01
Commitment
Bound when the package is createdcm = Poseidon2(n)
Appended to the commitment tree
Reveals nothing
SIWORLD
Who · How much · When — built so nobody knows.
Status: research prototype. A single-node devnet with mock proofs and low-difficulty proof of work. Not for real funds.
02 / Privacy
The goal:
who, how much and when are all hidden
Who
How much
When
Bitcoin / Ethereum
Public
Public
Public
Zcash / Monero
Hidden
Hidden
Public
siworld
Hidden
Hidden
Hidden
On siworld, no on-chain signal changes with activity from block to block.
Not there yet: nodes that relay a transaction see its fee tier (a leak the design accepts), the miner knows which of its own slots are filler, and Dandelion++, which hides where a payment is sent from, is not built.
03 / Container
Every block
is a full container.
- Every block carries N = 32 identical-looking packages; one short and it is invalid
- Every slot is fixed 2-in / 2-out with fixed-length fields
- Real payments, wallet self-sends and miner dummies are indistinguishable on chain
- Sealed in strict ascending BLAKE3 slot-hash order
- Fees and the miner's reward are summed inside the proof and paid as one package encrypted to the miner — never published per block
Loading packages2-in / 2-out · fixed length
04 / Packages
Every transaction
happens inside one package.
Nobody knows which one.
02
Nullifier
Revealed only when spent
Unique to each package
Unlinkable to its commitment
03
Ciphertext
Encrypted to the recipient
with post-quantum ML-KEM
plus a 1-byte view tag
- Value exists only as encrypted packages
- Every package is the same size on chain
- Every non-zero package holds at least 0.0001 SIP
05 / Time
Hide time, and prove it.
Sequential BLAKE3 proof of work builds a block-height clock that cannot be turned back
Seal anything as a commitment now, reveal it later to prove it was fixed before block H
Time capsule: claimable only after time T
06 / Tech
Tech stack
- Proof system
- Hash-based STARK, no SNARK wrapper at the final layer
- Hashing
- In-circuit: Poseidon2 · Out-of-circuit: BLAKE3
- Encryption & signatures
- Post-quantum ML-KEM for encryption · ML-DSA for pre-confirmation signatures
- Consensus
- Sequential BLAKE3 PoW, 5-minute (300 s) blocks
- Payments
- Under 10 s (payment channels + fast pre-confirmation + containers)
- Implementation
- Rust · libp2p · redb; any device can take part
07 / Economics
Fair launch
33.945
SIP per block at launch
About 15% less each year,
stepped every 4,032 blocks
1
SIP per block, permanent tail emission from about year 21.6
0
No premine
Issuance starts at block 1
87 · 10 · 3
Block subsidy: 87% miners,
10% development fund,
3% Holder pool
Voyager
Paid now
75% of the miner reward after 24 blocks. 20% funds the Holder pool and 5% is burned.
Holder
Paid over two years
60% after 24 blocks plus a share of the Holder pool. The other 40% unlocks in four steps at about 6, 12, 18 and 24 months, enforced by the proof.
08 / Roadmap
Driven by gates, not dates.
01
GateCircuit audit passed
02
GateFirst issuer onboarded
03
SIP privacy chain
- Private transfers
- Memos and view keys
- Containers and empty packages
- Dandelion++
- Fair launch
Asset packages
- Asset issuance
- Atomic multi-asset transfers
- Conditional payments and red envelopes
- Commit now, reveal later
Time capsules & swaps
- Sealed-bid auctions
- Atomic package swaps
- Private payment channels
- Post-quantum signature upgrade
09 / Open source
Open source
Code and brand, built in the open.
- Code: GPL-3.0-only
- Brand assets: CC0, free to use forever
- One rule: never imply official endorsement
SIWORLD
Privacy first · Decentralized · Trustless