How Brimble works

Overview

Brimble lets you share one short link, like usebrimble.xyz/pay/brimble, instead of a long wallet address. Anyone can open it and pay you in ETH, USDG or $BRIMBLE on Robinhood Chain Testnet from their own wallet.

The difference from posting your address: each payment is sent to a new one-time address that only your keys can open. People paying you don't see your main wallet, and your payments aren't all sitting at one public address.

Pay links

1. Claim a name. You connect a wallet, sign a message and publish a public "receiving key" for your name. It uses the open standards ERC-6538 (a registry of receiving keys) and ERC-5564 (one-time addresses).
2. Someone pays. Their browser uses your receiving key to work out a brand-new address just for this payment, sends the funds there and posts a small public note so you can find it.
3. You collect. Your dashboard scans those notes with your private viewing key, finds the payments that belong to you and lets you move them to any wallet.

Names of 5 to 20 characters are free for anyone: lowercase letters, numbers and dashes, no dash at the start or end and no double dash. Names of 3 or 4 characters are holder names. A few names (like app or docs) are reserved. One name per wallet, first come first served. You can release your name or change its keys later; a released name rests for 14 days before someone else can claim it.

Your keys

When you press Unlock keys your wallet signs a fixed message. Your browser turns that signature into two private keys: a viewing key (finds your payments) and a spending key (moves them). The same wallet always gives the same keys, so nothing needs to be backed up beyond your wallet. The keys stay in the open tab only and are gone when you reload.

Only sign that message on usebrimble.xyz. A site that gets the signature can find and move payments sent to your link. Signing is free and doesn't approve anything else.

Withdrawing

Each payment sits at its own one-time address. Withdrawing signs a transfer from that address in your browser. ETH payments pay their own network fee. If an address holds only tokens and no ETH, it withdraws through the gasless relayer, which pays the gas and takes a small fee from the tokens. Tip: withdraw to a fresh address rather than your main wallet if you want to keep them unlinked.

Gasless withdrawals (relayer)

A one-time address that only holds tokens has no ETH to pay gas, and sending it ETH from your main wallet would link the two. The relayer solves that: it pays the gas and takes its fee from the tokens being withdrawn.

1. Your browser signs an order with that address's one-time key: which token, how much, the fee, the destination, the relayer and a deadline. Nothing is signed with your main wallet.
2. Your browser checks the fee against the published rates below and refuses to sign if the relayer asks for more.
3. The relayer submits it. Tokens with an EIP-2612 permit (like USDG) move in one transaction. For tokens without permit (like $BRIMBLE), the one-time address also signs an approval; the relayer sends that address exactly the gas for the approval, then withdraws. A tiny amount of ETH dust (a fraction of a cent) can stay behind.
4. The Sweeper contract only moves the signed amount to the signed destination and pays the signed fee to the relayer that submitted it. It caps the fee at 1% on-chain, has no owner and never holds funds.

Because the holder rate earns the relayer half as much, its minimum is twice as high. If a holder's amount is between the two minimums, the standard rate is used instead of refusing, and the withdraw form says so. Below the standard minimum a gasless withdrawal isn't possible; you can still withdraw yourself after adding a little ETH to that address.

Why only the destination? The destination of a withdrawal is public on-chain anyway, so checking its balance reveals nothing new. Brimble never asks you to sign with a holder wallet, because that would tell the relayer which wallet is behind the withdrawal.

When the relayer isn't used: ETH payments pay their own gas with no relayer fee, and a token payment that came with a little ETH for gas withdraws itself for free.

What the relayer can see: your IP address, the one-time address and the destination. Each one-time address is withdrawn in its own transaction, but sending several of them to the same destination links them, and the fee rate (standard or holder) is visible on-chain.

Relayer: checking… · status checking…. On testnet it runs as a test service and can be offline.

Sending

On the Send page you can enter a Brimble name, a full pay link or a normal 0x address, pick ETH or USDG and an amount. Names and links are looked up to find the receiver's key. A plain address that has published keys to the ERC-6538 registry also gets a one-time address; any other address gets a normal, public transfer and the page tells you so first. For token payments you can add 0.00003 ETH so the receiver can withdraw without the relayer fee (off by default). Your wallet always shows the final transaction and fee before you confirm.

Gift links

You fund a link with a set amount and send it to someone. Whoever opens it first can claim it to their own wallet, so treat a gift link like cash. Unclaimed gifts can be taken back after they expire.

Bulk payouts

Upload a CSV with one payment per row. Columns:

recipient,amount,token
brimble,0.05,ETH
usebrimble.xyz/pay/bob,25,USDG
0x1234567890abcdef1234567890abcdef12345678,0.1,ETH

token is optional and defaults to ETH. A header row is optional. Up to 200 rows. The file is read only in your browser; it is never uploaded.

Pool

The Pool is a separate, optional feature for breaking the link between where money came from and where it goes next. It is planned after pay links and needs its own audited contracts.

1. Deposit a fixed amount of ETH or USDG. You get a secret note, saved in your browser and as a backup you keep.
2. Review. Each deposit is screened against public sanctions and theft lists. Approved deposits join the pool; declined ones never do and can only go back to the address they came from.
3. Withdraw later to any address by proving you own a note, without saying which deposit it was. A relayer can submit it and take its fee from the amount, so the new address doesn't need gas.

The pool only works well when many people use it, and it doesn't hide amounts or timing. Losing the note means losing the funds.

