NADO
Mine rewards from your phone.
Quantum-safe. Private by design.
A fair-launch, post-quantum blockchain you mine from a real device — an Android phone, a Windows PC with a TPM, a Ledger or a Trezor Safe. No rig, no install: open one link and you have the wallet, miner, explorer and shielded pool in a single page.
A draw, not a race
NADO replaces the Proof-of-Work hash race with a deterministic, beacon-keyed weighted draw: one hash decides each block's producer, so faster hardware (ASICs, GPUs) confers no advantage and there is nothing to grind. A phone competes on equal terms with a datacenter — and can win a block even while its tab is closed, because winners are credited by address and a relay assembles the block for them.
AIK Oracles — the network issues the certificate Microsoft will not
A Windows PC proves its TPM through Microsoft's attestation service. For a large minority of machines that service answers 404: the chip is genuine and vendor-certified, Microsoft simply has no authority registered for it, and there is no appeal — on Linux no such service has ever existed. NADO's nodes do that job instead — AIK oracles. Three are drawn at random, each seals a secret to your chip's endorsement key, and only the real chip can open all three. What makes it a proof is the order the four messages land in, not a signature, so any node can re-check it offline, forever. No certificate authority, and no service to ask permission from.
PoSEA — Proof of Secure Element Attestation
PoSEA: every mining identity is a genuine device that proves itself to the network: a hardware attestation over a chain-chosen challenge, verified by every node against vendor roots pinned in the protocol. The device's factory certificate is then bound to that identity for the lease, so one device holds one identity at a time — the thing that makes a mining farm impossible.
Why a device at all, and what the network sees
Identity management is the only useful weapon against miner centralisation. Every rule written per identity — a work proof, a waiting time, a per-address cap, a per-IP budget — costs a farm exactly what it costs an honest miner, per identity, and a farm makes identities for free. It has been the holy grail of every project that paid people rather than capital: NANO, Idena, Nyzo, NADO's own IP mining — each was gamed by identity farming. Without a real identity, identity farming is what opens the attack; NADO's identity is a physical secure element, bound to one wallet at a time.
It is not a passkey or a login. The wallet asks your phone or PC to create a throwaway hardware key and sign one challenge chosen by the chain. What every node verifies, offline, is the maker's certificate: "genuine Android", "genuine TPM", "genuine Ledger". No serial number, no account, no name leaves the device; the key is never used again; nothing is stored with your wallet key; no node ever contacts Google, Microsoft, Ledger or Trezor.
Holding, sending and receiving NADO need no device. Attestation is only for mining rewards. If you would rather not attest from the device you mine on, "Attest from another device" lets any phone or PC you trust vouch for the wallet.
Android 12+
Locked bootloader, Chrome: the phone's TEE or StrongBox key attestation, chained to Google's roots. Rooted or unlocked phones cannot attest.
Windows PC
Windows Hello on a physical TPM 2.0, chained to Microsoft's TPM root. Virtual TPMs and VBS-only keys are refused.
Ledger
Nano S, Nano S Plus, Nano X, Stax and Flex, over WebHID: the device's factory-certified key vouches through Ledger's own genuineness handshake — you allow it on the device.
Trezor Safe
Safe 3, Safe 5 and Safe 7, over WebUSB: the secure element's per-device certificate, chained to the root key pinned for that model — you confirm on the device. Trezor One and Model T have no secure element and are refused.
Not accepted, because nothing in them identifies one device: virtual machines, emulators, software keys, Windows Hello without a TPM, FIDO2 security keys and Trezor One / Model T (batch certificates), and iPhone / iPad / Mac (Apple passkeys carry no attestation) — a Mac or iPhone user registers with a Ledger, a Trezor Safe or an Android phone instead.
Staking: no device, no pool — stake is weight
Savings (bonded stake) produce blocks on their own — nothing to attest, nothing to renew, and your weight is your stake, one for one. Capital is the Sybil resistance here; the device rule stays where it discriminates — the free lane and the presence dividend, which a staker with a device keeps earning on top.
Bond and forget
Bond 10 NADO or more from the Savings tab and your stake is in every bonded draw from the next epoch, one coin one weight. No device, no lease, no renewal, no pool: coins stay in your account and unbond after a timelock.
No pools
Staking pools existed for the weeks the bonded lane required a device; once it did not, a pool could only pay a delegator what solo staking pays, minus a fee, so they were retired. The code stays in git if a reason ever returns.
Why plain stake
We measured every per-wallet rule on the live lane before dropping it. The device requirement idled a fifth of the stake and stopped only a whale with one phone. The knee curve was undone by splitting at the knee and shaped nobody's weight. Capital is the Sybil resistance of a bonded lane; what limits concentration on NADO is the 30 % of blocks and about half of all emission that go to attested devices, one per identity — something stake cannot buy.
Every node builds every block
There is no block proposer in NADO. A block is a pure function of the chain and the mempool — same parent, same transactions, same code — so every node computes the identical block itself. Nobody proposes, nobody waits for a leader, and nobody can hold a slot hostage. The only thing that can differ between nodes is the mempool, and the protocol keeps pools equal at the moment it matters.
