One secret per piece.

Built with Lit Protocol V3

A charm carried by the piece.

Everything on a blockchain is public, NFTs included. LOCKET puts one private charm inside each piece. Your browser encrypts it before anything is sent, and a small Lit program holds the key. It hands that key only to whoever holds the piece right now on Robinhood Chain, so when the piece changes hands, the charm goes with it.

Buy $LOCKET and you get a piece. The privacy is what it keeps.

Local demo. Buying, minting and Lit access are not live yet.

Try a buy

Tap a piece behind the locker to see what you could unlock.

The vault opens.

Clear glass locker with lime edges holding a white ceramic robot, a frosted keyhole door on its right side.
Your simulated vault

Why this is private

  1. 1

    Sealed in your browser

    Your charm is encrypted on your own device with AES-256-GCM before anything is sent.

  2. 2

    Lit keeps the key

    A small Lit program runs inside locked server hardware. It asks Robinhood Chain who owns the piece and answers only that wallet's signature.

  3. 3

    The charm moves with the piece

    The chain keeps only the locked version. Sell the piece and the new holder can open the same charm.

Honest limits: a former holder keeps anything they already opened. Lit, its hardware and the chain reader are trust points. Live access is off until a real test passes.

Every coin gives you a coin.

This one keeps one secret for you.

One buy, one piece.

Press a button below and watch it happen.

You buy

The vault opens

You hold the piece

Buy $LOCKET wherever you already trade. A piece lands in your wallet moments later.

Just trying it? Press a key.

Try a buy

Punch in a demo amount. The keypad seals a charm and the locker opens on the piece you would get.

site simulationDemo values in $LOCKET. Keys 1 to 4 work too.

Demo minimum: 500K $LOCKET. The 250K buy gets no piece. These are demo values only.

0 buys, 0 pieces

Your piece shows up here.

How is my piece decided?

Four facts about a buy decide the piece: which pool, which wallet, which buy it is, and how much. They are hashed into a seed; the seed picks the five public traits.

Demo values in $LOCKET.

Sample wallet for this demo.

The seed for this buy

This is a demo. Buying and minting are not live.

One piece, two halves

What is public, what stays private.

Five public traits on the outside. One encrypted charm inside, for whoever holds the piece.

Public

  • The buy itself
  • The piece and its five traits
  • The locked charm and its commitment, stored on chain

Private

  • The charm itself. It is encrypted before it leaves your browser
  • The key. Lit hands it over only after checking who owns the piece now
  • The answer. It comes back encrypted, so our server only passes it along

The same locked charm stays with the piece after a sale. A former holder can keep what they already opened. Live Lit access stays off until it is tested.

Build a piece.

Set the five tumblers and see how rare that exact mix is.

Rank

This exact mix: 1 in 0

LOCKET for your token

Add your own NFT to your coin

$LOCKET is the working example of the collection technology. Give your token its own pieces.

  1. Bring your coin.Launch on Pons or anywhere on Robinhood Chain.
  2. Build your collection.Choose the palette, art sets and trait weights.
  3. Fund the delivery.You pay the deploy fee and fill the gas tank. Buyers get their pieces when they connect or check their address.
Add your own NFT to your coin

GET MY PIECES

Get the pieces from your token buys, wherever you traded.

Use the wallet you traded with. No connection needed.

Paste a wallet address to find its pieces.

Same swap, same piece.

THE RAIL

Each new piece joins your rail. Try another buy to add one.

site simulation

Browse the collection.

Explore 48 sample pieces. Find a mix you like.

site simulation
48 pieces

THE ODDS

Each seed picks one option from each group. Lime marks your candidate.

Site piece and chain piece.

Same traits. The image on the right is what the contract draws.

On the site
Drawn by the contract, same traits

How the piece reaches your wallet

No contract published yet.

  1. You buy.An ordinary on-chain swap. Nothing about your future charm leaves your browser yet.
  2. The buy is proven from the chain.Public chain data only. Your secret is not involved yet.
  3. You send the mint yourself.Your browser creates a random key and encrypts the charm before the mint.
  4. The piece is in your wallet moments later.Only the encrypted envelope and commitment went on chain.
How it works

What runs when you buy.

