TestnetSELEN testnet is running: every transfer private, quantum receivers sealed with ML-KEM-768.Read the paper

Sealed now. Sealed after Q-day.

Scroll to explore
selen Sealed after Q-day ML-KEM-768 · FIPS 203

connecting to node

A ledger is a copy that never goes away. Every node keeps one, and so can anyone else.

Archive the transfers today, wait for a quantum computer that runs Shor's algorithm, and the elliptic-curve keys that hid receivers and amounts in older private coins stop hiding anything that was ever written down.

SELEN seals receivers and amounts with lattices from the very first block, so every archived copy stays a copy of nothing.

Send a private paymentprivate by default · sealed after Q-day
lifecycle of a payment

How a payment disappears into SELEN

01 · wallet

Encapsulate

The wallet runs ML-KEM-768 against the receiver's key and turns the shared secret into a one-time address.

02 · wallet

Commit and sign

The amount becomes a commitment with a 48-bit range proof, and the wallet signs inside a ring of sixteen.

03 · network

Seal and find

Miners fold it into a block. The receiver tries every new capsule, and exactly one of them opens.

Every node is a judge

Nobody signs a block, so there is no validator key to steal. Proof of work orders the chain, and every node re-checks every ring, range proof and key image on its own.

guessing········

Miner

Mine in the browser at /mine or with the command-line miner. Argon2id fills two mebibytes per try, so an ordinary CPU stays in the race, and every reward lands at your own private address.

network hashrate —
waiting for the node········

Full node

Node, explorer, wallet and miner are one open-source Node.js program. Clone it, run npm start, and you hold and verify the whole chain yourself.

blocks verified —
Start mining SELENeach lock is a real block from the running testnet

Seven locks on every transfer

Each field is sealed by its own piece of mathematics, and none of them needs a trusted setup. Drag the rail to look closer.

Straight from the running chain

Read from this node's API and refreshed the moment each block lands. Nothing here is typed in by hand.

connecting
—block height
—average block
—private outputs
—quantum outputs
seconds between blocks · target 30 s
transfers—
key images—
difficulty—
hashrate—
trusted setups0

What survives a copied ledger?

Three private designs, judged on the one question that matters once a chain has been archived: does what was recorded stay private after Q-day?

SELENselenq1 addresses
Zcashshielded pools
Monerodefault
Receivers + amounts after Q-day
Sealed
At risk*
At risk*
Privacy
Mandatory on every transfer
Optional shielded pools
Mandatory
Finding payments
ML-KEM-768, lattices
Elliptic-curve Diffie–Hellman
Elliptic-curve Diffie–Hellman
Spend proofs rely on
Ring of 16 today, hash-based at Perigee
Halo 2 over elliptic curves
Discrete log, ring of 16
Trusted setup
None
None for Orchard
None

* A quantum adversary who knows an address can derive its viewing key from the public key, then sweep an archived chain for every payment made to it.

From testnet to Perigee

Three phases are running today. The next two move spend proofs off elliptic curves and start a fresh main chain.

phase 1live
Private testnet

Ring signatures, one-time outputs, range proofs, ML-KEM quantum addresses, explorer, browser wallet and faucet.

phase 2now
$SELEN

The token launches on Robinhood Chain and funds the road to mainnet.

phase 3live
Open mining

Anyone mines from the browser or the CLI miner, with rewards paid to their own private address.

phase 4planned
Perigee

Hash-based spend proofs and full-chain anonymity, specified, tested and reviewed in public.

phase 5after review
Mainnet

A fresh genesis with Perigee active from the very first block.

Asked often. Answered plainly.

Is the testnet really private?

Yes. Every transfer on the running testnet uses a real ring of sixteen, real one-time keys and real commitments with range proofs, and payments to selenq1 addresses carry real ML-KEM-768 capsules. The explorer has no sender, receiver or amount to show you. Each transaction page has a button that re-runs the ring signatures, range proofs and balance check inside your own browser.

What exactly is quantum-proof?

The part that would leak backwards in time: who received what. Older private chains find receivers with elliptic-curve Diffie–Hellman, which Shor's algorithm breaks. SELEN quantum addresses carry an ML-KEM-768 public key, the lattice KEM NIST standardised as FIPS 203. A fresh secret is encapsulated for each payment and the 1,088-byte capsule travels with the output. Only the receiver can open it, quantum computer or not.

Why still use ring signatures?

They are fast, thoroughly studied, and no machine that breaks them exists today. If one appears, the most it can learn from a recorded ring is which of the sixteen members was really spent, not who received the money or how much. Receivers and amounts are what leak forever, so those are sealed first. Perigee replaces the ring with hash-based spend proofs.

Where are my keys?

Only in your browser. The wallet creates a 32-byte seed on your device, shows it as 24 words, encrypts it with your password and derives the spend key, view key and ML-KEM key from it. The node never sees any of them. Write the 24 words down: they are the only way back in.

How do I mine?

Open /mine, paste a SELEN address or use your wallet's, and press start. Your browser computes Argon2id proof of work in background threads, and every block you find pays its reward to that address as a private output. For more hashrate, run the command-line miner against this node or your own.

What is the difference between tSELEN and $SELEN?

tSELEN is the testnet coin from the faucet and from mining. It has no value and will not carry over. $SELEN is the Robinhood Chain token that funds development and carries the project to mainnet.

Can I run my own node?

Yes. Node, explorer and wallet are a single open-source Node.js program. Run npm install and npm start, and set PEER= to a public node to download and re-verify the entire chain yourself.

When is mainnet?

After Perigee is written up, tested and reviewed in public. Mainnet starts from a new genesis with Perigee switched on at block one.

start here

Send something that
tells the chain nothing.

Create a wallet in your browser, take tSELEN from the faucet and watch a payment cross the chain without leaving a name, a destination or a number behind.