Aeon is a proof-of-work Layer 1 where every transaction hides its sender, its receiver and its amount, and where what was recorded stays sealed after Q-day.
There is no transparent mode. Each input signs inside a ring of 16, each output lands on a one-time address, each amount is a commitment, and payments to aeonq1 addresses ride with an ML-KEM-768 ciphertext only the receiver can open.
Every blockchain is a permanent public copy, and a hard fork can never unpublish a ledger.
Anyone can store every transaction today and wait for a quantum computer that runs Shor's algorithm. On that day the elliptic-curve keys that hide receivers and amounts in older privacy coins stop hiding anything that was ever recorded.
Aeon seals receivers and amounts with lattices from the first block, so the copy they keep stays unreadable.
The sender's wallet encapsulates a fresh secret to the receiver's ML-KEM key and derives a one-time address from it.
The amount becomes a Pedersen commitment with a 48-bit range proof, and the wallet signs inside a ring of 16.
Argon2id miners seal it in a block. The receiver's wallet tries its keys on each new output, and one opens.
Nobody signs a block, so there is no validator key to forge. Proof of work orders the chain and every node re-checks every ring, range proof and key image.
Mine in the browser at /mine or with the command-line miner. Argon2id is memory-hard, so ordinary CPUs stay competitive, and rewards go to your own private address.
One open-source Node.js program is the node, the explorer and the wallet. Clone it, run npm start, and you hold and verify the whole chain yourself.
These numbers come from the running testnet and refresh as blocks arrive.
Blocks sealed by Argon2id proof of work, about one per … seconds.
One-time addresses on chain. No two can be linked to the same wallet.
Outputs carrying a 1,088-byte ML-KEM-768 ciphertext.
No ceremony and no secret anyone had to destroy. Every proof checks against public math.
Three private designs and one question that matters once the ledger has been copied: does what was recorded stay private?
Private testnetRing signatures, stealth outputs, range proofs, ML-KEM quantum addresses, explorer, browser wallet, faucet.
$AEONThe token launches on Solana and carries the project to mainnet.
Open miningAnyone can mine in the browser or with the CLI miner, rewards paid to their own private address.
FaradayHash-based spend proofs and full-chain anonymity, specified, tested and reviewed in the open.
MainnetGenesis of the main chain with Faraday on from block 1.
Yes. Every transaction on the live testnet uses a real ring of 16, real one-time addresses, real Pedersen commitments with range proofs and, for aeonq1 addresses, real ML-KEM-768. Open the explorer: there are no senders, receivers or amounts to read. Every transaction has a verify-in-your-browser button that re-checks its ring signatures, range proofs and balance on your own machine, and the code is open source with a test suite that runs on every change.
The part of a privacy coin that leaks backwards in time is payment detection: who received what. On older chains that rests on elliptic-curve Diffie-Hellman, which Shor's algorithm breaks, so a recorded ledger can be opened later. Aeon quantum addresses carry an ML-KEM-768 public key, the lattice scheme standardised by NIST as FIPS 203. The sender encapsulates a fresh secret per payment and the 1,088-byte ciphertext rides with the output. Only the receiver can decapsulate it, with or without a quantum computer.
They are fast and well studied today. A quantum computer that could break them does not exist yet, and breaking a ring only narrows which of 16 outputs was spent. Recorded receivers and amounts are what leak permanently, so Aeon seals those with ML-KEM first. The Faraday upgrade replaces the ring with hash-based spend proofs that hide each spend in the whole chain.
In your browser. The wallet creates a 32-byte seed on your device and derives the spend key, view key and ML-KEM key from it. The node never sees them. Back up the seed: it is the only way to restore the wallet.
Open /mine, paste an Aeon address and press start. Your browser runs Argon2id proof of work and block rewards are paid to that address as private outputs. For more hashrate, run the command-line miner from the repository against the public node or your own.
tAEON is the testnet coin you get from the faucet and from mining. $AEON is the Solana token that funds the work and carries the project to mainnet.
Yes. The node, explorer and wallet are one open-source Node.js program. Clone the repository, run npm install and npm start, and you have the full chain on your machine.
After Faraday is specified, tested and reviewed in the open. Mainnet genesis ships with Faraday active from block 1.