Sovereign (XUS) — Encrypted Reserve Cash
A live, post-quantum, proof-of-work Layer-1 blockchain. Ticker XUS.
Mainnet since — genesis
cb0272ff88e64c18cde0257f7fae1c8236b02651f10cc7a02456fd682ee2e72d.
What it is
- Bitcoin's discipline: a 21,000,000 hard cap, fair launch, no pre-mine — genesis supply was zero and every coin has been mined.
- Monero-style ASIC resistance: RandomX CPU mining, 2.5-minute blocks, 12.5 XUS reward halving every 840,000 blocks.
- Zcash-grade privacy: a Halo2 shielded pool with no trusted setup.
- Post-quantum: hybrid Ed25519+ML-DSA-65 signatures and X25519+ML-KEM-768 transport, fail-closed. (The shielded pool itself is not PQ — disclosed honestly.)
- Trustless exit and entry: HTLC atomic swaps from ZEC and BTC at swap.sovxus.com — no bridge, no custodian.
A shielded pool with no Shor-breakable assumption
Activating at block 15,552 (miner-signaled, BIP-9 bit 2): notes encrypted with ML-KEM-768, spends proven by hash-based STARKs (Rescue-Prime + BLAKE3), spend authorization by ML-DSA-65. Elliptic-curve shielded pools hide notes behind a Diffie-Hellman key agreement on a curve and rest their spend proofs on the discrete-logarithm problem, which Shor's algorithm solves; a hash-based STARK plus ML-KEM construction has no such assumption in the privacy path. Note values are private; the number of real inputs and outputs in a bundle is not. An external audit of the circuit and its parameters is still outstanding, and no quantified post-quantum security level is claimed until that analysis is published. The existing Orchard/Halo2 shielded pool remains curve-based and is not post-quantum.
Use it
- Block explorer — live supply, blocks, and JSON-RPC for independent verification.
- Swap desk — buy XUS with ZEC or BTC, atomically.
- The American Faucet — free XUS, USA only.
- Source code and SOV Station downloads (Windows, macOS, Linux).
- Whitepaper · The Gauntlet challenge · Privacy
Mainnet seed nodes
- San Francisco:
137.184.83.91:9645 - Frankfurt:
164.92.141.24:9645 - Singapore:
143.198.219.31:9645
Machine-readable briefs: /llms.txt and /llms-full.txt.