A post-quantum privacy coin with native smart contracts. Shielded notes, ECDH stealth delivery, hybrid PoW mining + PoS finality, and a validator-governed buyback/burn that phases out after 10 years into a permanent community treasury. Nobody can mint new supply — not even us. Fixed 100,000,000 AEG — the code is the constitution.
Privacy that outlives the quantum threat
Dilithium signatures, Kyber KEM, and Rescue-Prime STARKs — the primitives designed to survive quantum adversaries. Your keys are not exposed to a harvest-now-decrypt-later world.
Payments are Pedersen commitments in a Rescue-Merkle note tree. Amounts and recipients stay off-chain — delivered via ECDH stealth encryption the relay can never read.
Hybrid proof-of-work block production with proof-of-stake finality. The 2M allocation is time-locked for 10 years. The remaining 98M only enters circulation through mining.
A real account-based smart-contract layer — no EVM baggage. Programs, accounts, and instructions execute inside consensus, verified by the same node set that finalizes blocks.
10% of every block reward flows to a treasury; every 144 blocks a share is burned — with the burn rate decided by stake-weighted validator vote. After 10 years the burn phases out and the accumulated treasury stays as a permanent community treasury. Deflation governed by those securing the chain.
The Android wallet is native Rust — seed, BIP-39 phrase, and shielded proofs all stay on-device. The node is a relay only; it never holds your keys. Trust Wallet-style recovery, real address validation.
How AEG hides what others can't
The ledger tracks transparent miner rewards; every payment is a shielded note commitment. An observer sees a number in a tree — never who paid whom, or how much.
Each payment mints a fresh stealth address from the recipient's view key and a per-transaction random nonce. Reused ephemeral keys are impossible by construction — every tx is unlinkable.
The note (amount + secret material) travels as ciphertext through the relay, encrypted to the recipient's view public key. The relay is a mailbox — it can't decrypt, only store and forward.
Every spend carries a zk-STARK proof that value is conserved, the nullifier is derived from the spend key, and the note is a real tree member — verified by consensus, revealing nothing.
Fixed supply. Time-locked allocation. Emission only through mining.
Payments that cannot be denied
Every transaction gets a cryptographic receipt — proof the payment is included in a finalized block, attested by the validator set. Show it to anyone; it cannot be disputed.
The receiver can sign a Dilithium acknowledgment over the transaction — making "I never received it" impossible to claim.
A proof that a note belongs to an address — without revealing the amount or the recipient. Receipts you can verify, privacy you keep.
Live chain state — verified directly from the node
Mainnet is live and mining. Blocks, validators, transactions and attestations — verified directly from the node, on the explorer.
Three ways to take part — mine, stake, or run your own node
Download the node and run it — mining starts automatically (a block every 60 seconds, skipped while it catches up). 85% of every block goes to the miner who found it, after the DAO and validator shares. Proof-of-work: any computer can try; no permission, no pool required.
Lock 1,000 AEG in a stake transaction and your node joins the validator set. Validators attest every block over the gossip mesh; a 2/3+1 stake-weighted quorum finalizes the chain. Stakers earn the adaptive 3–5% share — paid what the network needs, decided on-chain.
A full node syncs the chain, relays transactions, and votes with its stake — no third party needed. Post-quantum P2P transport (Dilithium + Kyber) secures every connection; your keys never leave your machine.
Download — install — done. The installer creates your wallet and runs the node as a background service.
Ubuntu / Debian: download the .deb, then double-click it (or sudo apt install ./aegisd_1.0.0_amd64.deb) — the node installs and starts automatically.
macOS: download the Aegis app (.dmg), open it and double-click Aegis — it creates your wallet (24-word phrase), starts mining and opens your wallet in the browser. Nothing to configure.
Other Linux: download the installer script and run bash install.sh — it fetches the binary, creates your wallet, and starts the node.
Requirements — measured, not marketing
One command. Mining starts on its own once the node has synced — nothing to configure.
Blocks are produced by PoW mining every ~60s. Validators sign attestations on the blocks they see; once a block is 2 epochs (64 blocks) deep and holds a 2/3+1 stake-weighted quorum of attestations, it is final — immutable, attested by the validator set. That is the hybrid design: anyone can produce blocks, only staked validators finalize them.
Built step by step — verified at every stage