xpert.page - Latest Articles

PWA Loader On Xahau

Hodor — Sun, 15 Nov 2026 15:50:06 GMT

In 2007, when the first iPhone launched, Steve Jobs told developers that the way to build apps for it was the web: HTML, CSS and JavaScript, delivered through the browser.

The App Store came a year later and changed all that; but the idea never went away. In 2015, Google engineer Alex Russell and designer Frances Berriman gave it a name: Progressive Web Apps ... websites that behave like installed apps.

Xahau, the hooks-enabled sister network to the XRP Ledger, launched its mainnet in October 2023. Since then, it's added features through its amendment process. Validators must support a change by more than 80% for five days before it activates. In October 2026, with xahaud release 2026.10.13, the network introduced an amendment called PWALoader.

It activated on Xahau mainnet on November 9, 2026.

PWALoader lets any Xahau account publish a small web page directly on the ledger.

What The Heck Is A "PWA"?

A Progressive Web App is an ordinary website that uses browser features to act like an app on your phone or computer. It isn't a new technology or a special protocol. It's delivered over normal HTTPS, like any other site.

On a first visit, it's just a website in your browser. But if the site includes two extra pieces, the browser can do more with it:

A manifest: a small "ID card" listing the app's name, icon and colors. It lets the browser offer to install the site, putting an icon on your home screen or desktop that opens without the browser's address bar.
A service worker: a script the browser runs in the background. Picture a personal assistant standing between the app and the internet. It can keep copies of the app's files on your device, so the app loads instantly and keeps working ... even if you lose your connection.

See one in action: Visit squoosh.app, Google's free image compressor.

Other examples: Twitter, Starbucks, Pinterest and the retailer Flipkart have all used PWAs to deliver fast, app-like experiences without requiring an app-store download.

The key point is that the browser does almost all the work. A PWA provides content, a manifest and a service worker. The browser runs it, installs it, updates it and enforces the security rules.

Xahau's Version of PWA

Xahau enables something like a PWA, called "PWALoader".

PWALoader lets an account store one HTML page of up to 4,096 bytes on the ledger. It's published with an ordinary AccountSet transaction. Xahau nodes that opt in can then serve that page to any web browser.

Why "Loader"?

Xahau's own release notes call the page a "bootloader" for a Progressive Web App. In computing, a bootloader is known as a small, trusted program that starts first and loads everything else. It isn't the operating system, but everything after it depends on it loading other programs and capabilities successfully. PWALoader is meant to play that role for a web app: a small, verifiable first step.

Not A "Full" PWA

Despite the name, the page a Xahau node serves cannot do the traditional PWA tasks. It can't register a service worker, it can't be installed, and it can't store data on your device.

This is intentional.

Every page is served inside a strict browser sandbox that gives it an "opaque origin." In effect, the browser treats each page as an anonymous stranger and refuses to give it storage, cookies or background scripts. That makes sense, because anyone can publish a page for a fraction of a cent ... and pages aren't reviewed. Locking them down protects visitors.

The Xahau "PWALoader" is best understood as a loader for a PWA, not a PWA itself.

What It Can Do

Within those limits, the page is otherwise a fully working web page.

It can run JavaScript, draw graphics, take form input, connect live to Xahau nodes, and fetch data from other websites that allow it. It can also link to ... anything. 🤯

Architecturally, Xahau takes the place of the web server that would normally hold a site's home page.

In a traditional setup, your browser asks a company's server for its home page, and the server reads a file from its disk. With PWALoader, your browser asks a participating Xahau node, and the node reads the page from its copy of the ledger.

The ledger is the disk.

How It All Works

Publishing. The account owner signs an AccountSet transaction. The transaction must contain the page's HTML in a new AppLoader field. The page is then stored in an AppLoader ledger object tied to that account. There can only be one per account. The cost is the normal fee, plus one drop per byte (~ 0.004 XAH for a full page), with no reserve. Like every ledger change, the new ledger is copied to every node on the network automatically.

Visiting. Node operators can optionally enable a pwa port on their node, behind a standard web proxy with their own domain. A visitor's browser requests an address like https://pwa<AccountIndex>.<domain>/<r-address>. The node looks up that account's AppLoader in its own copy of the validated ledger and returns it as a normal web page. Each account gets its own subdomain to keep pages isolated from each other. Every response carries the ledger sequence and hash it came from. Anyone can confirm the page is genuine with the pwa_validate command against a second, independent node.

Two important points:

Any participating node can serve any page, each at its own web address. The account, not the URL, is the true identity of the page.
An account owner can link a custom domain, verified through DNS and the account's Domain field, so visitors see a familiar address.

The Value of Using Xahau's PWA Loader

A PWALoader page can do less than an ordinary website. Its value is in what you can know about it. With a normal website, one party controls everything ... and visitors have to trust it.

PWALoader splits those jobs up:

Job	Normal website	PWALoader
Storing the page	Files on someone's server	An `AppLoader` object in the ledger, copied on every node
Who can change it	Whoever controls the server: the owner, the host, or an attacker who breaks in	Only the holder of the account's key, through a signed transaction
History of changes	Usually none visible to visitors	Every version is a ledger transaction, permanently recorded
Serving it over the web	The owner's server	Any node operator who opts in; many independent hosts can serve the same page
Checking you got the right thing	You trust the server	Each response carries the ledger sequence and hash, and anyone can check it against another node

For a business, that means:

Authenticity. If customers know your official Xahau account, they know its page is yours.
Tamper evidence. A host that altered your page would be caught by checking it against a different node.
A public audit trail. Every update is dated and visible.
Resilience. The page doesn't live on one server. Only the owner can remove it.
Near-zero hosting cost for small, permanent pages; no server to maintain.

It also has clear limits. Verification covers only the 4 KB page itself, not anything it loads or links to elsewhere. And authenticity is not the same as safety: verification proves who published a page ... not that the page is safe.

Use Cases

Ekiserrepe published a hands-on guide with working examples on the Xahau testnet. It included a links page with a built-in QR code, "Flappy hook," a canvas game that fits in a few kilobytes using compression, and a live ledger dashboard that connects directly to a Xahau node.

Separately, ShortTheFOMO has prototyped an on-ledger wallet protected by a hook that requires passkey approval for transactions!

Other possibilities:

Verified business cards and link hubs: "find us on-chain."
Project and token landing pages tied to the project's own account.
Wallet and payment front ends, where tamper-proof code matters most.
Community, governance and membership portals for groups built on Xahau.
Small games and utilities, such as calculators, converters and countdowns.
Verified "front doors" that link to a full website or app hosted elsewhere.

First Adopter

@PeachCobblr was one of the first adopters of the PWA Loader once the amendment made it to activation:

You can see his small "Lab Card" for CobblrLabs, linking to his site. The page can be viewed directly from his account in the XRPLWin Xahau explorer, which renders on-ledger pages right inside the account view:

It is a unique distinction for his company.

Open-Ended Possibilities

We've now suggested several possible uses for the Xahau PWALoader, but history suggests that the most interesting one hasn't been imagined yet.

Someone will find a use for PWALoader that nobody anticipated.

Like hooks, URITokens, Random Number Generation (RNG) and Xahau's other building blocks, PWA Loaders open a new avenue for creativity on the chain. A crypto account can now hold assets, run logic, and can be - or verify - the front door to an application.

Sources

Xahau docs, serving PWA apps: https://xahau.network/docs/infrastructure/serving-pwa-apps/
Xahau docs, amendments list (PWALoader): https://xahau.network/docs/features/amendments/
Xahau docs, amendment process: https://docs.xahau.network/features/amendments
xahaud 2026.10.13 release notes: https://github.com/Xahau/xahaud/releases/tag/2026.10.13-release%2B4119
XRPLWin explorer, amendment status: https://xahauwin.com/amendments
XRPLWin explorer, CobblrLabs account page: https://xahauwin.com/account/rhd69TiRHM8bCbR6JdnPuanM36ugtx7mSp#webapp
Ekiserrepe's PWALoader guide (dev.to): https://dev.to/ekiserrepe/learning-xahau-on-ledger-web-apps-with-pwaloader-163f
Xahau Network announcement on X: https://x.com/XahauNetwork/status/2118626854114320591
PeachCobblr's mainnet post on X: https://x.com/PeachCobblr/status/2120151566242234579
PeachCobblr's PWA Loader content via Xahauwin explorer: https://xahauwin.com/account/rhd69TiRHM8bCbR6JdnPuanM36ugtx7mSp#webapp
Passkey wallet bootloader example: https://github.com/shortthefomo/p-256-bootloader
'X' Post from ShortTheFOMO about wallet bootloader example: https://x.com/ShortTheFOMO/status/2111509935582544003?a=euqUv5Jy8lmeUE6AEgE&s=20
Xahau mainnet launch coverage (U.Today via Investing.com): https://ca.investing.com/news/cryptocurrency-news/xrp-ledger-sidechain-xahau-now-live-in-mainnet-3158252
Squoosh as a PWA (InfoQ): https://www.infoq.com/news/2018/11/google-squoosh-pwa-webassembly
PWA background and examples: https://tic-tac-toe-niranjan.vercel.app/article-pwa.html
Jobs' 2007 web-app vision (ITNEXT): https://itnext.io/progressive-web-apps-will-replace-your-native-app-4427f2df6604
Squoosh: https://squoosh.app

Xahau: Random Number Generation

Hodor — Sat, 07 Nov 2026 16:23:09 GMT

In March 2026, a crypto speculator traded $220,764 of USDC for USDT on Uniswap, a trade that should have returned almost exactly the same amount.

They received $5,271. 😟

Within about eight seconds, an automated trading bot had extracted more than $215,000 from the transaction. The bot saw the trade, positioned itself on both sides of it, and collected the difference. This is known as a sandwich attack, one of the most common forms of what the industry calls MEV (Maximal Extractable Value).

The story caught the attention of Richard Holland, an architect of the Xahau network, who pointed to on-chain randomness as a potential solution.

To understand why randomness matters, we first need to understand how the attack worked.

How Did That MEV Attack Happen?

Picture a currency exchange booth at an airport. This booth is automated: it holds a supply of USDT and sets its prices with a simple rule. The less USDT it has left, the more expensive each remaining USDT becomes. Today it holds about 250,000 USDT, priced at roughly $1 each.

Now picture the line in front of the booth.

On Ethereum, that line is public. Anyone can see who is waiting and what they plan to trade. And for a fee, you can cut to any spot in line you want.