Computed, not proposed
Winner, transaction set, weight and hash are all derived from committed state and the pool. No signature the chain depends on, no timestamp in the hash — no clock and no key can make two honest nodes disagree.
Pools that agree
Push gossip, per-second pull reconcile, an inclusion delay, and — right before building — a direct “what would you include?” exchange with peers. The mesh converges on the union of its next-block sets inside the slot.
Ties favour the better pool
If two blocks still appear at one height, the one built from the more complete transaction set wins, deterministically — and the other side adopts it instantly, because the block carries the transaction it lacked.
Why NADO
Most "anyone-can-mine" coins get captured by specialized hardware, launch unfairly, aren't quantum-resistant, or still lean on trusted infrastructure. NADO targets all four at once.
PoSEA: one device, one identity
Your device's secure hardware vouches for your identity once per lease and the network binds that device to it — no farm of virtual identities, no server pretending to be a phone.
Fair launch, no premine
Genesis mints zero coins. Every coin in existence was minted as a block reward — a brand-new, zero-coin miner earns from block 1.
Everyone present earns
A presence dividend redistributes most of the open-lane reward to everyone showing up steadily — a stream, not a rare jackpot.
Post-quantum
ML-DSA-44 (NIST FIPS 204 / Dilithium) signatures, cross-validated between the browser and full nodes. No pre-quantum crypto anywhere.
Shielded pool
Optional post-quantum zk-STARK privacy: prove a transfer on your own device so no one — not even a node — sees your amounts or keys.
Scales to millions of miners
Consensus overhead stays constant whether 16 or 16 million miners are online — a stake-weighted committee posts one merged duty per epoch, and post-quantum signatures verify up to 55× faster.
Lightweight & reproducible
Consensus hashing is over canonical JSON, so a browser reproduces every address and transaction id byte-for-byte. No full node needed.
Randomness nobody controls
Producers are drawn by a commit-reveal beacon any bonded validator can seed — every reveal adds another hand to the dice, and no single party can ever steer the draw.
Speaks your language
Wallet, miner and explorer fully localized in 16 languages — every log line, error and button, not just this page.
Settled by stake, not a zkVM
NADO settles its rollups with a bonded-stake quorum — a rollup ends up as secure as NADO itself, at near-zero cost.
Up to 1,000,000× lighter than a zkVM
NADO settles a rollup by running a 142-line interpreter and checking one 8-line stake vote — roughly native speed, it runs on a phone. A zkVM proving every executed instruction would burn up to 1,000,000× more compute (GPU-class proving, minutes per batch) and drag in a 50,000+ line prover-and-circuit stack to audit — all to remove one assumption NADO already relies on: that 2/3 of its bonded stake is honest.
Run a casino — it's already built, just bankroll it
The game contracts are already deployed and open to everyone — no allowlist, no approval, no gatekeeper. Opening a casino, prediction market, lottery or slot machine is one click: put up a bankroll and you're the house. You keep the edge — we take zero platform fee, ever. The only cost is NADO's network fee. That's the giveaway: the devs give up the revenue a normal platform would skim, so it's all yours.
Already deployed, permissionless
The contracts exist and are ungated — no team to email, no KYC, no listing fee. Bankroll one and it's live; the same rule for everyone.
You're the house — keep the edge
Fund a table and every losing stake plus the published house edge is yours. Set the odds or run it at cost — it's your machine, and the payouts come straight from your bankroll.
Zero platform fee — only the network fee
We skim nothing: no cut, no revenue share, no rent to a middleman. You pay NADO's tiny transaction fee and keep everything else — the devs give up the fees a normal platform would take.
A treasury that can't be hoarded
10% of every block reward funds an ecosystem treasury — but there is no founder wallet, no multisig, no one who controls it. It is spent only by a 2/3 stake vote of bonded holders, and any part left idle is burned every period. No one holds the keys, so it is almost as if the treasury doesn't exist as a power center — it's a rule, not a ruler.
Nobody controls it
Fully on-chain, quorum-governed: bonded stakers propose and vote on every spend, right in the wallet. No admin key to capture, no privileged party to trust or corrupt.
Spend it or lose it
Idle treasury above a runway floor is burned each period. The funds are forced into the ecosystem by a stakeholder vote — or destroyed. It can never just sit there.
Yours anyway
It's emission miners and holders would receive regardless — redirected, by their own vote, into growth that lifts the whole network, not a founder's discretionary war chest.
Start in one tap
Onboarding is opening a link. Share it in a group chat and whoever opens it is instantly mining — and shares it again. That's the whole growth model.
Open the Interface
Go to get.nadochain.com on any phone or laptop. Nothing to install.
Generate a wallet
A post-quantum key is created in your browser and stored on your device — optionally password-encrypted.
Tap “Start mining”
It registers you on-chain and mines the open lane for free. Leave the page open and it never stops.
Send, explore, save
Send/receive, register a human-readable alias, browse the chain, and bond stake to earn the savings lane — all in the same page.
Govern
Bond stake, then vote in the Quorum tab on how the treasury funds the ecosystem — or lets it burn. The chain's money is governed by the people who hold it, not a founder.