A proof-of-work chain that records every payment and reveals none of it. Not today, and not after quantum computers arrive.
Open walletEvery blockchain is an archive that never closes. Anyone can copy it, keep it, and read it again in ten years with better tools.
Lacuna is built for that reader. The archive is public and complete, and every entry in it is a gap: proof that a payment happened, with nothing about who, to whom, or how much.
Lacuna is a proof-of-work blockchain, running today as an open testnet. Like any chain, every node checks every payment and keeps it forever. What the record leaves out is the part that matters: who paid, who was paid, and how much. You can test all of it from this page, without taking our word for anything.
A new block about every 30 seconds. Height … as you read this.
Node, explorer, wallet and miner ship as one public program under BSD-3. Read it before you run it.
There is no transparent mode. Every transaction hides sender, receiver and amount, so no one leaks by accident.
Your seed is made in your browser and stays there. The node cannot see it, freeze it or spend it.
Each input signs inside a ring of 16: the real output and 15 decoys from the chain. An MLSAG signature proves one of them is yours, never which. A key image stops the same output being spent twice.
Every output lands on a one-time address derived for that payment alone. Payments to aeonq1 addresses ride with an ML-KEM-768 ciphertext only the receiver can open, with or without a quantum computer.
Amounts become Pedersen commitments with a 48-bit range proof, so no one can mint coins from a negative value. Inputs and outputs still balance, as points, and every node checks it.
Every blockchain is a permanent public copy, and a hard fork can never unpublish a ledger. Anyone can store every transaction and wait.
A quantum computer running Shor's algorithm breaks the elliptic-curve keys that hide receivers and amounts in older privacy coins, for everything ever recorded.
Lacuna seals receivers and amounts with lattices from the first block, so the copy they keep stays unreadable. A lacuna is the missing part of a manuscript; here, it never comes back.
From the sender's browser to a block no one signs, to a wallet that finds its own output.
The sender's wallet encapsulates a fresh secret to the receiver's ML-KEM key and derives a one-time address from it.
P = Hs(secret, i)·G + AThe amount becomes a Pedersen commitment with a 48-bit range proof, and the wallet signs inside a ring of 16.
C = x·G + v·H ring 16
Argon2id miners seal it in a block. The receiver's wallet tries its keys on each new output, and one opens.
pow argon2id 8 MiB · target 30 s
Every transaction in the explorer has a button that re-checks its ring signatures, range proofs and balance on your own machine.
No sign-up, no email, no download. Two minutes: make a wallet, get coins, send one private payment and check it yourself.
Open the wallet and press create. Write the seed down: it is the only way back into your wallet.
Open walletClaim 25 tLAC from the faucet once an hour, or mine blocks in your browser and earn the block reward.
Start miningSend a private payment, then find it in the explorer and re-check its proofs on your own machine.
Open explorerSupply is set by code that every node enforces, not by a team that can change its mind. These are the testnet rules for tLAC. $LACUNA token terms are published here, in full, at launch.
In plain sight: the public node also mines and runs a few demo wallets that send each other payments, so every ring of 16 has real outputs to hide among. Their blocks show as node in the explorer.
Three private designs and one question that matters once the ledger has been copied: does what was recorded stay private?
| Lacuna · aeonq1 | Zcash | Monero | |
|---|---|---|---|
| Receiver + amount after Q-day | Sealed | Exposed | Exposed |
| Privacy | Every transaction private | Optional shielded pools | Private by default |
| Payment detection | ML-KEM-768, lattices | Elliptic-curve Diffie-Hellman | Elliptic-curve Diffie-Hellman |
| Spends rely on | Ring of 16 today, hash-based at Meridian | Discrete log, Halo 2 | Discrete log, ring of 16 |
| Trusted setup | None | None for Orchard | None |
The reward shrinks with every block, by a rule no one can override. Whoever mines now is paid more for the same work than anyone after them.
tLAC per block. Never below the tail of 2 per block.
We would rather be checked than believed. Every claim on this page points to a place where you can test it, without asking anyone.
The node, wallet and miner are open source. Every line that handles your keys is public.
Every number on this page comes from a public API. Open it and compare.
The explorer re-checks ring signatures, range proofs and balance in your browser.
npm install, npm start, and you hold and verify the whole chain yourself.
No dates we cannot keep. Each step starts when the one before it is finished.
Ring signatures, stealth outputs, range proofs, ML-KEM quantum addresses, explorer, browser wallet, faucet.
The token launches on Robinhood Chain and carries the project to mainnet.
Anyone can mine in the browser or with the CLI miner, rewards paid to their own private address.
The node, its cryptography and the Meridian upgrade to hash-based spend proofs go under audit.
Genesis of the main chain with Meridian on from block 1, and the airdrop of early rewards.