Your view key
- Derived from one wallet signature. Never sent anywhere.
- Your identity
- No account, no email. Just your wallet and your keys.
A careful observer can still link the buying wallet to the stealth address. A private relay that closes this gap is in development.
Build a piece.
Pick four traits. Find your favourite piece.
This exact mix: 1 in 0
YONDER for your token
Add your own NFT to your coin
$YONDER is the working example of the collection technology. Give your token its own pieces.
- Bring your coin.Launch on Pons or anywhere on Robinhood Chain.
- Build your collection.Choose the palette, art sets and trait weights.
- Fund the delivery.You pay the deploy fee and fill the gas tank. Buyers get their pieces when they connect or check their address.
GET MY PIECES
Get the pieces from your token buys, wherever you traded.
- Connect wallet: only your address is read. Nothing else leaves your device.
- Sign once: the signature proves the buy and stays in your browser.
- Wallet sends the mint: to a stealth address, not the wallet everyone can already see.
One signature. Only the network fee.
Paste a wallet address to find its pieces.
Sample piece
Check a buy.
A transaction hash is all the mint route needs. Built and tested locally. Not deployed. No address.
Same swap, same piece.
THE RAIL
Each new piece joins your rail. Try another buy to add one.
site simulationBrowse the collection.
Explore 48 sample pieces. Find a mix you like.
site simulationNo piece matches that mix. Remove a filter.
THE ODDS
Each seed picks one option from each group. Lime marks your candidate.
Site piece and chain piece.
Same traits. The image on the right is what the contract draws.
How the piece reaches your wallet
No contract published yet.
- You buy.
- The buy is proven from the chain.
- You send the mint yourself.
- The piece is in your wallet moments later.
What runs when you buy.
Built and tested locally. Not deployed. No address.
The tech
- Standard
- ERC-5564 stealth addresses, scheme 1 (secp256k1).
- Announcer
- the canonical ERC-5564 Announcer,
0x55649E01B5Df198D18D95b5cc5051630cfD45564, live on Robinhood Chain. - Keys
- your spending and viewing keys are derived in the browser from one wallet signature (keccak256), never sent anywhere.
- Delivery
- a fresh 33-byte ephemeral key per piece, ECDH shared secret on secp256k1, a 1-byte view tag, and a one-time stealth address = your spend key plus the shared point.
- Announcement
- 57 bytes of metadata (view tag 1, selector 4, collection 20, token id 32).
- Authorization
- EIP-712 "Yonder Collection" v1,
MintAuthorization(buyer, buyRef, amountIn, deadline, stealth, ephemeralPubKey, viewTag). The stealth destination is inside the signature, so it cannot be swapped. - Contract
- YonderCollection, event Landed, 10 Forge tests passing.
- Built on
- Solidity 0.8.24, OpenZeppelin 5.1.0 ERC-721, EIP-712 typed-signature claim authorizations, one piece per wallet and one per buy enforced in the contract, the buyer's own wallet sends the mint and pays gas, artwork generated fully on chain as SVG, SignerChanged event on key rotation, built on Pons, Robinhood Chain (id 4663).
Honest limit: you send the mint from your own wallet, so a careful observer can link that wallet to the stealth address. Full unlinkability needs a relayer.
The proposed rule
Only you can find it.
Four rules connect your buy to your piece.
One buy, one piece.
A buy that meets the minimum would receive one ERC-721 piece after the buy is checked.
Delivered to a fresh stealth address, derived from your keys.
Your wallet keys derive a new one-time address for every piece. Nothing links it back to your public address on chain.
The announcer posts only an ephemeral key and a view tag.
The public announcement carries an ephemeral key and a view tag, both meaningless without your keys. No buyer and no amount are posted.
Small buys fire nothing.
Try an amount below your minimum. The candidate stays visible, but no piece is fired. The minimum is shown live.
No pool or collection address is published.
The minimum buy, supply and launch date are unpublished; the minimum here is your own number.
Read the arithmeticQuestions.
Do I need to claim my piece?
Yes. Open Get my pieces, connect the wallet you bought with, and claim. Your wallet pays the small network fee for the mint, and the piece lands at a one-time stealth address made from your keys, and shows under My pieces.
Does every buy get a piece?
Only a buy at or above the collection's minimum. Smaller buys are ordinary swaps like any other, and never bring a piece.
Can I sell the piece?
Once minted, it is an ordinary ERC-721 in your wallet, so yes, the same way as any other NFT. Nothing about it is restricted or soulbound.
Is there a contract yet?
No. Nothing is deployed, and no address exists on any network yet.
What if the site is down?
The buy is on chain either way. The authorisation can be re-issued once the site is back, and you claim then from Get my pieces.
What decides what my piece looks like?
A seed built from the pool, the buyer's wallet, which numbered buy it was, and the amount, all packed together and hashed. The same four inputs always give the same seed and the same piece.
Can anyone see which piece is mine?
They can see your buy, like any buy. The stealth address is found only with your view key, but a careful observer can link your buying wallet to it. You claim it from Get my pieces with the wallet you bought with.
Every swap has a look.
48 buys from the sample wallet. One piece at a time.
site simulationBuy the coin. Your piece lands where only you can find it.
Built and tested locally. Not deployed. No address.