Official Moneta logoMONETAJoin Discord

PUBLIC TESTNETEXPERIMENTAL CURRENCY

One ledger.
Independently
verified.

A network is stronger when you can check it yourself. Meet Moneta: proof of work, local signing, and a complete history on every full node.

Official Moneta silver emblem

Your hardware. Shared rules.tMON is experimental. No guaranteed monetary value.

THE NETWORK / EXPLAINEDIllustration, not live data
WalletSigns locallyFull nodeChecks the rulesMiner / poolProposes a blockPeer nodeValidates againShared historyValid history

THE WALLET

You authorize the transfer.

Your wallet signs locally and sends a signed transaction to a full node. Your recovery phrase stays on your device.

Local signing does not protect a compromised device.

INTERACTIVE NETWORK LAB

Feel the network settle.

Drag a node, change the spring energy, and watch the illustrative topology settle under a small spring-damper model. This is a local visual explanation—not live chain data and not a consensus simulator.

LOCAL ONLY · NO TELEMETRY
SPRING MODEL READYDrag any node · use the controls

MOTION PARAMETERS

The animation stops when reduced motion is enabled or the tab is hidden. No wallet, peer or device information is read.

CONSENSUSMonetaMem proof of workTRANSACTION SIGNATURESML-DSA-65CGNAT TRANSPORTBuilt-in Tor In development

01 / THE PROTOCOL

VERIFICATION OVER ASSUMPTION

A copy of the chain.
A check on every block.

Nodes share history. They don't outsource the decision to trust it. Every receiving full node checks the rules before adopting a valid chain with greater cumulative work.

Follow a transaction ↑
01

Full nodes & pools

Store the entire blockchain and independently validate it. New nodes download from reachable peers—no manual blockchain files.

02

Wallets

Keep signing local. Encrypt wallet files with a password. Connect to a node without storing the full chain.

03

Miners & SDK clients

Request work or interact with node APIs. Pool miners connect to pools; solo miners connect to a full node.

Discovery finds addresses. It doesn't decide truth.

Every endpoint is an untrusted hint. A matching chain ID is only the beginning of validation.

02 / CONNECTIVITY

A node on your laptop.
Even behind CGNAT.

The Tor candidate gives your node an onion address. Other Tor-capable peers can reach it while your laptop makes outbound connections to Tor. No paid domain or router port forwarding is needed for that path.

IN DEVELOPMENT

Source-node synchronization passed a live two-node test. Final client packaging and installation verification are not complete.

CHOOSE A CONNECTION PATH

Your nodeTor networkPeer

Inbound service. Outbound circuits.

The node publishes a unique v3 onion service through its bundled Tor process. A peer uses Tor to connect and request blocks.

Separate networking app
Not required in the candidate
Public IPv4 address
Not required
Dependency
Tor network availability

03 / ECONOMICS

Bounded rules.
Not a guaranteed price.

CONTROLLER V2 · CANDIDATE

Moneta separates existing wallet balances from future issuance. The proposed controller adjusts limited reservoir releases and fee burning. It cannot create demand, promise purchasing power, or guarantee a market price.

What is the reservoir?

A locked protocol inventory funds block subsidies and, under qualifying conditions, an additional reward. The v2 candidate caps releases at the remaining inventory. Exhaustion would leave miners reliant on fees—a security trade-off still under review.

Where do observations come from?

The reference uses US CPI data. Market inputs must pass freshness, dispersion and claimed liquidity checks. A feed document with several venue names is not proof that those venues are independent or truthful. No authenticated liquid tMON market is established.

What happens when data is missing?

SAFE behavior disables stability bonuses. Existing balances do not rebase. Mining can continue under the applicable reward rules; an unavailable observer must not decide which history is valid.

Research findings and technical policy

Read the controller and observer research review. Priorities: authenticate independent observations, limit accumulated bonus releases, and evaluate the miner security budget. No monetary-policy parameters were changed in this GUI update.

