Your face is yours to unlock.

Chutes and Phala TEE. Coming soon.

Same buy.
Same avatar.

CIPHR seals your visor inside a Phala dstack confidential machine, and only your wallet signature can ask it to open. Chutes on Bittensor subnet 64 runs the private generation. Neither service is live yet.

Buy $CIPHR and you get a piece. The privacy is what the visor hides.

Local demo. Buying and minting are not live.

Try a buy

Graphite is the machine. Lime is your coin and your key.

Tap a piece behind the head to see what you could unlock.

A visor resolves.

Graphite voxel helmet with a lime static visor, a keyhole, and a cracked hole where a human eye looks out.
Your simulated avatar

Why this is private

  1. Step 1

    Sealed inside a Phala CVM

  2. Step 2

    Your wallet signature asks it to open

  3. Step 3

    Reveal only if you choose

Every coin gives you a coin.

This one hides its face.

One buy, one piece.

Press a button below and watch it happen.

You buy

The visor resolves

You hold the piece

Buy $CIPHR wherever you already trade. A piece lands in your wallet moments later.

site simulation

Just trying it? Press a key.

Try a buy

Pick an amount. The terminal walks through what a real buy would do, then shows the piece you would get.

Demo values in $CIPHR. Keys 1 to 4 work too.

Demo minimum: 500K $CIPHR. The 250K buy gets no piece.

0 buys, 0 pieces

Your piece shows up here.

How is my piece decided?

Four facts about a buy decide the piece: which pool, which wallet, which buy it is, and how much. They are hashed into a seed; the seed picks the five traits.

Demo values in $CIPHR.

Sample wallet for this demo.

The seed for this buy

This is a demo. Buying and minting are not live.

Read before you buy

What is public, what stays private.

The contract records ownership, commitments, ciphertext and quote hashes.

Public, on chain

  • Holder addresses and transfers.
  • The visor ciphertext and its commitment.
  • Quote hashes, which point to evidence but do not prove nothing leaked.
  • A reveal, once the holder chooses one. It is permanent.

Inside the CVM

  • The keys Phala dstack derives to seal and sign.
  • Confidential generation on Chutes.
  • Your unrevealed visor, opened only for a request your wallet signs.

A former holder loses access unless they still hold another CIPHR. Plaintext already downloaded cannot be taken back.

Pixel editor

Build a piece.

Pick five traits. Find your favourite piece.

Rank
This exact mix
Rarity

CIPHR for your token

Add your own NFT to your coin

$CIPHR is the working example of the collection technology. Give your token its own pieces.

  1. Bring your coin.Launch on Pons or anywhere on Robinhood Chain.
  2. Build your collection.Choose the palette, art sets and trait weights.
  3. Fund the delivery.You pay the deploy fee and fill the gas tank. Buyers get their pieces when they connect or check their address.
Add your own NFT to your coin

GET MY PIECES

Get the pieces from your token buys, wherever you traded.

Use the wallet you traded with. No connection needed.

Paste a wallet address to find its pieces.

Same swap, same piece.

THE RAIL

Each new piece joins your rail. Try another buy to add one.

site simulation

Browse the collection.

Explore 48 sample pieces. Find a mix you like.

site simulation
48 pieces

THE ODDS

Each seed picks one option from each group. Lime marks your candidate.

site simulation

Site piece and chain piece.

Same traits. The image on the right is what the contract draws.

On the site
Drawn by the contract, same traits

How the piece reaches your wallet

No contract published yet.

  1. You buy.
  2. The buy is proven from the chain.
  3. You send the mint yourself.
  4. The piece is in your wallet moments later.
How it works

What runs when you buy.

Built and tested locally. Not deployed. No address.

The tech

Generation
Chutes runs confidential inference on Bittensor subnet 64. Before launch, each Chutes machine has to pass independent Intel TDX and NVIDIA checks.
Custody
A Phala Cloud dstack machine (Intel TDX) keeps the keys, seals each visor with AES-256-GCM, checks the licence and signs reveals. Its key governance on chain 4663 is not verified yet.
Licence
Every encrypt and decrypt checks your live balance. You choose who can open it: you, one wallet, or any current CIPHR holder.
ZEC door
NEAR Intents 1Click can quote a transparent ZEC deposit and settle it to USDC on Base. The claim reservation on chain 4663 is separate. The door stays closed until both are verified.
Chain
CiphrCollection on chain 4663 only accepts seals and reveals signed for the current holder and transfer cycle. A public reveal is permanent.

Not live yet: this page claims no running TEE, key service, ZEC door or deployment.

The proposed rule

A visor resolves.

Four rules connect your buy to your avatar.

One buy, one avatar.

A buy that meets the minimum receives one avatar, checked against the buy that earned it.

The visor is encrypted to the holder's key. To everyone else it is noise.

Only a signature from the holder's own wallet unlocks the pattern. Anyone else looking at the same avatar sees scrambled noise.

Small buys fire nothing. The minimum is shown live.
Your minimum

Try an amount below your minimum. The candidate stays visible, but no avatar is fired.

The holder can reveal on chain, once, forever. Or never.

Revealing writes the unlocked pattern to the chain for everyone to see. It cannot be undone, and it is never required.

No pool or collection address is published.

The minimum buy, supply and launch date are unpublished; the minimum here is your own number.

Read the arithmetic

Questions.

Do I need to claim my piece?

Yes. Open Get my pieces, connect the wallet you bought with, and claim. Your wallet pays the small network fee for the mint, and the piece lands in the wallet that bought.

Does every buy get a piece?

Only a buy at or above the collection's minimum. Smaller buys are ordinary swaps like any other, and never bring a piece.

Can I sell the piece?

Once minted, it is an ordinary ERC-721 in your wallet, so yes, the same way as any other NFT. Nothing about it is restricted or soulbound.

Is there a contract yet?

No. Nothing is deployed, and no address exists on any network yet.

What if the site is down?

The buy is on chain either way. The authorisation can be re-issued once the site is back, and you claim then from Get my pieces.

What decides what my piece looks like?

A seed built from the pool, the buyer's wallet, which numbered buy it was, and the amount, all packed together and hashed. The same four inputs always give the same seed and the same piece.

All questions

Every swap has a look.

48 buys from the sample wallet. One piece at a time.

site simulation

Buy the coin. Unlock your face.

Try a buy

Built and tested locally. Not deployed. No address.

Built with: Chutes on Bittensor SN64 · Phala dstack TDX custody · Zcash through NEAR Intents 1Click, coming