Protocol notes

Network identity

Magic

56444631

Address HRP

tvdefi

P2P / RPC

18880 / 18881

Ticker

VDefi

PoW

RandomX

Block time

30s

DIFFICULTY_TARGET

30

LWMA window

60 (lag 0)

Genesis hash

ed9d20d46d8071b3d029715b3afe9aa7b9f793ab328ffe0fa3cae54ab55fa2ea

Monetary policy

Max supply

888,000,000,000,000 VDefi

Decimals

4 (uint64-safe)

Genesis 25%

222,000,000,000,000

Mining 75%

666,000,000,000,000

Year 1

geometric 800y (r=0.9987820739)

DEX genesis

5T VDefi from the 25% (not mined)

Split

90% miner / 10% protocol

Burn

1% of private sends (RingCT)

VDefi/vDAI fee

3.5% protocol, plus a separate 1% DEX fee (0.5% LP / 0.5% developer)

Sell split

1% burn / 1.5% liquidity / 1% treasury

Buy split

1.5% liquidity + 2% treasury, in vDAI, no burn

Liquidity

Manager from genesis, deploys every 3 days

Tail emission

none

Faucet mint

none

Implemented now

• Live genesis from the published spend/view public keys
• Ed25519 stealth addresses, view tags, MLSAG mixed-amount rings, key images
• Pedersen commitments, 64-bit range proofs, hidden 1% burns
• Shuffled rings, Dandelion stems, three replica validators
• Payment proofs and view-only Ghost Ledger
• Replay protection, 90/10 coinbase split, 30s blocks
• LWMA-3 difficulty from height 64 (60-block lookback, 6T clamp)
• Software checkpoints (1 hardcoded, genesis locked)
• Full node validates on its own. Mining is optional and can be paused. Seed peers, including Cherry, only help discovery — they are not consensus authorities.
• Launched tokens pay a 3.5% trading fee on each buy, sell, and swap. 0.50% of that trade is burned, so the token supply falls. 1.50% is held by the liquidity module, 0.75% by the treasury, 0.50% by the mining module, and 0.25% by operations. Consensus settles this inside the block. It is not VDefi gas, not the 1% VDefi burn, and not the 1% DEX pool fee. Adding or removing liquidity is not taxed again.
• Mining security reads difficulty and headers only. It raises confirmation depth and alerts. It does not halt the chain or change the 888T supply. Seed host details sit behind the website admin terminal, not in a block.
• V0.7 hardening: inbound bounds, peer blacklist, Sybil/flood isolation
• Ghost Ledger add-network: GET /ghost-ledger.json — production theghostledger.app
• V0.8 sovereignty: SYSTEM_PATCH can only change VM gas/limits. It cannot spend, freeze, or read stealth notes, vaults, or contract storage. Transfers are checked with this chain's MLSAG and 64-bit range proofs. That is not Monero RingCT and not Bulletproofs.
• V0.9 packed asset metadata, 512KB sealed blobs, launch PoW tickets + fee surge after height 256. View keys stay in the wallet — RPCs return ciphertext only.
• V1.0 gas-metered WASM MVP on public contracts. Private WASM is an owner-sealed vault (kind=contract, mime application/wasm). Consensus verifies ciphertext integrity and never decrypts. Launch tickets scale with unconfirmed mempool density, not just the last 10 blocks.
• V1.1 Pump.fun curves: each launch mints 888 trillion memecoins into the protocol treasury (not extra VDefi). ZK-Shield hides the asset id in the mempool: the salt stays in a private open-map and is restored only when this node seals the block. RPC and P2P see launchId "hidden". Ghost Ledger RPCs: rpcBondingCurves, rpcBlockTrades, rpcAssetMetadata. Logos are CIDs, packed as vdfm1, never image bytes. Graduation burns LP.
• V1.2 nested EVM: CALL, CREATE, and CREATE2 run on-chain with a depth cap of 4. A call may attach VDefi (stealth input → public contract purse). CALLCODE, DELEGATECALL, and SELFDESTRUCT stay consensus-blocked.
• V1.3 local fee markets: resource-weighted atomic fees. Launch congestion does not raise private transfer fees. Live quotes at GET /fees. rpcSimulate dry-runs a tx without committing. Protocol-change ledger is on this page.
• V1.4 cheaper idle sends (0.0001 VDefi) with launch still floored at 0.001 VDefi. Miner packs up to 127 txs without cloning state on the happy path. Tx-hash and commitment point caches. Not a claim vs other chains.
• V1.5 light client: Ghost Ledger can follow headers, scan from a height (new notes + spend-log key images only), and verify a merkle inclusion proof. View keys never leave the device. Full rpcScan remains for existing wallets.
• V1.6 internal security harden: extra coinbase rejected, program spends must conserve Pedersen amounts, contract value is funded from stealth, 90/10 coinbase from block 1, public RPC cannot redirect this node’s miner. This is not an independent audit.
• Stealth token notes on launch + DEX (no public standing balances)
• Public EVM-subset and WASM contracts (deploy + call + storage)
• Owner-sealed files, data, and private contracts
• V1.10 registry: large files stay off-chain. The block stores a CIDv1 of the ciphertext, the plaintext commitment, and a stealth-wrapped document key. There is no master key. A previous owner loses protocol access only after a two-step transfer is accepted. Recording a deed here is not a legal title transfer.
• V1.10 DEX feed: rpcDexContract and rpcDexEvents. Private transfers are not indexed. Events are notifications. Tokenomics are unchanged. This is not a DEXTools listing.
• V1.11 curve lock: buys and sells use checked uint64 multiply-divide and always round down, so dust trades cannot drain the treasury. minOut is the user’s max slippage and is enforced when the block opens the shield. If virtual reserves stop matching collateral, that curve enters safe-mode by itself. A core node (VDEFI_NODE_ROLE=core) only accepts its seed sentries. A sentry does not mine. PoW tickets and the density fee surge were already live and were not replaced.
• V1.11.1 internal review: a nested contract call that fails puts every purse it touched back, including a grandchild. Private transfers sign the output purpose, so labeling a payment as change does not skip the 1% burn. This pass is not an independent audit and does not freeze mainnet.
• V1.12 council: five wallets, three signatures. The admin page is hidden unless the request comes from the owner's pinned device. Testnet stays open for changes. When mainnet launches, the portal locks except for the first 24 hours UTC of each month. No admin can spend, mint, or open notes.

