Private digital cash, no trusted setup

Sender, receiver and amount are hidden by default. One published address can be reused without becoming searchable. View keys disclose only what you choose. GPU-fair mining; masternode ChainLocks and InstantSend for finality.

Payment privacy

one-out-of-many proofs, 2¹⁵ coin windows

Trusted setup

none

Block time

150 s

Supply

21.4M then 1 / block tail

Reward split

50 / 30 / 10 / 10

Spend proof

~2.4 KB, verifies in ~65 ms batched

Try it in your browser

The playground runs the real consensus code compiled to WebAssembly: generate keys and diversified addresses, mint, send privately, watch a double spend get rejected, and mine a proof-of-work block. Nothing leaves your device.

Explorer

The explorer reads a zkPoW node over read-only RPC. Private transactions show only that they occurred, their size and their public fee. Private addresses are not searchable, by design.

The bridge moves ZKPOW to Robinhood Chain as wZKPOW, an ERC-20 backed 1:1 by coins in custody, and back. It is held shut by BRIDGE_ENABLED until its own audit is complete; the page shows its live status.

Status

Mainnet is live. Mine it from the pool, hold it in the browser wallet, follow it in the explorer. Unaudited: the independent cryptography reviews and the implementation audit were waived by the owner, so the private payment protocol has had no outside review (status).

How it works

Piece	What it does
Keys	Spend key → full view key → incoming view key. The incoming key sees payments in; the full key also sees spends out; only the spend key moves funds.
Addresses	Unlimited diversified `zk1…` addresses from one key, all paying one balance. A coin on chain carries only one-time values nobody can link back.
Spending	A membership proof over the last 32,768 coins, an authorisation proof bound to a linking tag, Bulletproofs range proofs and a balance proof. Same coin twice ⇒ same tag ⇒ rejected.
Exchanges	Transparent `Z…` addresses and exchange-only `EX…` addresses that never receive private spends or rewards. Credit rule: 1 confirmation and a ChainLock.
Mining	ProgPoW-class program that changes every block over a multi-gigabyte dataset; LWMA difficulty.