Our trader, let's call her Alice, steps into line holding 220,000 USDC. Her order contains a critical mistake: it says, in effect, "I'll accept whatever amount of USDT the booth gives me." She set no minimum (in trading terms, no slippage protection).

A bot spots Alice's order and pays to arrange three transactions in a precise order:

The bot cuts in front of Alice and buys nearly all the booth's USDT, about 245,000 of it. The booth is now almost empty of USDT, so its price skyrockets.
Alice reaches the window. Her 220,000 USDC can only buy the scraps: roughly 5,000 USDT. Because she agreed to accept anything, the trade goes through.
The bot steps back up right behind her and sells its 245,000 USDT back to the booth, which is now stuffed with USDC, including Alice's. The bot walks away with far more USDC than it started with.

Alice was effectively robbed by this bot. All three steps happened inside a single block, in seconds.

Several things had to go wrong at once: a pool with thin liquidity, an order with no minimum price, and a public line where seats are for sale. But the bot's whole strategy rested on one guarantee: it could choose exactly where it stood in line.

How Randomness Solves It

Imagine the booth works differently.

Everyone drops a ticket into a box. The tickets are shuffled together in front of everyone, and then selected in a random order. The sequence of tickets simply doesn't exist until after they're shuffled.

If we look back at our example, and apply that concept, we'll process Alice's trade ... and the bot's three transactions ... in random order. In most outcomes, the plan backfires: Alice trades first at a fair price, or the bot tries to sell USDT it hasn't bought yet, or the bot buys at an inflated price and becomes the one who overpays. The sandwich turns from a sure thing into a bet that usually loses money.

The key requirement is that the shuffle be truly unpredictable and that no single party ... including the network's own validators ... can see or steer it in advance. That is a hard problem to solve on a blockchain.

The XRP Ledger & Xahau

MEV attacks are not common on the XRP Ledger or on its smart-contract-enabled sister chain, Xahau, but they are not impossible.

Both networks start with structural advantages over Ethereum:

No pay-to-cut-in-line. Transactions aren't ordered by who pays the highest fee. Once a ledger closes, transactions are arranged by a fixed "canonical ordering" rule, and the XRPL's AMMs inherit that ordering.
Less visibility. There is no large public waiting room of pending transactions for bots to scan.
Speed. Ledgers close every three to four seconds, leaving little time to react compared to most other chains.

"Harder" is not "impossible."

The XRPL's documentation acknowledges that its ordering makes front-running more difficult ... but without eliminating it. In late June 2026, a community member raised claims that front-running and sandwich attacks were still affecting payments, DEX trades and AMM swaps on the XRPL, arguing that they disadvantage regular users. Validators and well-connected nodes can watch pending transactions. The canonical shuffle, while hard to game, follows deterministic rules. In response, David Schwartz, Ripple's CTO emeritus, proposed a system of reserved transaction slots so protected trades would be placed ahead of transactions disclosed later.

Richard Holland has described a different route for Xahau: using consensus-generated randomness to shuffle transaction order only after a ledger has closed, so nobody can know or influence the order in advance.

Xahau's RNG Amendment

The RNG amendment, as shipped in Xahau's October 2026 release, does not currently randomize transaction order.

What it does is give Xahau's smart contracts - called 'hooks' - access to random numbers that the validators produce together. With iron-clad randomness built into the protocol, a future protocol-level change to transaction ordering becomes far more achievable.

Here is how it works: Each validator generates a secret and publishes a sealed commitment to it. In the next ledger, it reveals the secret, and the network checks the reveal against the commitment. All the revealed secrets are mixed into a shared random seed for that ledger. Because each validator commits before seeing anyone else's contribution, no single validator can predict or steer the result. And if fewer than 80% of validators contribute, the network refuses to hand out random numbers at all rather than offer weak randomness.

Better Than Ethereum

On Ethereum, developers who need trustworthy randomness typically pay an outside oracle service such as Chainlink VRF, then wait for the answer to arrive in a later transaction through a "callback." It works and is widely used, but it adds cost, delay, and an extra outside service to the application.

On Xahau, the randomness is part of the network itself.

A developer calls one of two built-in functions:

dice(sides) returns a random whole number, like rolling a die with any number of sides.
util_random returns up to 512 random bytes for more complex needs.

There's no outside service and no waiting for a callback; the answer is available in the same transaction.

Safeguards

Hooks can draw random numbers but can never peek at what the next draw will be.

If a transaction fails after drawing, the randomness still moves forward, so nobody can keep retrying until they get a result they like. And every draw is recorded in the transaction's permanent record, so anyone can audit it afterwards. ✅

Other (Fun) Applications

Defending against bad actors is only part of its purpose. Reliable, protocol-level randomness opens the door to a wide range of applications.

Lotteries and Drawings

Ekiserrepe published a hands-on tutorial showing how approachable this is, with two working examples on Xahau's test network.

The first is a dice roller: a hook that rolls a die with anywhere from 2 to 255 sides each time someone pings it, and records the result on-chain.

The second is a fully automated lottery:

Players buy tickets by sending a fixed amount of XAH to the lottery account.
The administrator schedules the drawing using Xahau's built-in Cron feature.
At the scheduled time, the Hook draws a winning ticket using on-chain randomness and automatically pays the entire pot to the winner.

Nobody - not even the administrator - can know or choose the winner in advance, because the random seed used for the draw didn't exist when the drawing was scheduled. Ekiserrepe also suggests extensions such as weekly recurring draws, administration fees, and multiple prize tiers.

The randomness itself takes just a few lines of code. The surrounding work, written in C, requires skill, but the hardest part - generating randomness nobody can cheat - is handled entirely by the network.

Other Potentials

Prize-linked savings. Everyone deposits, and the pooled rewards go to a randomly drawn depositor each week, while nobody loses their principal. This fits naturally with Xahau's existing reward features and Cron scheduling.
Fair NFT drops. Traits are assigned randomly at mint time, so neither the creator nor early minters can pick out the rare ones.
Raffles for scarce allocations. Event tickets, limited products, or token sale spots can be awarded by provable draw rather than to whoever has the fastest bot.
Random selection in governance. A random jury of token holders can resolve a dispute, or committee members can rotate randomly, so nobody can stack the panel in advance.
Random spot-checks and audits. A Hook could randomly select, say, 5% of claims or escrow releases for extra review, making it impossible to predict which ones will be checked.
Games. Card shuffling (512 random bytes is more than enough for a deck), loot drops, matchmaking, and tie-breakers.
App-level fair ordering. A Hook-based exchange or auction could collect orders over a period, then process them in random order or break ties randomly.
A public randomness source. Anyone can read the network's random seed after each ledger closes, so outside systems could use it as a verifiable source of randomness for audit sampling, community giveaways, and more.

The last one is the most fascinating to me - and the most open-ended; there are many occasions in existing fields and industries that could leverage audit-able, on-chain random number generation.

⚠️ The usual caveat: lotteries, raffles, and similar games of chance are regulated or restricted in many jurisdictions. Consult a lawyer if you need to know the rules for your project & jurisdiction.

Set Your Imagination Free

By Xahau baking consensus-generated randomness directly into the protocol, available to any developer through a simple function call, it has created a foundation that could one day help secure transaction ordering itself, and today enables fair drawings, games, governance, audits, and more.

The most interesting applications are probably the ones nobody has thought of yet. When a capability this fundamental becomes easy to use, applications will tend to surprise people.

Sources

Original post on the March 2026 MEV sandwich attack: https://x.com/kunoo/status/2028179714272358734
Richard Holland's post on Xahau RNG and front-running: https://x.com/RichardXRPL/status/2028250323530465570
Xahau documentation, RNG amendment: https://xahau.network/docs/features/amendments/#rng
Ekiserrepe's tutorial on Xahau RNG (dice and lottery): https://dev.to/ekiserrepe/learning-xahau-on-chain-randomness-with-the-rng-amendment-1b9m
Ekiserrepe's companion code repository: https://github.com/Ekiserrepe/learnxahau-rng
XRPL AMM documentation on transaction ordering: https://git.inftf.org/ARCHIVE/xrpl-dev-portal/commit/1c623f7d4dcbbc108649f757ce68a2f64e05ffc4
XRPL sandwich attacks explainer (xrpl.to): https://xrpl.to/insights/xrpl-sandwich-attacks-explained
Ordering Proposal for XRPL: https://crypto.news/schwartz-proposes-xrpl-fix-as-front-running-fears-return/
XRPL Ordering Proposal Tweet: https://x.com/JoelKatz/status/2071466518509244878?a=NMPHmEjQle0XCFnaa9o&s=20
Ethereum EIP-7956, transaction ordering via block-level randomness: https://eips.ethereum.org/EIPS/eip-7956

Collateral: XRP & XAH

Hodor — Sat, 31 Oct 2026 22:44:37 GMT

Every loan rests on a contingency: if the borrower can't pay, the lender has something to take. That "something" is collateral, and it underpins nearly every part of finance, from a family's mortgage to a hedge fund's leveraged trading book.

For most modern financial systems, good collateral has meant a short list of assets: cash, government bonds, blue-chip stocks, real estate. That list is now changing. Over the past year, digital assets have moved from "too risky to touch" to accepted collateral at prime brokers, major exchanges and even the largest U.S. bank.

My view is that this is a structural shift.

Prime Brokers

A prime broker is a one-stop shop that large banks run for professional investors, mainly hedge funds. Instead of using dozens of firms for borrowing, trading, safekeeping and paperwork, a fund parks its assets with a single prime broker that does all of it under one roof.

The prime broker:

Lends money so the fund can buy more than its own capital allows.
Lends securities so the fund can sell short.
Holds the fund's assets in custody and settles its trades.
Nets everything into one margin account, so long and short positions offset each other ... and as a result, the fund needs less total collateral.

That last point is the heart of the business. A prime broker decides what counts as collateral, how big a discount (a "haircut") each asset gets, and when to issue a margin call. Its test for any asset comes down to three questions:

Can I value it every day?
Can I sell it quickly in a crisis?
Can I legally and physically control it?

Traditionally, only cash, Treasuries and liquid stocks passed easily.

The open question has been whether digital assets could pass, too.

Ripple Prime

In April 2025, Ripple announced its purchase of the prime broker Hidden Road for $1.25 billion - one of the largest deals in crypto history. With it, Ripple became the first crypto company to own and operate an International, multi-asset prime broker.

The stated goals were to use Ripple's dollar stablecoin, RLUSD, as collateral across Hidden Road's products, and to migrate its post-trade activity onto the XRP Ledger.

