# Private sends

> Fund wallets and venue accounts, and bring money back from them, with no on-chain link to where it came from or goes, through Husher, from the site, a workflow or a strategy.

On a public chain, every transfer links two addresses. When you fund ten wallets from one, anyone can see they're yours. ftw.trade sends privately through **Husher**: you pay Husher from one wallet, and Husher delivers from its own pool to another, after a delay you choose, so nothing on chain links the two.

## What you can do

| Move | From | To |
|---|---|---|
| **Fan out** | One wallet | Many wallets, each a set amount |
| **Send home** | Each of many wallets | Your main wallet, or one of your wallets |
| **Fund from the main wallet** | Your main wallet (approved with a signature) | Account wallets |
| **Top up a venue** | One wallet | A wallet's Hyperliquid, Lighter or Derive account, through a fresh hop |
| **Withdraw privately** | A venue account, or a wallet after trading | Your main wallet, or another of your wallets |
| **Bridge privately** | Any wallet | Send privately to a fresh wallet, then bridge from it |

The delay is 0 to 120 minutes. Each leg reads ordered, paid, landed or failed, and Husher's fee is shown before you pay.

## Private venue top-ups

From the project's perps view, **Top up → Privately** sends through Husher to the wallet that trades on the venue, then deposits what landed. The venue sees a deposit from a wallet Husher funded, with no link to the one that paid.

## Private withdrawals

The way back. From the project's perps view, **Withdraw privately** brings money home to your main wallet (or another of your wallets) through Husher, so nothing on chain links the wallet that traded to where the money lands:

1. **From Hyperliquid**: it withdraws from the account (Hyperliquid keeps $1 and pays out on Arbitrum in minutes), waits for it, bridges it to ETH on Robinhood Chain, then Husher delivers it after the delay you pick.
2. **From the wallet**: money the wallet already holds, after trading or after a Lighter or Derive withdrawal landed on Ethereum (they pay out hours later, once proven), is bridged and sent the same way.

**Review fees** shows every step and fee before anything moves: the venue's fee, what the bridge quotes to land, the most Husher's invoice can be, what you receive and what stays in the wallet. A wallet must hold the most Husher's invoice can be (the amount, a fee buffer and a little headroom) before it pays, so what Husher doesn't charge stays in the wallet on Robinhood Chain. If the wallet has no ETH for gas where the bridge leaves, a little of its own ETH on Robinhood Chain is bridged there first; with none there either, nothing starts.

It runs as the workflow `Private withdrawal: <Venue> (<wallet>)` (or `Private withdrawal: <wallet> on <chain>`), so its progress and history are under Workflows, and it can be run again with a new amount.

## In workflows and strategies

- A workflow's `husher` step fans out or sends home and waits until every leg lands, with a status (`done`, `partial`, `failed`) later steps can branch on. Retries never pay twice.
- A strategy's `husher.toPerp` and `husher.toWallet` move funds between its wallet and its perp account privately, on paper.

## Where it works

Husher runs on Robinhood Chain, Ethereum and Base for ETH today.

> [!NOTE] Privacy is about links, not secrecy
> Private sends break the on-chain link between payer and receiver. Each wallet's own trades are still public on its chain.