Getting started

Three things have to be true before you can deposit a skin. Set all three up first — every common "it's broken" report is one of them being missing.

  ┌─────────────────────┐   ┌─────────────────────┐   ┌─────────────────────┐
  │ 1. STEAM ACCOUNT    │   │ 2. EVM WALLET       │   │ 3. TRADE URL        │
  │                     │   │                     │   │                     │
  │ • can trade         │   │ • on chain 4663     │   │ • saved in your     │
  │ • mobile auth,      │   │ • holds some ETH    │   │   LootFi profile    │
  │   well established  │   │   for gas           │   │ • from Steam's own  │
  │ • inventory PUBLIC  │   │ • linked by signing │   │   privacy settings  │
  └─────────────────────┘   └─────────────────────┘   └─────────────────────┘

1 · A Steam account that can trade

Your account must be able to send and receive trade offers, and it should not be in a state that triggers a long hold.

• Trading enabled. No trade ban, no trade probation. A recent password change, email change, or Steam Guard change temporarily suspends trading.
• Steam Mobile Authenticator active, and active for a while. A newly added or newly moved authenticator causes Steam to escrow trades for days. Nothing on LootFi's side shortens that — it is a property of your account, reported by Steam on the trade offer.
• Inventory privacy set to Public. Covered below, because it is the single most common cause of an apparently broken account.

Full detail: Account requirements and Escrow & holds.

Signing in with Steam

LootFi uses Steam OpenID — the same mechanism third-party sites have used for years. Clicking sign-in sends you to Steam's own login page on steamcommunity.com, you authenticate there, and Steam redirects you back with a signed assertion of your Steam ID, which we verify with Steam directly.

What we never receive

• Your Steam password. It is entered on Steam's page, not ours.
• Your Steam Guard / mobile authenticator secrets. Nothing on LootFi can approve trades on your behalf.
• Your Steam Web API key.

The only thing sign-in gives us is your public Steam ID, plus your public profile name and avatar for display.

Because none of the above is shared, we cannot accept a trade offer for you and we cannot move items out of your inventory. Every deposit requires you to accept a trade offer in Steam yourself.

Nobody from LootFi will ever ask for a password, an API key, or an authenticator code

If a site, message, or person asks for any of those — even one that looks like this one — it is not us. Check the domain before you type anything.

2 · An EVM wallet on Robinhood Chain

Any standard EVM wallet works. It needs to be connected to:

Network	Robinhood Chain
Chain ID	4663 (0x1237)
Currency	ETH (native gas token)
RPC	https://rpc.mainnet.chain.robinhood.com
Explorer	https://robinhoodchain.blockscout.com

Contract addresses live in one place only: Deployments.

Mainnet only. There is no testnet.

Everything you do here is real and irreversible. Gas on this chain is cheap, but "cheap" is not "reversible" — a token sent to the wrong address is gone, and a burn cannot be undone.

You need a small amount of ETH for gas. Not for depositing — the mint is paid for by the protocol and costs you nothing — but for buying, cancelling listings, granting the marketplace its one-time approval, and withdrawing. See Fees for exactly which actions cost what.

Linking your wallet

Linking proves you control the address, so your token is minted to a wallet you can actually use.

1. Connect your wallet.
2. LootFi issues a single-use challenge.
3. Your wallet shows a plain-text message containing the site domain, your address, the chain id, and that challenge. You sign it.
4. The signature is verified against the address you claimed. If they match, the wallet is linked to your Steam account.

What a message signature is, and is not

This is a signature, not a transaction:

• It costs no gas and sends nothing to the chain.
• It authorizes no transfer — no token approval, no ERC-20 allowance, no spending permission of any kind.
• It is single-use. The challenge is consumed once and expires shortly after it is issued.

Read the message before signing it, every time, on every site. A legitimate wallet-link message is human-readable and mentions the domain you are on.

You can relink a different wallet later, but tokens already minted stay in the wallet they were minted to. They are ordinary ERC-721s — transfer them yourself if you want them somewhere else.

3 · Your Steam trade URL

The trade URL is how a custody account sends you a trade offer — both the deposit request and the return offer after a withdrawal. Without one saved, both flows refuse to start.

Where to find it

In Steam: Inventory → Trade Offers → Who can send me Trade Offers? Your Trade URL is at the bottom of that page.

It looks exactly like this:

https://steamcommunity.com/tradeoffer/new/?partner=<digits>&token=<token>

Paste the whole thing, unmodified. It is validated against that exact shape, so a shortened, truncated, or hand-edited URL is rejected.

Regenerating your trade URL invalidates the saved one

Steam lets you generate a new trade URL, which permanently kills the old one. If you do that, come back and save the new one — otherwise deposit offers and withdrawal return offers will fail to send.

Inventory privacy must be Public

This is the number one cause of an empty inventory

Your CS2 inventory is read through Steam's public inventory endpoint. If your inventory is set to Friends Only or Private, that endpoint returns nothing, and LootFi sees an account with no items — not an error, just an empty list.

Fix it in Steam: Profile → Edit Profile → Privacy Settings → Inventory → Public.

"My profile is public" is not sufficient. Inventory is a separate setting on the same page, and it defaults independently of profile visibility.

Set it, then reload the LootFi inventory page. Note that inventory data is cached for a few minutes, so a change may take a moment to show up. See Troubleshooting if it stays empty.

Quick checklist

Before you deposit anything:

• [ ] Signed in with Steam, and the interface shows your persona name.
• [ ] Wallet connected and linked, on chain 4663, with some ETH.
• [ ] Trade URL saved, in the exact partner=…&token=… form.
• [ ] Steam inventory privacy set to Public.
• [ ] Steam Mobile Authenticator active, and not recently added or moved.
• [ ] You have read Risks & limitations.

Next

• Deposit a skin — the deposit flow.
• Track your deposit — what each status means while you wait.
• Troubleshooting — if something above did not work.