Renamed Ripple Prime, the business has since gone further. By March 2026, its CEO was describing institutions posting XRP directly as margin. A fund can pledge XRP, receive dollar credit, and use it to trade CME futures, all without selling tokens.

Ripple Prime now accepts a mix of Treasuries, fiat currencies, gold, BTC, XRP and tokenized money market funds. U.S. clients can cross-margin XRP and RLUSD holdings with OTC swaps and CME futures and options. RLUSD is accepted at a zero haircut, and revenues have reportedly tripled since the acquisition.

Evernorth

Evernorth is a Ripple-backed public company built to hold XRP, often compared to Strategy (formerly MicroStrategy) for BTC. It raised over $1 billion from backers including SBI Holdings, Ripple, Pantera, Kraken and GSR, and now trades on Nasdaq as XRPN.

The key difference from Strategy is that Evernorth runs an active treasury. Rather than simply buying and holding, it will attempt to grow XRP per share through lending, liquidity provisioning and decentralized finance yield.

That makes it a natural participant in exactly the kind of collateral markets Ripple Prime is building.

Ripple's New Bank

On October 26, 2026, on the eve of Ripple's Swell conference in New York, the Office of the Comptroller of the Currency granted final approval for Ripple National Trust Bank.

A national trust bank is not a full-service commercial bank. It safeguards and manages assets for others, but it generally doesn't take ordinary deposits or make loans. Its authority is:

Managing the segregated reserves backing RLUSD.
Acting as collateral trustee of those reserves for RLUSD holders.
Providing fiduciary digital asset custody.

Brad Garlinghouse framed the charter as giving Ripple "an even stronger foundation for RLUSD." That matters for collateral. Remember the prime broker's third question: can I legally and physically control it? Federally supervised reserves and custody make RLUSD easier for other institutions to treat like cash, and they give conservative lenders a regulated, neutral place to hold pledged digital assets.

Synergy

Put the pieces together and a full collateral stack comes into view:

Ripple Prime lends against XRP, RLUSD and other assets.
Evernorth holds a large pool of XRP it wants to put to work.
Ripple National Trust Bank holds the reserves behind RLUSD and can provide federally supervised custody.

The potential fit is easy to see. A large holder like Evernorth could lend XRP to Ripple Prime's clients, the way pension funds lend stocks to Wall Street prime brokers, earning fees that grow its XRP per share. It could also borrow dollars against its XRP. RLUSD, backed by federally-supervised reserves, serves as the cash leg that moves between them.

No such arrangement between these entities has been announced formally, but the architecture is clearly being assembled.

Collateral For Retail

For everyday borrowers, collateral has long meant small, case-by-case loans: a savings account pledged for a credit-builder loan, a car title, gold jewelry at a pawn shop. The common thread is that the lender needs an asset it can value and take quickly.

Crypto is now entering this space. In February 2026, Coinbase added XRP, along with DOGE, ADA and LTC, as eligible collateral for USDC loans of up to $100,000. Coinbase had earlier relaunched Bitcoin-backed loans in the U.S., and decentralized lending protocols let holders pledge tokenized gold to borrow stablecoins.

At the institutional end, JPMorgan now accepts Bitcoin and Ether as collateral for loans to institutional clients. BitGo has launched lending against a mix of assets held in custody. Ripple is clearly not alone.

The trend is broadening.

XRP, XAH, And Others

Why might native tokens of public networks make particularly good collateral?

Because of their properties:

No counterparty. XRP and XAH are native assets. They aren't anyone's IOU, so there is no issuer that can default.
Transparency. Holdings and transfers are visible on a public ledger. In 2008, nobody could see where pledged collateral had gone; on a public ledger, that chain can be traced.
Fast, final settlement. Ledgers like the XRPL settle transactions in seconds, around the clock, including weekends.
Programmability. Xahau, a network built from the XRP Ledger's codebase by independent developers, adds "hooks," small smart contracts attached to accounts. Logic like this could, in principle, enforce collateral rules automatically.

Speed matters more than it might seem. Margin is sized to cover how much prices could move before a lender can actually get paid. As Ripple Prime's CEO has noted, collateral that moves in seconds shrinks that window, which can reduce how much margin is needed in the first place.

The honest counterweight is volatility. Lenders still apply steep haircuts to crypto; JPMorgan's reported haircuts on BTC and ETH run 30% to 50%. Crypto doesn't win as collateral by being stable. It wins by being instantly movable, verifiable and free of counterparty risk.

The Finternet

In 2024, the Bank for International Settlements' Agustín Carstens and Infosys co-founder Nandan Nilekani described the "Finternet": a future financial system of interconnected ecosystems, much like the Internet, built on tokenized assets and unified ledgers.

Collateral is where that vision becomes concrete.

A Finternet where assets move instantly but collateral still settles on business-day timelines would be like a sports car stuck in traffic.

Native digital assets, held by trusted custodians and pledged in seconds, are the missing ingredient. Ripple's prime broker, its new trust bank and the growing list of lenders accepting crypto are early pieces of that system. The direction of travel is clear: collateral is going digital, and crypto is becoming part of the foundation.

X | X>

Sources

Ripple press release on the Hidden Road acquisition: https://ripple.com/ripple-press/ripple-acquires-prime-broker-hidden-road/
FinTech Futures on the Hidden Road deal: https://www.fintechfutures.com/m-a/ripple-acquires-hidden-road-for-1-25bn-to-expand-institutional-crypto-services
Ripple Prime CEO on XRP as collateral (Coinpedia): https://cryptonews.net/news/altcoins/32570810/
Ripple Prime CEO on posting XRP as margin: https://www.mexc.com/it-IT/news/960587
Markets Media on Ripple Prime growth and RLUSD haircuts: https://www.marketsmedia.com/ripple-prime-prepares-for-wall-street-2-0/
Blockworks on Evernorth's formation and strategy: https://blockworks.com/news/ripple-evernorth-raise-xrp
Evernorth SEC filing (Oct 2026): https://www.sec.gov/Archives/edgar/data/0002092592/000119312526419605/d118629dex991.htm
Ripple press release on OCC trust bank approval: https://ripple.com/ripple-press/ripple-receives-final-occ-approval-to-establish-national-trust-bank/
Swell 2026 dates (Bitcoinist): https://bitcoinist.com/ripple-makes-major-announcement/amp/
Coinbase adds XRP as loan collateral: https://www.mexc.com/news/754598
BitGo portfolio-based lending and Coinbase Bitcoin loans: https://www.mexc.com/news/995630
JPMorgan accepts BTC and ETH as collateral (The Block): https://www.theblock.co/amp/post/376038/jpmorgan-to-let-institutional-clients-pledge-btc-eth-loan-collateral
JPMorgan crypto collateral haircuts: https://whale-alert.io/stories/eedb01e3c041e5/JPMorgan-to-accept-Bitcoin-and-Ethereum-as-collateral-for-US-dollar-loans-through-Kinexys-in-2026
Tokenized gold as DeFi collateral (BTC-Echo): https://www.btc-echo.de/news/tokenisiertes-gold-marktwert-auf-400-milliarden-dollar-227595/
Xahau network overview: https://xahau.network/docs/resources/whitepaper/
BIS working paper on the Finternet: https://www.bis.org/publ/work1178.pdf

Xahau: Three Years Old

Hodor — Fri, 23 Oct 2026 18:37:23 GMT

Close to Halloween of 2023, a group of long-time, independent XRP Ledger builders switched on Xahau: a layer-one blockchain built from the XRP Ledger's proven code base, with one major addition, hooks. Hooks are smart contracts that attach directly to an account and run automatically based on either transactions happening, or the passage of time.

This month, Xahau turns three. 🎂

Year three was not an easy one for crypto. Prices fell, exchanges closed, and capital fled to the safest corners of the market. But on Xahau, year three was the year the application layer grew by leaps and bounds. DeFi, security, messaging, collectibles and developer tooling all shipped.

The High Points

One Xahau

For its first two years, Xahau had almost no DeFi applications. That changed in June 2026, when One Xahau launched.

Built by Cbot, One Xahau began life as a token data aggregator and grew into one of the first full DeFi suites on the network. It launched with three products, each powered entirely by Hooks:

An automated market maker (AMM), where liquidity providers earn fees from swaps, and new token pairs are listed by DAO vote.
Perpetual contracts, initially offering long and short positions on EVR (Evernode's token) priced in XAH, with funding rates and position caps to protect the pool.
A collateralized lending pool, where borrowers can take loans up to 50% of their collateral's value, with interest flowing back to liquidity providers.

A share of every fee flows to the One Xahau DAO, governed by on-chain Hooks and an elected council. Votes are cast with the platform's XXX governance token, which is consumed when used.

The significance: sophisticated, multi-product financial applications can run on hooks today, without waiting for native protocol features.

Cbot has also said he plans to open-source the core AMM, lending and perpetuals hooks for other developers to reuse.

Odin's Eyes

In the XRP ecosystem, the response to theft has historically depended on volunteers. These are people trying to help others: explorers that flag scam addresses, independent forensic investigators tracing funds hop-by-hop, and someone persuading an exchange to freeze an account before the money is cashed out.

Odin's Eyes, also built by Cbot and live on Xahau mainnet since July 2026, is an attempt to make that response automatic ... and to pay the people who do the watching.

It works like this:

A central registry account (the "Eye") records a single status for each address it has evaluated: clean, verified, suspicious, or confirmed malicious.
Other accounts in the ecosystem install a small companion hook (a "raven") that checks every counterparty against that registry before a transaction clears.
When an address is blacklisted, the registry broadcasts the decision, and every raven freezes that address on its own account - no manual update required. Ravens also trace who funded a flagged account, so "mule" accounts used to scatter stolen funds inherit the bad status automatically.
Raven operators earn RVN, a capped-supply reward token, through a small baseline reward for screening traffic, plus larger bounties for confirmed catches.

Odin's Eyes can't reverse a theft, and it only protects the parts of the ecosystem that opt in ... but it introduces something the volunteer model never had: an incentivized, network-wide circuit breaker that can freeze stolen funds before they reach a cash-out point.

There are currently 40 active 'raven' accounts helping to fine-tune the new automated safety net, including the high-profile accounts that belong to the One Xahau Defi group.

Evergram

Most messaging apps ask you to trust a company: its servers, its policies, and its ability to resist legal and commercial pressure. Evergram, created by Brazil-based developer Andrei Rosseti, takes a different approach.

