Erebus

FAQ

Questions, answered plainly

Including the ones with unflattering answers. The paper has the long form.

What does Erebus actually hide?
Your network address and the relationship between your requests. Nobody on the path sees both who you are and what you asked for: the entry node knows your address but not your request, the exit node knows your request but not your address, and the relay in between knows neither.
What does it not hide?
Anything already public on-chain. A transaction that settles on Robinhood Chain is as visible as any other; Erebus hides who submitted it and from where, not that it happened. Shielding the positions themselves needs the shielded pool, which is not built yet.
Is this a VPN or Tor?
No. A VPN moves the trust to one provider that sees everything. Tor is low-latency but does not resist an observer who can watch both ends and correlate timing. Erebus delays every packet independently at every hop and pads everything to one size, which costs latency and buys resistance to exactly that correlation.
How slow is it?
Expect roughly one to five seconds for a round trip, dominated by the delays you asked for rather than by bandwidth. That is fine for submitting an order or reading a balance and wrong for a live orderbook feed, which is why the design keeps market data out of the mixnet.
Can the exit node read my transaction?
Yes, and it must, because someone has to hand the transaction to the chain. What it cannot learn is who you are. This is why exit selection is per request and why exit operators need stake at risk.
If few people use it, does it still work?
Less well, and this is the honest limit of any mixnet: you hide in a crowd, and a small crowd hides you less. Cover traffic raises the floor but does not replace real users. Early adopters get weaker anonymity than the design allows for.
Do I have to trust the node operators?
Not individually. A path is compromised only if all three hops collude, and layers are assigned from a hash of the epoch seed and the node key, so nobody chooses their own position. What you do have to trust is that the three you drew are not all the same operator wearing different keys, which is what staking is meant to make expensive.
Is there a token?
No, and there is no sale, no allocation, and no airdrop. Fees are paid in ETH, which is what Robinhood Chain uses for gas.
Can I use it today?
You can run the mixnet locally and send traffic through three hops. You cannot use it from a wallet: there is no browser SDK and no chain connection yet.
Has it been audited?
No. Nothing here has been reviewed by anyone outside the project, and the cryptography includes deliberate simplifications documented in the paper. Do not put anything you care about through it.

Something missing? Open an issue.