Discretion,
quantum-proof.
Private digital cash for a post-quantum world. Discrete is a standalone proof-of-work chain where ownership is sealed by post-quantum signatures.
When the curve breaks,
everything breaks.
Harvest-now-decrypt-later is only the opening move. Nearly every coin in circulation rests its ownership and its emission on elliptic-curve signatures. The day a cryptographically-relevant quantum computer arrives, those signatures can be forged at will — not merely archived data decrypted. Balances can be seized, coinbase rewards counterfeited, and the integrity of issuance itself collapses across an entire ECC chain, all at once.
Ownership and emission, forgeable
ECDSA and EdDSA decide who owns what — and who may mint new supply. Shor's algorithm recovers private keys from the public keys exposed on-chain forever, letting an adversary forge signatures, drain existing balances, and counterfeit the coinbase. The whole monetary system fails, not just its confidentiality.
Quantum-resistant from genesis
No elliptic curves to break. Discrete signs ownership and authorizes emission with post-quantum cryptography from the first block — so neither your coins nor the supply can be forged, today or after a quantum adversary arrives.
Ownership you can't unwind.
Privacy built from the base layer.
Post-quantum ownership
Accounts are anchored to post-quantum signatures rather than elliptic curves. Your coins remain provably yours even against an adversary holding a quantum computer.
Short account IDs
Register a short alias on-chain and share it instead of a very long address. Payments still fan out to one-time stealth outputs, so a memorable identifier never costs you receiving privacy.
One CPU, one vote
Proof-of-work tuned for commodity CPUs and built to resist ASICs, pools, and botnet farms — a non-outsourceable design that keeps issuance with solo miners rather than a few industrial operators.
Run Discrete your way.
Every client is open source. Verify the build, read the code, or just grab a wallet and start.
Desktop wallet
Full node and wallet in one app for Windows, macOS, and Linux. Send, receive, and mine with a click.
Daemon & tools
Headless daemon, wallet CLI, and miner for operators and power users. Scriptable, auditable, server-ready.
Light wallet
Lightweight wallet for the browser, iOS, and Android. Keys stay on your device — coming alongside mainnet.
Privacy, shipped in phases.
Discrete launches with hardened ownership and ships deeper privacy guarantees as the protocol matures — each phase opaque to the one before it.
Foundation
- Proof-of-work mainnet
- Post-quantum account ownership
- Stealth one-time addresses
Hidden amounts
- Confidential transaction values
- Balances become opaque on-chain
- Range proofs, post-quantum safe
Spend privacy
- Untraceable spends
- Sender concealed alongside receiver
- Full transaction confidentiality
Built like cash.
Hardened like a vault.
A focused set of primitives — proven, conservative, and post-quantum by default. Figures below describe the proposed protocol and may evolve before mainnet.
Discretion isn’t a feature.
It’s the design principle.
Read the protocol, audit the approach, or spin up a node and help secure the network.