Your identity is your wallet on the XRP Ledger or Xahau, and you log in with a non-custodial wallet such as Xaman. Each chat has its own encryption key, messages are encrypted on the sender's device before they leave it, and - by design - neither Evergram nor its infrastructure can decrypt them. The app itself runs on Evernode, a decentralized hosting network, paid for in EVR, with Xahau Hooks handling user registration and payments for the Pro membership in XAH.

Evergram debuted in January 2026. In August 2026 it shipped Orion, a major release that turned it from a wallet-based chat client into a significantly larger communication stack:

Public group discovery and shareable invite links, with admin approval and moderated modes.
Embeddable widgets that let any website offer end-to-end encrypted chat to visitors who don't have a wallet at all - a natural fit for customer support, tip lines and confidential intake forms.
Slash commands that put payments (/pay) right in the chat box.
Device and storage configuration, and a suite of more than 400 unit tests.

Evergram also reflects a pattern in Andrei Rosseti's work. It follows Xahau DocProof (2025), a blockchain-based notary, and Origo (late 2025), a single-signer document verification tool - each of them being a step in building identity and trust tools on Xahau.

Xahau Vault

Xahau handles NFTs differently from the XRP Ledger. Its URITokens are deliberately lean: a link and an owner, with features such as royalties, auctions and escrowed trades left to hooks.

While URIs (NFTs) on Xahau certainly existed - and were used by early-adopter developers - there was no smooth way to list or trade them outside of direct peer-to-peer trading via wallet apps.

Xahau Vault, Cbot's third major project of the year, filled that gap. It's a non-custodial NFT and URIToken marketplace: users log in with Xaman, their holdings appear automatically, and they can buy at a listed price or swap peer-to-peer. Trades settle on-chain through Cbot's broker and swap hooks; the marketplace never takes custody of the tokens.

And ... an auction hook just went live this month!

Xahau Vault integrates with its neighbors: collectors can launch One Xahau or message another owner through Evergram directly from the site.

Two related items:

Native royalties. URITokens have no built-in creator fee today. Cbot Labs has proposed an amendment that would let creators set a permanent royalty at mint time, paid automatically on secondary sales.
XRP Ledger support. Cbot has said he plans to extend Xahau Vault to the XRPL, possibly with cross-chain functions once the FeatureExport amendment is available.

Xahau Cards

On-chain card collecting was one of crypto's few bright spots in 2026. According to Blockworks Research, collectors spent more than $320 million on on-chain card packs in June 2026 alone - more than five times the prior year. Much of that runs on Solana and Polygon, through platforms backed by physical cards.

Xahau Cards, created by the developer behind the XRPLWin explorer, takes the digital-native route: the card is the token, minted as a URIToken. Opening a pack costs a small amount of XAH, and the ledger decides first the rarity tier and then the specific card. Non-legendary cards also have their stats rolled, so two copies of the same card can be worth very different amounts.

The minting, shop logic and card data are all run by four hooks, which XRPLWin open-sourced.

Two features stand out:

Cryptographic autographs. A card owner can ask a whitelisted signer to sign their card. The signature is stored as part of the token itself, permanently altering the card. David Schwartz (JoelKatz) and Richard Holland, the architect of hooks, were among the signers.
Achievements. Fifty video-game-style collector milestones are tracked automatically on the site.

The results surprised even the creator.

The Genesis set opened on September 18, 2026, and its 5,000-pack public allocation sold out in under three hours. Including a claim promotion for FUZZY NFT holders on the XRP Ledger, 5,098 packs (25,490 cards) were minted. By October 9, the collection had recorded 1,123 sales and roughly 544,000 XAH in volume on Xahau Vault.

XRPLWin has said there will be more sets, and that playable game rules might follow for one or more of the sets.

Upgraded Tools

Year three also brought major improvements for developers building on Xahau. While there are dozens of examples that I re-posted as I read through them on 'X', two of my favorites are:

xahau-mcp and the Kairo Vault toolchain. In June 2026, a community developer known as Hugegreencandle released xahau-mcp, the first Model Context Protocol for Xahau, which gives AI agents a structured way to read the ledger and reason about Hooks. It was the first piece of a three-tool, open-source (MIT-licensed) toolchain under his Kairo Vault effort:

Flight Simulator runs a transaction's hook code against live ledger state before you sign, so you know whether a hook will accept or reject it.
xahc helps write, lint, test and package safe C hooks.
xahc-prover goes beyond testing to formally prove that a hook satisfies safety rules (spend limits, destination locks, no double-spend and more) for every possible transaction - or returns the exact transaction that breaks the rule.

XRPLWin's next-generation explorer. In October 2026, XRPLWin - fresh off the Xahau Cards mint - shipped a complete rebuild of his explorer for both the XRP Ledger and Xahau. The front end, back end and data layer were all rewritten, on a new ClickHouse-based indexer that took roughly two years to build and backfill. Highlights for Xahau users include:

A live network dashboard (transactions, new accounts, XAH burned, network load) plus amendment, fee, validator and node data.
Community-described hooks: Hook developers can now name their own hooks, upload an image and publish an ABI (a machine-readable description of how to interact with the hook).
A filterable transaction index, charts, and an SQL console for analysts.

Together, these tools lower the barrier for building on Xahau ... considerably.

By The Numbers

Three years in, here's where Xahau stands.

XAH supply: 657,000,000

XAH burned over year three: 2,845,000

Activated accounts: 217,321

XRPL DEX Volume: ~ 816,000 XRP (Annual XRP-to-XAH directional DEX pairing on the XRP Ledger only)

Latest rich list (as of late October 2026, only measuring the Xahau network):

XAH price. XAH began 2026 at about $0.032 and, at the time of writing, trades around $0.012 a decline of more than 55% year-to-date. It's a common story among small-cap crypto networks in 2026.

Centralized exchange (CEX) liquidity. Xahau had unusually bad luck here. Two of the three centralized exchanges that supplied its on-ramp liquidity - BitMart and CoinEx - both announced they were shutting down in 2026. That leaves Bitrue as Xahau's CEX on-ramp, serving users in Asia and the other markets it covers.

Decentralized exchange (DEX) liquidity. With the Xahau CEX options adversely hit in 2026, the XRP Ledger's DEX - where XAH trades as an issued token that can be moved to the Xahau network - has become the most important source of liquidity for XAH.

InFTF

The Inclusive Financial Technology Foundation (InFTF), the nonprofit that champions the Xahau network, spent year three mostly behind the scenes: working with entrepreneurs and developers to deploy applications, new tools and educational content.

Its year included several visible milestones:

Remittances. InFTF's corridor with the Cooperative Bank of Oromia, one of Ethiopia's largest banks, is scaling its EUR → ETB service to the entire country, with a USD → ETB pilot and new bank and remittance partners in East and West Africa on the roadmap.
Stablecoins. Compliant USD and GBP stablecoins, and regulated currencies from additional countries, are listed as in-progress rollouts, joining the MiCA-compliant euro stablecoin already live on Xahau.
Agentic payments. InFTF joined the Linux Foundation's x402 Foundation.
Events. A quarterly community event, Xahau Connect, and an InFTF event bringing enterprise partners and developers together, planned for Q4 2026.

InFTF members also run independent sites that use the network.

One fun example from the last year: gifs.xahau.love, a community GIF archive created by Ekiserrepe, pays 75 XAH for every approved, published GIF - a small but clever way to reward community members for producing on-brand Xahau marketing content.

Crypto Bear Market

Xahau's third year coincided with one of crypto's harshest downturns.

Bitcoin peaked in October 2025 at roughly $126,000, then fell by about half. But for small-cap networks, the bear market started earlier and cut deeper. The market for small caps has been in a downturn since December 2024, losing about 44% of value from the late-2024 peak through the end of 2025. It then lost nearly another 23% in the first half of 2026.

The pain wasn't limited to prices. Nearly 100 crypto projects - exchanges, DeFi services, NFT marketplaces and blockchains - ceased operations in 2026, and well-known exchanges including BitMEX, BitMart and CoinEx announced closures.

XAH was not immune. It fell more than 55% in 2026, and losing two of its three exchange listings removed easy on-ramps for new users.

The Rise Of AI Coding

When Xahau launched, writing a Hook meant writing C, compiling it to WebAssembly and staying within strict execution limits. That was a real barrier for many would-be builders.

In 2026, that barrier is much lower. AI coding tools have become standard: in JetBrains' Developer Ecosystem Survey 2026, which surveyed more than 15,000 professional developers, agent-written code is a substantial share of what many developers ship.

Xahau is benefiting in two ways:

Writing Hooks is easier. AI assistants can draft C Hooks, explain the Hook API, and help debug — making Hook development accessible to developers, and even non-developers, who would previously have been put off by C. Several of this year's builders are self-taught.
Checking Hooks is easier, too. The obvious risk of "vibe-coded" smart contracts is bugs that cost real money. That's exactly where the year's new tooling fits: xahau-mcp gives AI agents structured access to the ledger, the Flight Simulator tests a Hook before you sign, and xahc-prover can formally prove that a Hook follows its safety rules.

Coding a new hook is now possible for people that can understand how to properly use AI coding tools.

Clarity & Regulations

Stablecoins are one of Xahau's key target markets. Fast, low-cost settlement, combined with Hooks that can enforce compliance rules at the account level, make the network a natural fit for regulated digital currencies and high-frequency financial use cases.

The stablecoin rules of the road:

United States: The GENIUS Act, signed in July 2025, created the first federal framework for payment stablecoins and moved into its rulemaking phase this year.
European Union: MiCA is active, with stablecoin issuers required to be authorized by July 1, 2026.
Elsewhere: Brazil and Japan, among others, now have dedicated stablecoin rules in force.

For Xahau, this standardization matters. Rules that make a compliant stablecoin's rules predictable also normalize much of what is important for growing an on-chain market: regulated issuers, market makers, liquidity providers, and AMMs. Clear rules don't guarantee that issuers will choose Xahau - but they remove a significant reason for not choosing any new network.

Protocol Upgrades

Xahau describes itself as an "enterprise-grade" Layer-1 where protocol changes are few and deliberate, and most of the work happens in rollouts, integrations and partnerships. Year three followed that pattern.