Open for later forks

• v1 genesis — VisionaryX, stealth, LSAG, 200-year emission
• v2 contracts — EVM-subset public contracts + owner-sealed vaults
• v3 ringct — Pedersen amounts, mixed rings, hidden burns, stealth token notes
• v4 randomx-shield — RandomX VRX-L1 PoW + shielded AMM (hidden size, sandwich break)
• v5 p2p-mesh — Internet P2P gossip — handshake, inv, getdata; consensus unchanged
• v6 lwma-checkpoints — LWMA-3 from height 64, software checkpoints, forced 90/10 coinbase
• v7 hardening — Inbound bounds checks, peer blacklist, Sybil/flood isolation, Ghost Ledger spec
• v8 sovereignty — SYSTEM_PATCH sandboxed to stateless VM params; cannot touch ledger or RingCT
• v9 zk-shield — Packed asset metadata, 512KB sealed blobs, launch PoW tickets + fee surge
• v10 wasm-shield — Gas-metered WASM VM, ciphertext integrity, mempool-density tickets, viewing-key RPCs stay local
• v11 curve-888 — 888T memecoin treasury per launch, ZK-Shield stem, public curve trade index, burned LP on graduate
• v12 nested-evm — Nested CALL/CREATE/CREATE2, contract purses, CALLVALUE. DELEGATECALL/SELFDESTRUCT stay banned
• v13 local-fees — Resource-weighted fees, local markets, live fee/latency bench. Launch surge does not raise private sends
• v14 fast-pack — Idle transfer 0.0001 VDefi, launch surge unit 0.001, optimistic block pack, point/tx hash caches
• v15 light-client — Incremental scan from height, header follow, merkle inclusion proofs. View keys stay in the wallet
• v16 audit-harden — No mempool coinbase, Pedersen spend conservation, 90/10 from block 1, miner RPC lock. Not an independent audit
• v17 circuit-breaker — Emergency halt / resume (quorum flags only). Invariant safe-mode. Tickets+surge unchanged
• v18 tokenomics-26-74-800 — 26% genesis / 74% mine, 800-year geometric, 5T DEX from genesis, no genesis burn
• v19 protocol-fee-lm — Genesis Liquidity Manager. 3.5% VDefi/vDAI protocol fee. Private-send burn stays 1%
• v20 registry-dex-feed — CID asset registry (file stays off-chain) and versioned DEX event feed. Tokenomics unchanged
• v21 curve-lock — uint64 checked curve math, floor favors the pool, lockstep invariant auto safe-mode, sentry/core placement
• v22 audit-fixes — Nested purse calls revert on failure. Private-send burn purpose is signed from height 1
• v23 council-3of5 — 3-of-5 upgrades only during the first 24 hours UTC of each month. Cannot spend or mint
• v24 randomx-1.2.1 — Production PoW is upstream RandomX 1.2.1. VRX-L1 is not accepted. Testnet blocks from VRX-L1 must be reset. Mainnet stays off
• Nested EVM CALL/CREATE: on
• Bulletproofs+ (smaller range proofs): reserved
• RandomX 1.2.1: on (light verification, same hash as the full dataset). VRX-L1 is not accepted
• Internet P2P mesh: on — POST /p2p, magic 56444631
• Shielded AMM (hidden size + sandwich break): on
• Grok Sentinel (reports only): on — the protocol, not Grok, rejects malicious deploys
• Independent cryptographic audit — not claimed