ERC-721, art fully on chainTraits from the swap: same swap, same pieceA signed authorisation per buy, one use onlyYou mint it, small fee includedA slot for a Uniswap V4 hook later

Built and tested locally. Not deployed. No address.

The tech

Cipher
AES-256-GCM with a 12-byte IV, through the browser's Web Crypto API.
Key
A random AES key is wrapped to the public key of one fixed Lit action, identified by its content hash (CID). That enrollment has not run yet, so no key can be opened today.
Holder check
Lit Protocol V3 runs the action inside a TEE. It reads ownerOf for the piece from a pinned Robinhood Chain RPC, checks the holder's signature, and returns the key encrypted to that holder only. The browser uses ethers v6 and the action ethers v5; both derive the shared key from the same 32-byte X coordinate.
Pay in ZEC
A code route through NEAR Intents 1Click is written: transparent ZEC settles to USDC on Base, then the operator reserves a claim code on chain 4663. It is switched off until a real payment, settlement and refund are tested.
Secret
32 random bytes; commitment = keccak256(secret); ciphertext (29 to 4,096 bytes) stored on chain.
Authorization
EIP-712 "Locket Collection" v1, MintAuthorization(buyer, buyRef, amountIn, deadline, commitment, ciphertextHash). The seal is inside the signature, so it cannot be swapped.
Transfer
The ciphertext and commitment persist. The new holder can request the same charm. A former holder may retain a copy.
Contract
LocketCollection, events Locked, Sealed and CodeReserved. Local unit tests pass. No deployment.
Built on
Solidity 0.8.24, OpenZeppelin 5.1.0 ERC-721, EIP-712 typed-signature claim authorizations, one piece per wallet and one per buy enforced in the contract, the buyer's own wallet sends the mint and pays gas, artwork generated fully on chain as SVG, SignerChanged event on key rotation, built on Pons, Robinhood Chain (id 4663).

Honest limit: the Lit TEE, Chipotle service, pinned RPC and operator remain trust and availability boundaries. Live runtime is unverified. ZEC payments are disabled.

The proposed rule

The vault opens.

Four rules connect your buy to your piece.

Every piece has a public face and one sealed trait.

Every piece shows its face art the moment it is minted. Underneath, one trait stays sealed until the holder opens it.

One buy, one piece.

A buy that meets the minimum would receive one ERC-721 piece after the buy is checked.

Small buys fire nothing. The minimum is shown live.
Your minimum

Try an amount below your minimum. The candidate stays visible, but no piece is fired. The minimum is shown live once the collection is public.

The encrypted charm stays with the piece through transfer.

A Lit action checks the current holder against Robinhood Chain before returning an encrypted key. A former holder can retain anything they opened earlier. Live access remains disabled until verified.

No vault, pool or collection address is published.

The minimum buy, supply and launch date are unpublished; the minimum here is your own number.

Read the arithmetic

Questions.

Do I need to claim my piece?

Yes. Open Get my pieces, connect the wallet you bought with, and claim. Your wallet pays the small network fee for the mint, and the piece lands in the wallet that bought.

Does every buy get a piece?

Only a buy at or above the collection's minimum. Smaller buys are ordinary swaps like any other, and never bring a piece.

Can I sell the piece?

Once minted, it is an ordinary ERC-721 in your wallet, so yes, the same way as any other NFT. Nothing about it is restricted or soulbound.

Is there a contract yet?

No. Nothing is deployed, and no address exists on any network yet.

What if the site is down?

The buy is on chain either way. The authorisation can be re-issued once the site is back, and you claim then from Get my pieces.

What decides what my piece looks like?

A seed built from the pool, the buyer's wallet, which numbered buy it was, and the amount, all packed together and hashed. The same four inputs always give the same seed and the same piece.

Can the team see my sealed trait?

No. Our server only passes along encrypted data. The key comes from a Lit program running in locked server hardware, so Lit, that hardware and the chain reader are what you trust. Opening charms is not switched on yet.

All questions

Every swap has a look.

48 buys from the sample wallet. One piece at a time.

site simulation

Buy the coin. Keep your secret.

Try a buy

Built and tested locally. Not deployed. No address.

Private by: AES-256-GCM · Lit Protocol V3 holder check · on-chain commitment