Roadmap Items

In April 2026, the roadmap (covering Q2 2026 through Q3 2027) listed seven new protocol features. Here's where they stand today, per the roadmap updated October 14, 2026:

Feature	What it does	Status (Oct 2026)
PriceOracle	Native on-ledger price feeds for DeFi and Hooks	✅ Activated
IOURewardClaim	Lets projects reward holders of their own tokens, like XAH's balance rewards	✅ Activated
Random Number Generator	Verifiable on-ledger randomness for Hooks and apps	Ready for amendment vote
NamedHook	Human-readable names for Hooks, so specific Hooks can be invoked	Ready for amendment vote
FeatureExport	An approach for Xahau-XRPL cross-chain logic, so hooks can manage XRPL accounts and assets	In development
JSHooks	Write Hooks in JavaScript alongside WebAssembly	In alpha development
Audits & optimization	Ongoing security and performance work	Ongoing

Current Waypoint & Future Items

The updated roadmap now runs from Q4 2026 to Q1 2028 and adds three new protocol features, all marked ready for an amendment vote:

PWALoader, which lets an account publish a small loader for a web app on the ledger itself, served by participating nodes.
OnChainManifests, which publishes validators' key information on the ledger, so every node can learn key changes and revocations directly from ledger state.
HookOn (HookOnV2_1), which lets a Hook respond differently to incoming and outgoing transactions.

The roadmap lists rollouts of major targets: USD and GBP stablecoins, more fiat currencies, a USD → ETB remittance pilot, additional African banking partners, an NGO donation platform, a merchant settlement pilot (Q2–Q3 2027) and an enterprise settlement offering for regulated partners (Q3 2027 onward).

Future High Points

What might year four bring? A few developments are already in motion.

Agentic Payments

For thirty years, the web had an unused status code: HTTP 402, "Payment Required." In 2025, Coinbase revived it as the basis of x402, a standard that lets software — including AI agents — pay for a resource in the middle of an ordinary web request, without a human clicking "confirm." Payments are typically made in stablecoins, and can be as small as fractions of a cent, making true pay-per-use pricing practical for APIs, data feeds and compute.

In July 2026, the Linux Foundation took over governance of the standard through the new x402 Foundation, whose members include Visa, Mastercard, American Express, Stripe, Google, AWS, Coinbase and Ripple. InFTF joined as a nonprofit member, bringing x402 to Xahau.

Xahau's fit here is unusually strong. The hardest problem in letting an AI agent spend money isn't the payment rail; it's the guardrails: "this agent can spend up to $400, only with approved merchants, only this week." On Xahau, those rules can be enforced by a Hook attached to the account itself, checking every transaction before it clears. The Kairo Vault toolchain already includes an x402-xahau component that uses a guardrail Hook as the spending authority.

Real x402 volume is still small and early-stage, and estimates of the eventual market vary enormously. But if agentic payments do take off, Xahau has one of the most natural integration paths of any smart contract network.

Non-Traditional Use Cases

Not every use case on Xahau is a bank corridor. Year three showed that creative applications can bring real activity and new users to the network:

Memecoins and community tokens, which One Xahau's DAO-listed pools can now give a trading venue.
URI-based collectibles such as Xahau Cards, whose blockchain-based card packs sold out a 5,000-pack mint in under three hours.

Watch, too, for Xahmoeba - a "pet"-style project still on Xahau's testnet, with a placeholder collection already on Xahau Vault.

The Tip Bot

One of the most anticipated arrivals of year four is the Xahau Tip Bot, a Web 3.0 take on the much-loved XRP Tip Bot, which let people send small amounts of crypto to each other on social media.

Year Four Begins

Three years ago, Xahau was a promise: the XRP Ledger's speed and reliability, plus programmability through Hooks.

Year three tested that promise under hard conditions. Prices fell. Two of three exchange listings disappeared. Capital retreated across all of crypto - Xahau included.

And yet it was also the year the application layer advanced.

Year four begins with a protocol roadmap full of features ready for a vote, regulated stablecoins in the pipeline, and a growing set of tools that make building on Xahau easier than ever. If year three proved that Xahau's builders will keep building in a downturn, year four may show what they can do when the market turns in their favor.

Sources

One Xahau liquidity pools: https://onexah.io/defi/pools
One Xahau on X: https://x.com/One_Xahau
Cbot (One Xahau creator) on X: https://x.com/Cbot_Xrpl
One Xahau announcement post on X: https://x.com/One_Xahau/status/2060485880834326547?s=20
Odin's Eyes on X: https://x.com/Odins_Eyes_
Odin's Eyes registry: https://odinseyes.io/registry
Evergram web app: https://evergram.app/app
Andrei Rosseti (Evergram creator) on X: https://x.com/andreirosseti
Xahau Vault on X: https://x.com/Xahau_Vault
Xahau Vault "website" as listed in research file (duplicates X profile): https://x.com/Xahau_Vault
Xahau Cards on X: https://x.com/XahauCards
Xahau Cards website: https://xahaucards.com/
"Q & A With The Creator Of xahau-mcp" (xpert.page): https://xpert.page/hodor/blog/q-and-a-with-the-creator-of-xahau-mcp
XRPLWin Xahau explorer: https://xahauwin.com/
Bithomp Xahau explorer: https://xahauexplorer.com/
Xahscan explorer: https://xahscan.com/
Activated Xahau accounts, all time (Bithomp): https://xahauexplorer.com/activations?period=all
gifs.xahau.love community GIF archive: https://gifs.xahau.love/
Ekiserrepe (gifs.xahau.love creator) on X: https://x.com/ekiserrepe
Xahau official roadmap (Q4 2026 → Q1 2028): https://xahau.network/roadmap/
Wietse Wind post on possible new features: https://x.com/WietseWind/status/2107756742721589735?s=20
Xahmoeba on X: https://x.com/xahmoeba
Xah Tip Bot on X: https://x.com/XahTipBot
Xahau Vault marketplace: https://xahauvault.com/
Xahau "About" page (launch date, Launch Alliance, COOP Bank corridor): https://xahau.network/about
U.Today on Xahau mainnet launch (Oct 2023): https://u.today/xrp-ledger-sidechain-xahau-now-live-in-mainnet
Pantera Capital on the altcoin bear market (CoinDesk): https://www.coindesk.com/markets/2026/01/23/altcoins-have-been-in-a-bear-market-since-late-2024-pantera-says
XAH historical prices (CoinLore): https://www.coinlore.com/coin/xahau/historical-data
BitMart wind-down (Cointelegraph): https://regional-front.cointelegraph.com/news/bitmart-wind-down-exchange-end-trading
CoinEx shutdown announcement (The Block): https://www.theblock.co/news/business/2026-09-15-coinex-shut-down-414788
Stablecoin regulation in 2026 — GENIUS Act and MiCA (KuCoin): https://www.kucoin.com/blog/bd-stablecoin-regulation-updates-2026-genius-act-mica-enforcement-global-compliance-trends
JetBrains Developer Ecosystem Survey 2026 on agent-written code: https://blog.jetbrains.com/research/2026/08/how-much-code-do-developers-really-let-agents-write/
Measured share of AI-authored production code (Lenz): https://lenz.io/q/percentage-of-code-written-by-ai-2026

Three Hours

Hodor — Mon, 12 Oct 2026 16:51:35 GMT

Collectors spent more than $320 million on on-chain card packs in June 2026, over five times the amount from a year earlier, according to Blockworks Research. Most of that runs through platforms like Collector Crypt and Courtyard, where every digital pull is backed by a vaulted physical card you can redeem.

Coinbase wants in on those numbers, and teased its own offering on September 28th of this year.

Digital-only collections are riding the same wave, and on the Xahau network, one just had its first launch.

Three Hours

On September 18, 2026, Xahau Cards opened its first mint, a set titled "Genesis."

... and I wasn't watching from the sidelines. I was buying packs like every other fan, and signing cards as part of the set's initial signer's list.

To top it off, even David Schwartz (a.k.a. 'JoelKatz') contributed to the excitement:

Beforehand, XRPLWin, the site's creator, and I traded guesses about how fast 5,000 packs would go. Neither of us guessed this fast. The mint opened at about 1:00 p.m. Mountain time, and the public allocation was gone by about 3:50 p.m.

Under three hours, for a first set on Xahau, the new 'smart contract version' of the XRP Ledger.

Xahau Vault

The cards needed a place to be traded among collectors.

Xahau Vault, an NFT marketplace run by an entrepreneur known as Cbot, timed its full launch to go live alongside the mint. From the first afternoon, collectors could trade duplicates and hunt the cards they were missing.

As of October 9th, the collection on Xahau Vault had recorded 1,123 on-chain sales and 544,315 XAH in volume, roughly $7,000 to $7,700 at current XAH prices. That works out to about 485 XAH per sale and more than 50 trades per day since the mint.

The Final Close

The public mint ended in under three hours, but one way to mint new packs still exists for a short time. Every holder of a FUZZY NFT on the XRP Ledger was eligible to claim a pack, and that promotion runs until October 19, 2026.

That's why the counter reads 'past the limit':

Packs dealt: 5,098 of 5,000 planned
Cards minted: 25,490, at five cards per pack
FUZZY claims: "I think about 200 Fuzzies claimed one," according to XRPLWin, with 568 left unclaimed at the time
Late claims: seven more packs claimed after a reminder post this month

If you hold a FUZZY NFT (based on a historical, point-in-time snapshot taken a few days before minting), and haven't claimed yours, the window closes October 19.

Surprising Numbers

Even Xahau Card's small, initial slice of the market has resulted in card values easily reaching into the hundreds - or even thousands - of dollars for signed legendaries.

It's this sort of electrifying possibility that drove the sales on the initial mint. If you're lucky enough to score a legendary card, it has the potential of more than paying for an initial outlay, and may even finance further acquisitions leading to a full album ... something only a few people have yet achieved for the Genesis set:

My Goal

Before the mint, I pulicly stated that I would be happy if I could (somehow) acquire a Hook legendary card, signed by Richard Holland, the chief architect of the Xahau and Evernode networks.

During the mint, in short order, I managed to open a pack with ... you guessed it ... the Hook legendary card! 🤯

I promptly sent it to Richard Holland for his autograph, and he was gracious enough to close the loop on my original goal!

Next Mint

XRPLWin hasn't announced a date or theme for the next set. He has said there will be more, that he has some solid ideas of his own, and that user-submitted ideas from X are in the mix.

What I can promise are good vibes.

If my own afternoon of ripping packs and signing cards is any guide, the next mint will draw the same crowd ... and possibly a bigger one.

