Security and key storage
Bridge in the Hood is non-custodial: your keys are generated in your browser and yours alone. This guide explains how to store them, what exporting means, and how to stay safe while swapping.
How your wallet is created
When you connect Phantom, the app asks you to sign a fixed message. That signature is hashed with keccak256 and used as the private key for your Robinhood Chain wallet. The same Phantom account always produces the same Robinhood Chain address, so the wallet is deterministic and recoverable as long as you control the Phantom account.
Where your keys are stored
The private key and recovery phrase exist only in your browser's memory while the page is open. They are never sent to our servers, never logged, and never persisted to localStorage or cookies. If you refresh or close the tab, the in-memory copy is gone and you reconnect to regenerate it.
How to export your keys
Open the wallet panel on the trade page and press 'Reveal private key & phrase'. The app asks you to confirm the action, then shows both the raw private key and the BIP-39 recovery phrase. You can copy either one and import it into MetaMask, Rabby, Trust Wallet, or any EVM-compatible wallet.
What happens after you export
Exporting does not move, lock, or delete your funds. It simply gives you a second way to access the same address. From that moment on, the key is your responsibility. Anyone with the private key or phrase has full control of the wallet, so store it offline, never share it, and never paste it into chat or email.
Is the swap safe?
The swap is a standard Solana transfer signed by you in Phantom and executed through Relay's public API. We cannot sign on your behalf, cannot change the destination token, and cannot touch your funds. Always double-check the token contract address, the receive amount, and the fees shown in the card before you confirm.
Security checklist
- Write the recovery phrase on paper or metal, not in a notes app or cloud storage.
- Use a hardware wallet or a fresh offline device when handling large amounts.
- Bookmark https://solana-robinhood-bridge.lovable.app and always check the URL before connecting.
- If you export your keys, do it in private and clear your clipboard afterwards.
- Never approve a Phantom transaction that does not match the amount and token shown in the app.
If something looks wrong
Stop and disconnect. Do not sign any transaction you do not understand. Verify the token contract on a Robinhood Chain explorer, and only reconnect through the official site.