A post-quantum privacy coin with Solana-style smart contracts. Shielded notes, ECDH stealth delivery, hybrid PoW mining + PoS finality, and validator-governed buyback/burn. Nobody can mint new supply — not even us. Fixed 100,000,000 AEG — the code is the constitution.
Privacy that outlives the quantum threat
Dilithium signatures, Kyber KEM, and Rescue-Prime STARKs — the primitives designed to survive quantum adversaries. Your keys are not exposed to a harvest-now-decrypt-later world.
Payments are Pedersen commitments in a Rescue-Merkle note tree. Amounts and recipients stay off-chain — delivered via ECDH stealth encryption the relay can never read.
Hybrid proof-of-work block production with proof-of-stake finality. The 3M founder allocation is time-locked for 10 years. The remaining 98M only enters circulation through mining.
A real account-based smart-contract layer — no EVM baggage. Programs, accounts, and instructions execute inside consensus, verified by the same node set that finalizes blocks.
10% of every block reward flows to a treasury; every 144 blocks a share is burned — with the burn rate decided by stake-weighted validator vote. Deflation governed by those securing the chain.
The Android wallet is native Rust — seed, BIP-39 phrase, and shielded proofs all stay on-device. The node is a relay only; it never holds your keys. Trust Wallet-style recovery, real address validation.
How AEG hides what others can't
The ledger tracks transparent miner rewards; every payment is a shielded note commitment. An observer sees a number in a tree — never who paid whom, or how much.
Each payment mints a fresh stealth address from the recipient's view key and a per-transaction random nonce. Reused ephemeral keys are impossible by construction — every tx is unlinkable.
The note (amount + secret material) travels as ciphertext through the relay, encrypted to the recipient's view public key. The relay is a mailbox — it can't decrypt, only store and forward.
Every spend carries a zk-STARK proof that value is conserved, the nullifier is derived from the spend key, and the note is a real tree member — verified by consensus, revealing nothing.
Fixed supply. Time-locked founder allocation. Emission only through mining.
Live chain state — verified directly from the node
The testnet is live and mining. The Android wallet is one download away — your keys never leave your phone.