Sources

Xahau Cards: https://xahaucards.com/
Xahau Cards minting stats: https://xahaucards.com/activity
FUZZY pack claim: https://xahaucards.com/claim
Xahau Vault sales: https://xahauvault.com/collections/rCardMi9ZsS5dBMrtZtaDeZchvW64W38c/xahaucards-genesis
On-chain card pack spending record (Cointelegraph, citing Blockworks Research): https://cointelegraph.com/magazine/pokemon-cards-as-rwas-gacha-spending-hits-records-as-crypto-sinks
Year-over-year growth in tokenized card packs (Decrypt, citing Messari): https://decrypt.co/370978/pokemon-cards-surging-crypto-platforms-gambling
Coinbase pack-opening teaser (Dexerto): https://www.dexerto.com/pokemon/coinbase-jumps-into-pokemon-tcg-craze-with-digital-packs-backed-by-real-cards-3413480/
XAH price (CoinGecko): https://www.coingecko.com/en/coins/xahau
JoelKatz (David Schwartz) autographs Xahau Genesis card: https://x.com/FuzzyClawX/status/2101066868761227693?s=20
Top sale on Xahau Vault: https://x.com/Xahau_Vault/status/2101893202693271696?s=20
Complete Genesis set achieved: https://x.com/Defi_daemon/status/2101062390594814148?s=20
Snapshot timing for FUZZY NFT holders: https://x.com/XahauCards/status/2108073920267976951?s=20

Xahau Vault

Hodor — Mon, 05 Oct 2026 11:10:41 GMT

A non-fungible token ("NFT") is simple in concept: a proof on a crypto network that says "this account owns this link." The link can point to an image, a ticket, a trading card or a license.

The network where it lives, proves who holds it.

That simplicity is exactly why the idea has continued past the initial peak of its popularity. The speculative frenzy has cooled down now; but the underlying question of how to acquire, trade and prove ownership of a unique digital item is still being elaborated.

One of the newest answers comes from a small but ambitious project: Xahau Vault.

Peak and Plateau

The height of the NFT boom was between 2021 and 2022. NFTs were a mass-market phenomenon. Roughly $41 billion in crypto was spent on NFT marketplaces in 2021, and monthly sales ran above $1 billion through the 2021–22 peak. Ethereum NFT trading alone reached about $3.5 billion a month in 2022.

A handful of chains dominated that activity:

Chain	Share of 2025 NFT volume	All-time NFT sales (to end-2024)	Leading marketplace(s)
Ethereum	~45%	~$44.9B	OpenSea, Blur
Bitcoin [BTC] (Ordinals)	~16%	~$4.9B	Magic Eden
Solana	Single digits	~$6.1B	Magic Eden, Tensor
Others (Polygon, Immutable, Mythos, Base)	Remainder	—	Chain-specific venues

Since then, the USD-denominated volume has fallen. Total NFT trading volume came to about $5.5 billion in 2025, down roughly 37% from 2024. By early 2026, monthly sales had settled near $300 million, about 70% below the peak.

But ... the number of transactions has held up even as prices fell. In October 2025 the market recorded 10.1 million sales in a single month, at an average price of just $54.

Conclusion: Fewer people are paying fortunes for profile pictures, and more are buying inexpensive gaming items, tickets and collectibles. The market is smaller, more concentrated and more utility-driven.

XRP Ledger & Xahau

The XRP Ledger (XRPL) took a distinctive approach to NFTs. Instead of building them with smart contracts, as Ethereum does, it made them a native feature of the ledger itself. Its XLS-20 standard, live since October 2022, supports minting, buy and sell offers, brokered sales and creator royalties enforced by the protocol.

Xahau, the "XRP Ledger but with smart contracts" chain, launched in 2023 with a deliberately leaner design. Its NFTs are called URITokens: each is a simple, standalone ledger object holding a link and an owner, and little else. The extra features, such as royalties, auctions and escrowed trades, are left to "hooks," Xahau's small, on-ledger smart contracts. The core is simple, and builders can program whatever trading logic they need.

New Player in Town: Xahau Vault

On the XRP Ledger, NFT trading has well-established homes. xrp.cafe is the ledger's largest NFT marketplace, where the long-running Fuzzybears collection has been one of the top trades. XRPL.to and XPMarket are also NFT trading venues with a presence on the XRP Ledger.

Xahau's NFT scene has been far thinner: An early pioneer, Cosmic Xahau, billed itself as the network's first NFT marketplace but closed its doors in 2025.

Xahau Vault now fills that vacuum ... right on time.

Cbot

Xahau Vault is the work of Cbot of Cbot Labs, one of the most prolific builders on Xahau. His portfolio already includes, unbelievably:

One Xahau, a DAO-governed DeFi ecosystem with an AMM, lending, perpetuals and staking, built entirely from native Hooks.
Odin's Eyes, a community security registry that helps the network respond to bad actors.
Xahau Vault, the newest addition; an NFT-and-URI marketplace.

Cbot actually began work on Xahau Vault before One Xahau. In September he moved it to the front of the queue so it would be ready for the go-live of the Xahau Cards mint.

Xahau Vault Capabilities

Getting started is simple.

In the preceding screenshot, Xahau Vault is displaying all of the images and URI information that it can pull for one specific collection - "Xahau Cards".

From a user standpoint, the site is straight-forward: Users log in with the Xaman wallet, and the site automatically pulls in any URITokens they already hold on Xahau. From there, they can:

Buy now at a listed price.
Swap peer-to-peer, trading URIs directly with another collector.
Show off their collection, with an option for other users to reach the owner through an Evergram link. 💬

The trading mechanics run on hook smart contracts, written by Cbot Labs, rather than on a custodial backend. Sales settle on-chain, and URI tokens never sit in the marketplace's own account. That's a key point of what it means to be 'non-custodial': if any front end ever went offline, collectors' tokens would remain in their own wallets.

Three collections are live on the site today: Xahau Cards, Odin's Eyes Raven Licenses, and a placeholder for Xahmoeba, a new "pet"-style project still on Xahau's testnet.

All three mint through on-chain minting Hooks: send XAH to the contract, and it sends back an NFT.

Intense Functionality

In its integration with Xahau Cards, the site can read all of the information from the URIs, and then offer a site user the ability to sort by those characteristics to help in the hunt for any missing cards. All of the associated URIs contain well-defined characteristics that can impact the desirability of specific cards; the rarity, the strength and toughness, and in the case of the Xahau set, 'faction':

Technical: The Hooks

The hooks (smart contracts) that run the on-chain functions are as follows:

The broker Hook handles buy-now sales. A buyer sends a single XAH payment, and the Hook buys the listed token, delivers it to the buyer and routes the fee.
The swap Hook lets collectors trade up to four NFTs per side in a single offer.
An auction Hook is coming next.

To help future entrepreneurs and artists, Cbot indicated he also plans to release an open-source minting contract that other creators can use for issuing their collections.

Technical: Protocol Change?

One gap in Xahau's architecture has been called out by Cbot: Royalties.

URITokens have no native creator fee today, but Cbot Labs has proposed an amendment that would let creators set a permanent royalty of up to 50% at mint time, paid automatically on secondary sales. If Xahau's validators vote it in, Xahau creators would gain the same built-in royalties XRPL creators enjoy.

Extending to the XRP Ledger

Xahau Vault currently handles Xahau URITokens only, but Cbot has confirmed plans to extend it to the XRP Ledger. Depending on the capabilities of FeatureExport, an amendment in development for Xahau, he may even be able to build cross-chain functions linking the two ledgers. Details of FeatureExport have not yet been published, so the shape of that bridge remains to be seen.

Win-Win Integrations

Near the top-right side of the browser-version of Xahau Vault, you will notice icons for both One Xahau, and Evergram - the Web 3.0 messaging app that runs on Evernode.

This speaks to a creative, synergistic approach that Cbot, Andrei Rosseti, and others have in supporting and extending the capabilities of fellow projects in the Evernode-Xahau space. For example, it's possible for a Xahau Vault collector to use Evergram to send a message to another person, to ask or inquire about specific cards or other URIs!

Pieces of the Puzzle

The pattern is obvious: Cbot builds the components he wants the network to have, instead of waiting for someone else.

One Xahau is the flagship DeFi application for Xahau.
Odin's Eyes is the network's voluntary, dynamic defense registry.
Xahau Vault is now one of the first dedicated NFT and URIToken trading sites on Xahau.

Xahau Vault went live alongside the Xahau Cards mint, and the two complement each other.

Collectors need a place to trade, and a marketplace needs collections worth trading. In a broader NFT market that is shrinking in dollars but maturing in capabilities, Xahau Vault is a practical piece of infrastructure that further extends the network's functions.

As a collector myself, I've used the site, I enjoy it, and I will continue using it as I complete my Xahau Cards collection. 🫠

Sources

The Block, 2026 NFT & gaming outlook (chain shares, OpenSea vs. Blur): https://www.theblock.co/post/382794/2026-nfts-gaming-outlook
CryptoNewsNavigator, NFT market in 2026 (2025 volume, Ethereum share): https://www.cryptonewsnavigator.com/academy/article/nft-market-2026-smaller-sharper-still-alive
CryptoRank, "Are NFTs Dead in 2026?" (monthly sales vs. peak): https://cryptorank.io/news/feed/ef301-are-nfts-dead
KuCoin News, 2025 volume decline: https://www.kucoin.com/news/flash/nft-market-shows-signs-of-recovery-in-2026-amidst-lingering-challenges
CoinLaw, NFT market statistics (sales counts, average price, 2022 peak): https://coinlaw.io/nft-market-growth-statistics/
Fortunly, NFT statistics (2021 marketplace spending): https://fortunly.com/statistics/nft-statistics/
Axis Intelligence, all-time NFT sales by chain: https://axis-intelligence.com/nft-statistics/
EarnPark, marketplace landscape (Magic Eden, Solana volume): https://earnpark.com/en/posts/nft-market-2026-dead-or-just-different/
Xahau whitepaper (URITokens vs. XLS-20): https://xahau.network/docs/resources/whitepaper/
XLS-35 URIToken proposal: https://github.com/XRPLF/XRPL-Standards/discussions/89
Cosmic Xahau, early Xahau marketplace: https://www.cosmicxahau.com
xrp.cafe, XRPL NFT marketplace: https://xrp.cafe/
XRPL.to, Fuzzybears collection: https://xrpl.to/nfts/fuzzybears
Xahau Vault: https://xahauvault.com/
One Xahau: https://onexah.io/defi/pools
Odin's Eyes project: https://odinseyes.io/
Cbot Labs, Xahau governance proposal (One Xahau, Xahau Vault, Odin's Eyes): https://github.com/Cbot-XRPL/one-xah-L1-seat
Cbot Labs, URIToken broker Hook: https://github.com/Cbot-XRPL/xahau-uritoken-broker
Royalties Amendment for Xahau: https://github.com/Cbot-XRPL/Native-Roylties-For-URI-Tokens

Evernode For A Low-Trust World

Hodor — Wed, 30 Sep 2026 21:35:36 GMT

The 2026 Edelman Trust Barometer, a survey of approximately 34,000 people in 28 countries, found that 7 in 10 are unwilling or hesitant to trust someone with different values or information sources.

