The Book · 27 Jul 2026
Architecture

How Robinhood Chain runs

Robinhood Chain has no validator set and no public staking. It is an Arbitrum-stack rollup: a single Robinhood-operated sequencerorders transactions first-come-first-served, Ethereum settles the chain, and Ethereum blobs carry the data. “Permissionless” describes who can deploy and transact — not who runs the network. At launch, one company runs it. That is the trust model.

LayerWhat runs it
Rollup frameworkArbitrum stack (Nitro / Orbit), an optimistic rollup with BoLD dispute resolution.
SettlementEthereum. State roots and proofs post to L1; Ethereum is the court of final record.
Data availabilityEthereum blobs (EIP-4844). Transaction data is published to L1, not a separate DA committee.
SequencerA single sequencer, operated by Robinhood. It orders transactions and produces blocks in ~100ms.
Ordering policyFirst-come-first-served. No fee-based priority, no public mempool auction, no published MEV market.
GasPaid in ETH. There is no native chain token, no staking, and no validator rewards to distribute.
ProvingFraud proofs are live, but the challenger set is allowlisted — two whitelisted actors at L2BEAT's July 2026 reading.
Bridge exitsThe canonical bridge carries a challenge period — moving assets back to Ethereum can take seven days.

The honest reading

Where the trust sits

Each signal below is an editorial reading of public information — Robinhood's docs and L2BEAT's risk analysis — not an audit. The gauge measures how much trust the layer asks you to place in the operator.

SignalTrust in the operatorReading
SequencinghighOne operator produces every block. If it stops, the chain stops.
Censorship resistancehighA transaction filterer at the sequencer can reject txs — including force-inclusion attempts and sanctioned addresses.
Upgrade controlhighCore system contracts can be upgraded with no delay and no user exit window.
Settlement & provingmediumEthereum settles the chain and fraud proofs are active, but only allowlisted actors can challenge.
Bridge exitsmediumCanonical withdrawals inherit Arbitrum's ~7-day challenge period.

This is the tradeoff Robinhood is making today. Ethereum-grade settlement and public deployment, paired with a single operator that sequences, filters, and can upgrade the system contracts without delay. It is neither fully centralised nor fully secured by Ethereum — it is a rollup with meaningful additional trust in Robinhood and its allowlisted operators. A path to a more open validator and challenger set has not been scheduled. Until it is, who runs the sequencer is the answer to who runs the chain.