The candidate uses 144-block epochs, a work-weighted median and a 67% total-work agreement threshold within 2.5% of the median. A smoothed symmetric price error, a 2% deadband and seven qualifying NORMAL epochs constrain bonus activation. These limits are testnet choices, not market-calibrated guarantees.

error = 2 × (market − reference) / (market + reference)

Historical policy remains available for replay. Consensus activation and the rollout still require final review.

EXPLORE THE PROPOSED RELEASE LIMIT

What can the controller do?

0.25×4.00×
SAFE SCENARIO0 tMON

Without qualifying market inputs, no stability bonus is permitted.

Illustration of the maximum bonus ceiling, not the actual payout or a price simulation. At most 0.01% of circulating supply per epoch, further limited by policy pressure and remaining reserve. Base subsidy is separate.

04 / DIFFERENCES & TRADE-OFFS

Different choices.
Benefits you can examine.

“Better” depends on the problem. Moneta is a young, unaudited testnet—not a substitute for Bitcoin’s operational history.

Moneta design compared with Bitcoin
AreaMonetaBenefit and cost
Transaction signaturesML-DSA-65, designed for post-quantum securityAddresses a different cryptographic threat from Bitcoin’s ECDSA/Schnorr signatures. Larger keys/signatures; implementation still needs independent review.
CGNAT hostingBundled Tor setup under developmentAims to reduce setup friction. Bitcoin also supports Tor; this is packaging convenience, not a unique networking invention. Tor adds latency and dependency.
Monetary policyReservoir and bounded observation-dependent policyCan adapt future incentives, but introduces oracle and controller risk. Bitcoin’s issuance schedule is simpler and does not depend on external price feeds.
MiningMonetaMem proof of workOffers general-purpose hardware implementations. Memory-oriented design alone does not prove ASIC resistance, fairness or profitability.
Full validationEvery node and pool stores and validates the complete chainIndependent verification is shared with Bitcoin’s full-node model. It requires disk space, bandwidth and careful resource limits.
MaturityPublic testnet; active developmentAn opportunity to inspect and improve the design. Bitcoin has a much longer operating history and a much larger established network.

Technical references: NIST ML-DSA specification · Bitcoin Core Tor documentation · Tor onion services

05 / DOWNLOADS

Choose your role.
Inspect the source.

PUBLIC TESTNET ONLY
Installer publication is pending.

The redesigned app sources and a tested Python SDK development package are available. Full desktop installers still need bundled Tor and installed-app verification.

THE COMPLETE VALIDATOR

Run a full node.

Store, validate and synchronize the entire blockchain. The development candidate includes a built-in Tor transport for CGNAT.

Application
Windows · Linux · macOS
Local blockchain
Complete copy
Download Network source ↓
Installer verification pending

Development source is available below.

PYTHON DEVELOPERS

SDK development package

Installable Python wheel, tested on Linux with Python 3.12. Requires Python 3.11+ and dependencies. This is not the desktop Explorer; no Tor executable is bundled.

Download Python SDK ↓Installation and limitations

Development source snapshot

All four redesigned desktop sources and the observer transport fix. 90 source tests passed. These are development sources, not installers; no wallet secrets or laptop chain data are included.

Download source ZIP View SHA-256 checksum
Verify a download before running it

Compare the downloaded file’s SHA-256 hash with the published checksum. A checksum detects a changed download; it is not an independent audit or a replacement for release signatures.

Windows: Get-FileHash .\Moneta-Development-Source.zip -Algorithm SHA256macOS: shasum -a 256 Moneta-Development-Source.zipLinux: sha256sum Moneta-Development-Source.zip

06 / SECURITY & PARTICIPATION

Test the assumptions.
Help find the failures.

Full validation rejects invalid history under the implemented rules. It does not make the software invulnerable. Bugs, compromised devices, malicious inputs and concentrated mining power remain real risks.

One operator or miner is not meaningful decentralization. A passing test suite is not a security audit. The broader security review is still in progress.

YOUR PRIVACY

This site sets no advertising or analytics cookies. We store your privacy choice locally. Optional local storage remembers your reading mode and motion preference.

You can change this choice anytime in the footer. Discord and other external websites have their own policies.