National government leaders and major news organizations posted the largest trust losses. The only gains went to people in close circles: neighbors, family, and friends.

Trust is retreating from institutions and moving toward what people can personally verify.

The pattern shows up everywhere. Personal data leaks in breach after breach. Official data is doubted by whoever distrusts the publishing organization. And in finance, customers have learned the hard way what happens when one party holds both the assets and the control:

FTX. The SEC alleged that Sam Bankman-Fried diverted customer funds to his trading firm, Alameda Research, and used them for venture investments, real estate, and political donations.
Celsius. In January 2023, a U.S. bankruptcy court ruled that crypto in roughly 600,000 "Earn" accounts belonged to the bankruptcy estate, not the customers. Depositors became unsecured creditors of assets they thought they owned.

Both were crypto companies: centralized intermediaries sitting on top of decentralized rails. Any centralized weak point requiring blind trust in a single operator poses a major risk.

That is one of the largest drivers of decentralization.

Evernode

Evernode turns ordinary software into software that no single party controls.

Its dApps run as normal programs, written in almost any language, that can read and write files, call web services, and serve traffic to the open internet. The difference is that each app runs on several independent hosts at once.

The consensus engine, called HotPocket, keeps those copies in-sync: The instances check with each other that they are processing the same inputs and state, and agree on results with no central authority.

Each dApp essentially creates its own small blockchain, an "AppChain," made up of the hosts it runs on.

Three more parts:

A permissionless host marketplace. Anyone can run the hosting software on a Linux server and lease capacity to dApps ... paid hourly in Evernode's token, Evers (EVR).
Xahau. Registry, rewards, and governance live in automated accounts called "hooks", on the Xahau Network, an "XRP Ledger with smart contracts", so no company controls who is a host.
Peer-tested reputation. Every hour, hosts are placed in random groups of up to 64 that test each other's computing power and reachability.

One architectural detail matters a lot: Hosts are identifiable: they register a public email and a domain name, are expected to follow local hosting laws, and can revoke a lease if legally required. That makes Evernode a poor fit for anonymous, anarchist use cases, and a strong fit for something else: accountable decentralization. No single operator can cheat, yet every operator is a known, legally reachable entity.

Institutions, regulators, and cooperatives merge naturally with this architecture.

The Big Idea

Much of what a trad-fi platform is, operationally, is software plus a trusted operator. A clearinghouse, an escrow agent, a land registry, and a stock transfer agent are all "databases", essentially, run by someone that stakeholders must trust.

Today, parties who don't trust each other have two ways to share infrastructure.

They can appoint a neutral operator, who becomes a possible point of failure.
Or they can form a consortium with governance, lawyers, and a hosted platform.

Evernode offers a third option: a consortium without an operator.

The application itself becomes the neutral party, replicated across hosts that no single member controls. Institutions provide four kinds of trust: correctly executing rules, keeping secrets, determining truth, and providing recourse.

Evernode is strongest at the first: "correctly executing rules"

Social Trust: A Public-Record Witness Network

The problem: Official information is changed for unclear purposes. Statistical series are revised without notice, reports disappear, web pages are edited, and terms of service transform overnight.

Today's defense is the archive, usually run by a single organization ... which is one point of failure.

In October 2024, the Internet Archive suffered a breach exposing 31 million records alongside repeated denial-of-service attacks, and took services offline while it recovered. Any archive one entity controls can also be sued, pressured, or defunded.

The solution: replace one trusted archivist with many independent witnesses who must agree. Think of the difference between one person's diary and a statement notarized by a dozen witnesses in different countries.

This use case - using Evernode as an archivist solution - showcases the network's strength; witnesses would spread across jurisdictions and unrelated operators. A fascinating version of this archivist idea might mix those hosts with named institutional witnesses, such as university libraries and press-freedom groups, so the record is credible enough to cite.

KJV Forever - Real Example

One of the first projects in this vein is known as "KJV Forever," which seeks to verify & streamline the provenance of the King James Bible, one of the most popular representations of the various canonical texts:

The project description states:

"The text is not kept on one company’s server. It lives inside a HotPocket smart contract on the Evernode network: several independent machines each hold the full text and must agree, byte for byte, on every response you receive."

Finance: Inter-Bank Escrow

"Escrow" means money or assets that are held until agreed conditions are met.

Between banks, it underpins trade finance (pay the exporter when shipping documents arrive), cross-border conditional payments, and securities settlement. Today it runs on correspondent banks, escrow agents, and message reconciliation: expensive middlemen whose main product is neutrality.

Evernode fits this problem like a glove:

Known parties who don't fully trust each other. A cluster run by identified parties guarantees that no one, including the counterparty, can alter the escrow state alone.
The parties can be the hosts. Each bank can run its own nodes, alongside neutral tiebreakers such as an auditor or even a regulator.
Escrow logic is deterministic. "If a document with this fingerprint is signed by these parties before this date, release; otherwise refund" is exactly what replicated consensus handles well. (think of the work being done by Andrei Rosseti here)
Proven software. Bank workflows parse ISO 20022 messages, handle trade documents, and call sanctions-screening services. Evernode runs the Java, C#, or Python libraries banks already use.
One chain per deal?! There is no need to onboard the whole industry first: A cluster can theoretically be spun up per transaction or corridor and retired afterward.

The competition: BIS Project Agorá brings together seven central banks and more than 40 institutions, including JPMorgan, HSBC, and UBS. Partior, LSEG's Digital Settlement House, and the Canton Network are all targeting the same banks.

Evernode's most-likely market is everyone those consortia underserve: regional banks, credit unions, emerging-market trade corridors, and bespoke bilateral deals that two mid-sized banks could stand up in weeks.

The obstacles for an Evernode solution are institutional, not technical.

Fiat still moves on trad-fi rails; Partior's own settlement banks, as of September 2026, still square up with each other the traditional way. Settlement finality needs legal recognition, contract upgrades need multi-party sign-off, and banks typically only buy from vendors with irconclad service level agreements (SLAs).

The likely path for this use case is a commercial firm packaging Evernode's engine for mid-tier banks ... like how Digital Asset packages Canton. 🤔

A.I. Trust Issues

An A.I. agent can't open a bank account, sign a contract, or be legally liable. In addition, it can be cloned or discarded for free, so reputation is ephemeral at best.

Therefore, when two companies' agents negotiate, there is a 'trust' question: whose server hosts the deal?

Evernode answers part of this ideally:

Neutral ground. A negotiation, escrow, or shared record can run on a cluster neither company controls.
Guardrails outside the model. Spending caps, allowlists, and approval thresholds enforced by consensus and by Xahau hooks can't be "talked around" by a manipulated agent.
Verified rules and an audit trail. Every state change is agreed-upon by independent hosts and recorded, so disputes have evidence.

Evernode does not have an answer for everything, however.

LLMs are non-deterministic, so three nodes asking the same model get three different answers, which breaks consensus. Scott Chamberlain has described the right approach: deterministic rules run inside consensus, while the agent's model calls run in a separate process outside it.

Trad-Fi Incumbents

Mastercard launched Agent Pay in April 2025, built on tokens scoped to individual agents, and Visa responded a day later with Intelligent Commerce. Google's Agent Payments Protocol (AP2) uses cryptographically signed "mandates" as proof of what a user authorized, and supports stablecoins through Coinbase's x402 protocol.

The two models compete:

The incumbent's model extends trusted intermediaries: card networks vouch for agents and absorb fraud risk, as they do for cards today.
The DePIN model builds trust-minimized infrastructure: keys, stablecoins, and code-enforced rules, much of it from grassroots crypto projects.

The likely outcome is a hybrid. Evernode's natural role in either world is the deterministic referee: the neutral layer where agents from different owners meet, agree on rules, and settle.

Evernode Was Created For A Low-Trust World

The low-trust transition won't happen overnight.

It will be a slow replacement of "trust me" with "check for yourself." Evernode doesn't make anyone honest, keep every secret, or decide what is true. Instead, it lets people who don't trust each other run the same software, with no one in charge and everyone simultaneously accountable.

Basic examples from this article: A witness network that exposes secret revisions, an escrow banks can trust, and a neutral location where AI agents meet.

The first adopters are building the kind of tools the next decade will need ... ones that enshrine neutrality. If you've been waiting for proof that trust can be engineered rather than depending on one individual or organization, look no further than Evernode.

Sources

2026 Edelman Trust Barometer press release: https://www.edelman.com/news-awards/2026-edelman-trust-barometer-society-slides-into-insularity
Edelman 2026 insights for financial services: https://www.edelmansmithfield.com/2026-Edelman-Trust-Barometer-Key-Insights-for-Financial-Services
SEC charges against Sam Bankman-Fried (FTX): https://www.sec.gov/newsroom/press-releases/2022-219
Celsius Earn accounts ruling analysis (O'Melveny): https://www.omm.com/insights/alerts-publications/the-words-matter-bankruptcy-court-finds-clear-terms-of-clickwrap-agreement-made-customer-cryptocurrency-property-of-celsius-bankruptcy-estate/
Evernode official site: https://evernode.org/
Evernode platform overview (HotPocket): https://docs.evernode.org/en/latest/platform/overview.html
Internet Archive 2024 breach report: https://www.infosecurity-magazine.com/news/internet-archive-breach-31m/
Internet Archive services update, Oct 2024: https://blog.archive.org/2024/10/21/internet-archive-services-update-2024-10-21/
Provenance of foundational texts: https://x.com/EvernodeXRPL/status/2092725660192240074?s=20
KJV Forever: https://kjvforever.com/#/about
BIS Project Agorá prototype report coverage: https://www.ledgerinsights.com/bis-project-agora-prototype-keeps-central-bank-money-under-domestic-control/
Partior and LSEG settlement bank leg: https://theindustryspread.com/partior-lseg-dish-settlement-bank-leg-q1-2027/
JPMorgan deposits on Canton Network: https://www.mexc.com/it-IT/news/427281
Building AI agents on Evernode: https://lexautomagica.com/2026/05/13/adventures-in-ai-consensus-1-bringing-autonomous-economic-agents-to-evernode/
Mastercard Agent Pay explainer: https://eco.com/support/en/articles/14845483-mastercard-agent-pay-explained
Visa Intelligent Commerce: https://www.visa.com/en-us/solutions/intelligent-commerce
Google Agent Payments Protocol (AP2) announcement: https://cloud.google.com/blog/products/ai-machine-learning/announcing-agents-to-payments-ap2-protocol
Coinbase x402 in AP2: https://www.coinbase.com/developer-platform/discover/launches/google\_x402

XahauCards

Hodor — Fri, 11 Sep 2026 14:50:22 GMT

Card collecting - on-chain - is a new, and fast-growing market in the cryptocurrency space.

