Your face is yours to unlock.
Chutes and Phala TEE. Coming soon.
Your NFT keeps a secret.
CIPHR seals your visor inside a Phala dstack confidential machine, and only your wallet signature can ask it to open. Chutes on Bittensor subnet 64 runs the private generation. Neither service is live yet.
Buy $CIPHR and you get a piece. The privacy is what the visor hides.
Local demo. Buying and minting are not live.
Graphite is the machine. Lime is your coin and your key.
Tap a piece behind the head to see what you could unlock.
A visor resolves.
CIPHR licence
One box to seal a message or file.
Hold a CIPHR to encrypt. Each opening checks current ownership and the chosen recipient.
Encryption is coming. Verified deployment is pending.
Why this is private
- Step 1
Sealed inside a Phala CVM
- Step 2
Your wallet signature asks it to open
- Step 3
Reveal only if you choose
Every coin gives you a coin.
This one hides its face.
One buy, one piece.
Press a button below and watch it happen.
You buy
The visor resolves
You hold the piece
Buy $CIPHR wherever you already trade. A piece lands in your wallet moments later.
Just trying it? Press a key.
Try a buy
Pick an amount. The terminal walks through what a real buy would do, then shows the piece you would get.
Demo values in $CIPHR. Keys 1 to 4 work too.
Demo minimum: 500K $CIPHR. The 250K buy gets no piece.
0 buys, 0 pieces
Your piece shows up here.
This exact mix: 1 in 0
How is my piece decided?
Four facts about a buy decide the piece: which pool, which wallet, which buy it is, and how much. They are hashed into a seed; the seed picks the five traits.
The seed for this buy
This is a demo. Buying and minting are not live.
Read before you buy
What is public, what stays private.
The contract records ownership, commitments, ciphertext and quote hashes.
Public
Holder addresses, transfers, ciphertext, commitments and permanent reveal are on chain. A quote hash is an evidence pointer, not proof that secrets have never leaked.
Inside the CVM
Phala dstack derives persistent encryption and signing keys. Chutes provides confidential generation and inference. Wallet signatures approve specific requests, including recipients.
A former holder loses service access unless they still hold another CIPHR. Plaintext already downloaded cannot be revoked.
Pixel editor
Build a piece.
Pick five traits. Find your favourite piece.
CIPHR for your token
Add your own NFT to your coin
$CIPHR is the working example of the collection technology. Give your token its own pieces.
- Bring your coin.Launch on Pons or anywhere on Robinhood Chain.
- Build your collection.Choose the palette, art sets and trait weights.
- Fund the delivery.You pay the deploy fee and fill the gas tank. Buyers get their pieces when they connect or check their address.
GET MY PIECES
Get the pieces from your token buys, wherever you traded.
One signature. Only the network fee.
Paste a wallet address to find its pieces.
Sample piece
Check a buy.
A transaction hash is all the mint route needs. Built and tested locally. Not deployed. No address.
Same swap, same piece.
THE RAIL
Each new piece joins your rail. Try another buy to add one.
site simulationBrowse the collection.
Explore 48 sample pieces. Find a mix you like.
site simulationNo piece matches that mix. Remove a filter.
THE ODDS
Each seed picks one option from each group. Lime marks your candidate.
site simulationSite piece and chain piece.
Same traits. The image on the right is what the contract draws.
How the piece reaches your wallet
No contract published yet.
- You buy.
- The buy is proven from the chain.
- You send the mint yourself.
- The piece is in your wallet moments later.
What runs when you buy.
Built and tested locally. Not deployed. No address.
The tech
- Generation
- Chutes runs confidential inference on Bittensor subnet 64. Before launch, each Chutes machine has to pass independent Intel TDX and NVIDIA checks.
- Custody
- A Phala Cloud dstack machine (Intel TDX) keeps the keys, seals each visor with AES-256-GCM, checks the licence and signs reveals. Its key governance on chain 4663 is not verified yet.
- Licence
- Every encrypt and decrypt checks your live balance. You choose who can open it: you, one wallet, or any current CIPHR holder.
- ZEC door
- NEAR Intents 1Click can quote a transparent ZEC deposit and settle it to USDC on Base. The claim reservation on chain 4663 is separate. The door stays closed until both are verified.
- Chain
- CiphrCollection on chain 4663 only accepts seals and reveals signed for the current holder and transfer cycle. A public reveal is permanent.
Not live yet: this page claims no running TEE, key service, ZEC door or deployment.
The proposed rule
A visor resolves.
Four rules connect your buy to your avatar.
One buy, one avatar.
A buy that meets the minimum receives one avatar, checked against the buy that earned it.
The visor is encrypted to the holder's key. To everyone else it is noise.
Only a signature from the holder's own wallet unlocks the pattern. Anyone else looking at the same avatar sees scrambled noise.
Small buys fire nothing. The minimum is shown live.
Try an amount below your minimum. The candidate stays visible, but no avatar is fired.
The holder can reveal on chain, once, forever. Or never.
Revealing writes the unlocked pattern to the chain for everyone to see. It cannot be undone, and it is never required.
No pool or collection address is published.
The minimum buy, supply and launch date are unpublished; the minimum here is your own number.
Read the arithmeticQuestions.
Do I need to claim my piece?
Yes. Open Get my pieces, connect the wallet you bought with, and claim. Your wallet pays the small network fee for the mint, and the piece lands in the wallet that bought.
Does every buy get a piece?
Only a buy at or above the collection's minimum. Smaller buys are ordinary swaps like any other, and never bring a piece.
Can I sell the piece?
Once minted, it is an ordinary ERC-721 in your wallet, so yes, the same way as any other NFT. Nothing about it is restricted or soulbound.
Is there a contract yet?
No. Nothing is deployed, and no address exists on any network yet.
What if the site is down?
The buy is on chain either way. The authorisation can be re-issued once the site is back, and you claim then from Get my pieces.
What decides what my piece looks like?
A seed built from the pool, the buyer's wallet, which numbered buy it was, and the amount, all packed together and hashed. The same four inputs always give the same seed and the same piece.
Every swap has a look.
48 buys from the sample wallet. One piece at a time.
site simulationBuilt with: Chutes on Bittensor SN64 · Phala dstack TDX custody · Zcash through NEAR Intents 1Click, coming