Pay button for sites

A small snippet will let you add a "Pay with Brimble" button to a website or store that opens your pay page. It's planned after pay links and gift links.

What it hides and what it doesn't

Brimble makes your payments harder to link together. It does not make you anonymous. Please read these limits:

• Amounts and times are public. Anyone can see that some amount arrived at some address at some time.
• The payer's wallet is visible. The sender pays from their own wallet as usual.
• Moving funds can re-link them. If you send several one-time addresses into the same main wallet, or move them at the same time, someone watching can connect them.
• Gas can give you away. Funding a one-time address with ETH from your main wallet links the two. Use the gasless relayer instead.
• Your name is public. Your pay name and receiving key are published so others can pay you.
• Infrastructure sees metadata. Wallets, RPC providers and this website can see things like your IP address and which addresses you look up.
• Pay links don't mix funds. Only the optional Pool does, and it screens deposits. Brimble must not be used to hide stolen money or avoid sanctions; abuse may be blocked.

Safety

• Non-custodial by design. Funds go to addresses only you control. Brimble never holds your keys or your money.
• Not audited yet. The contracts are small and open source but haven't had an outside audit. Treat this as beta and start small.
• No admin keys over funds. The payment router and the Sweeper hold nothing and have no owner. The names contract has an owner only for reserved names and the holder-name rules (token, thresholds within limits, grace up to 30 days, cooldown up to 90 days); it can't move money or take a claimed name.
• The relayer is trusted for uptime, not for funds. It can refuse or delay a withdrawal, but it can't change the destination, the amount or the fee you signed.
• Protect your key signature. Both keys come from one signature, so treat the "Unlock keys" message like a password and only sign it on usebrimble.xyz.
• Check the URL. Only use usebrimble.xyz. We will never DM you asking for a seed phrase.

Network details

Source: docs.robinhood.com. The public RPC is rate-limited.

$BRIMBLE holder perks

Every check reads a balance of an address that is already public for that action: the name owner, the withdrawal destination or the token creator. Brimble never asks you to sign with a holder wallet to prove anything.

Holder names

• Claiming. The wallet claiming a 3 or 4 character name must hold the amount above when it claims. The amount needed is saved with the name, so raising the thresholds later doesn't affect names already claimed (lowering them does help).
• The badge. Payers' pay pages read the owner's balance on-chain and show Holder name. If the balance is short it shows Below threshold.
• If your balance drops. Anyone can flag the name. From then you have 3 days to top up; once you hold enough again, anyone (including you, from the Receive page) can clear the flag. Payments still reach you during this time.
• Release. If the balance is still short after the 3 days grace period, anyone can release the name. Flagging, clearing and releasing are open to everyone on-chain; the relayer also runs a small keeper that does them automatically.
• Cooldown. Every released name, whether you gave it up or it lapsed, rests for 14 days before someone else can claim it, so a saved pay link can't be taken over straight away. Its previous owner can take it back during the cooldown (holding enough again).

Launch on Pons

The Launch page will let you create a token on Pons from Brimble. You always send the launch from your own wallet and pay the network gas yourself; Brimble does not sponsor gas. What you pay:

• Brimble fee: none if the launching wallet holds $BRIMBLE worth at least $30 at the current price. Otherwise $1.50, paid in ETH (converted at the current ETH price) to the Brimble treasury. Treasury address: not set yet.
• Pons launch fee: 0.0005 ETH on every launch, according to Pons's docs. It goes to Pons, not Brimble, and holding $BRIMBLE doesn't waive it.
• Network gas: paid by you.

USD values use live prices: ETH from DefiLlama and $BRIMBLE from its Pons pool, both configurable. On testnet the prices are fixed test values (1 ETH = $3,000 and 1 tBRIMBLE = $0.00003), labelled "Test prices" on the page, because test tokens have no market. Prices move, so whether a wallet qualifies can change between checking and launching. Only the launching wallet's balance is read; it is public anyway as the token's creator. Launch costs set by Pons itself, such as its early-buy tax, still apply.

Status: mainnet only, coming soon. Pons runs on Robinhood Chain Testnet mainnet only and has no testnet. The page is a preview that shows what you would pay; it doesn't send anything.

$BRIMBLE

$BRIMBLE is planned to launch on Pons as the utility token for Brimble, with the perks above. Until then the testnet uses tBRIMBLE. It is not an investment and nothing here is financial advice. Only trust a contract address posted on usebrimble.xyz.

Official contract address

Watch out for copies. Anyone can create a token called $BRIMBLE with the same name, logo and ticker; tickers aren't unique on Pons. There is only one official $BRIMBLE contract, and it is the one shown here, on the home page and in the footer of every page. Always check the full address before you buy, and never trust an address sent to you in a DM. Brimble will never ask you to send funds to receive tokens.

FAQ

Glossary

Pay name

Your short name, used in usebrimble.xyz/pay/name.

One-time address

A fresh address made for a single payment that only your keys can open (a "stealth address" in ERC-5564).

Receiving key

A public key published for your name so payers can make one-time addresses for you.

Viewing key

Lets you find your payments. Keep it private.

Spending key

Lets you move funds out of your one-time addresses. Never share it.

Relayer

A service that pays gas for your withdrawal and takes a small fee from the tokens.

Holder name

A 3 or 4 character pay name that needs $BRIMBLE in the owner's wallet.

Grace period

The 3 days a holder name's owner has to top up after their balance is flagged as too low.

Cooldown

The 14 days a released name rests before someone new can claim it.