"Packs," "pulls," "rarity," "gacha" ... mysterious terms to outsiders; but underneath it all there are two business models.

Tokenized RWA cards ("burn to redeem"). This is the model behind most of the big numbers: think Collector Crypt, Courtyard, and Phygitals. A professionally graded physical card (PSA, BGS, or CGC slabbed) gets sent to an insured vault first. A token is then minted, 1:1, against that specific card. You can trade the token, sell it back to the platform instantly in some cases, or burn it to have the actual card shipped to you.

Digital-native cards ("only on the blockchain"). This is the older lineage - NBA Top Shot, Gods Unchained, and most XRPL NFT/Xahau URI-card projects. There's no physical card. Instead, the electronic card is the token. Its scarcity, stats, and pull odds are entirely software-defined, and its value comes from community, art, or gameplay.

Fuzzycards On XRP Ledger

The XRP Ledger's most visible entry in this space, Fuzzycards, actually implemented a novel approach: It launched as a purely digital NFT collection tied to the $FUZZY memecoin community, and only afterward added a physical-redemption layer: holders burned their digital NFTs starting in April 2026 to claim printed 1st Edition packs from a 29,450-card run, including 2,356 holographics. Most projects vault the physical card first and mint a digital twin second. Fuzzycards did the opposite - mint digital first, print physical second.

The Chains Compared

The dollar volume driving the industry's headlines is concentrated on a small number of chains at present. Here's a rough breakdown, based on ballpark figures reported in 2026:

Chain	Est. share	Rough monthly volume	Key platform(s)
Solana	~58–65%	~$150M–$250M	Collector Crypt (dominant), Phygitals
Polygon	~10–15%	~$80M–$90M	Courtyard
BNB Chain	~8–12%	Tens of $M	Collector Crypt (multi-chain expansion)
Base	~3–5%	Single-digit $M	Emerging, no dominant platform
Ethereum	~2–4%	Single-digit $M	Mostly a settlement/marketplace layer (OpenSea)
XRP Ledger	<1%	Likely low hundreds of thousands to low millions	Fuzzycards

Every mainstream report on this industry consistently communicates "on-chain trading cards" as a Solana-and-Polygon story. Other than the growing popularity of Fuzzycards, the XRP Ledger & Xahau don't show up materially ... yet.

This is the context XahauCards is stepping into.

XahauCards

XahauCards is a new project built on Xahau, the hooks-enabled version of the XRP Ledger.

XahauCards is created by an entrepreneur, known primarily for his cutting-edge XRPLWin Network Explorer, who goes by XRPLWin on X. Rather than using a standard NFT, the project mints cards as URITokens, a lighter-weight Xahau-native token type built specifically for cheap, simple proof of ownership.

XahauCards falls into the digital-native camp: there's no vault, and no physical card behind any of it.

The card is the token.

Playable Game ... But No Rules Yet

Getting a card works less like buying a pack off a shelf and more like directly opening a digital card pack.

You pay a small amount of XAH (roughly $2 at the current peg) to "roll," and the ledger's own randomness - seeded from data no one, including the project itself, can predict or manipulate - decides your outcome in two steps.

First it determines which rarity tier your opened card lands in.
Second, it then picks a specific card at random from within that tier.

The cards follow a familiar color scheme that corresponds directly to their rarity, displayed along the card border:

Common: Gray
Uncommon: Green
Rare: Blue
Epic: Purple
Legendary: Gold

Here's the twist that gives the project some of its collector's appeal: for all cards - other than legendary cards - the stats (attack and health) are also rolled, within a value appropriate to that card's rarity. Two people can pull the exact same 'card', but end up with two cards that are valued very differently.

The exception is the legendary tier - those mint at fixed, maximum stats every time, which is part of why they (should be) more valuable.

There's no rulebook yet for an actual game played with these cards.

XRPLWin has said rules will be published on-site, but only after the initial minting period wraps up.

The Genesis Set

The first set and its artwork is about the Xahau network's architecture. It's organized into six factions (categories) - Hooks, Consensus, Tokens, Bridge, Genesis, and Faults - each a reference to a piece of how Xahau functions.

A second, planned set will break from that and focus on a completely new theme (to-be-announced).

How Many Cards Will Be Minted

The initial mint is targeting 5,000 packs of 5 cards each, distributed across those six factions. Within that pool, there are 150 distinct cards to collect, split evenly across the six factions at 25 cards apiece, arranged from common down to a single legendary per faction.

Owning any one copy of a card completes that slot in a collection, regardless of how its stats happen to roll.

But for certain collectors, "any copy" is not the ultimate goal. The real hunt will be for perfects - copies that rolled maximum stats for their card. Expect those to command a premium in secondary trading.

When

Minting and sales windows remain TBD. I recommend following the 'X' account at: @xahaucards

The Website

The XahauCards website is central to the first issuance.

The cards themselves boil down to ones-and-zeros in a limited-supply minting. Because there are no physical counterparts (currently) for XahauCards, the website is the one place that brings these URI tokens to life, using artwork that is tied to each one. While there may be other representations of a card, the XahauCards website is building incredible tools for collectors to use, to track their own progress.

Achievements

The Achievements website feature adds a fun twist for the collector.

The achievement categories are very much like what you'd see in a popular video game - it provides automatic tracking of unlocked, noteworthy waypoints in a collector's journey.

Two examples:

"On the Board" (Hold a tenth of all the cards there are)
"Full Court" (Hold every Legendary at the same time)

There are many more (50 total) that XRPLWin has defined, to add a fun twist for card owners.

Card Autographing

This is one of the more exciting aspects of the initial set - and XahauCards in general.

A card owner can request that a card be 'signed' by a third party that has been whitelisted by the XahauCards site. It's not as simple as XRPLWin just adding names - he has to do some behind-the-scenes work to make it happen, including acquiring the public signature of the person, in addition to getting their wallet's r-address.

The request (link or QR code) can then be communicated by the card owner to the person providing their digital autograph. Once that person clicks on the link, and signs the card, the result is a URI that contains the cryptographic proof of that autograph, along with the official image of that unique card, altered forever!

Autograph signing has long been part of card collecting; in the case of sports cards, a signed, first-edition card from a major sports star can enhance the value.

The difference here is that the signature is cryptographically proven & stored as part of the URI; another innovation made possible via Xahau 🪝 hooks!

Future Plans

Beyond the differently-themed second set, XRPLWin has confirmed that real, playable game rules are coming - but not until after the current mint concludes.

When asked directly whether physical redemption (like Collector Crypt, or Fuzzycards' after-the-fact model) might ever be layered on top of XahauCards, XRPLWin was candid: he's still learning about what that would actually involve; and while he isn't ruling it out, there's no concrete plan as of this writing.

He also indicated that all trading of the cards will be on secondary sites that provide the ability for owners to make offers (think Bithomp, et al...), instead of a native interface on the XahauCards website.

Technical: How Hooks Are Used

I asked XRPLWin "what prompted you to consider issuing collector cards on Xahau?" His answer:

"Smart contracts (hooks). You simply can't do this kind of logic on-chain without a custodial server on many other chains. For example, to make an NFT programmable, you usually need an off-chain database or some kind of processor."

The cards are valued because of their rarity - and the limited-quantity minting for the Genesis edition of cards is handled by a series of these Xahau smart contracts. The four hooks are encapsulated, to intuitively communicate their functions:

shop: Handles each purchase
mint: Handles edition counters
doors: The data storage for the shop
manager: Loads the card table the mint reads & handles card autographing

In one of the most generous 'shares' I've seen recently, XRPLWin has decided to make the hooks open-source, for a couple of reasons:

Publish the code so that a hook reviewer can verify the smart contracts
To help others that may also want to issue cards on Xahau

The repository is located on Github: https://github.com/xrplwin/xahaucards-hooks

My Take

I spent some time on the XahauCards testnet ahead of writing this, and I'll admit it worked on me exactly the way it's designed to.

When a fresh, un-opened pack of 5 cards was presented, for a moment I completely forgot that I was on the test site:

Watching the rarity roll, knowing a legendary might be next, produced a jolt of FOMO - the same feeling that's driven large sums of cryptocurrency into Collector Crypt's machine on Solana.

I predict we'll see a healthy secondary market develop around XahauCards: there already is a small, devoted community willing to pay hard XAH for cards nobody else has heard of ... and remember ... the number of minted cards is capped at 25,000 (only), with the option of XRPLWin capping it even earlier ... if he so chooses.

Cards Are The New Meta?

It's a strange thing to watch cardboard - or its digital counterpart - become one of crypto's more resilient business models in a bear market.

Maybe it shouldn't be surprising: opening card packs has worked on the human brain since long before blockchains existed, and putting them on-chain just made the reveal faster and the resale instant.

XahauCards debuts in a unique moment in cyrpto's strange progression through novel use cases ... many revolving around dedicated & passionate collectors.

Sources

CoinGecko explainer on Collector Crypt and its Gacha mechanics: https://www.coingecko.com/learn/what-is-collector-crypt-cards
Telos investment write-up on Collector Crypt's growth: https://x.com/HelloTelos/status/1969072118101954596
Collector Crypt's own announcement of its $1B revenue milestone: https://x.com/Collector_Crypt/article/2091958031017726050
Official Fuzzycards project site: https://www.fuzzycards.com/
KuCoin community post on Fuzzycards' physical pack arrival: https://www.kucoin.com/news/community/XRP/69e13fc2a8c1cb00074cc742
Q&A via 'X' DM with XRPLWin: XRPLWin
XahauCards official website: https://xahaucards.com/
XahauCards whitepaper: https://xahaucards.com/whitepaper/
XahauCards on X (@XahauCards):https://x.com/XahauCards

Everlink

Hodor — Fri, 04 Sep 2026 19:06:52 GMT

Digital payments still have a middleman problem.

Even when the coins themselves sit on a public ledger, the "switch" - the piece of software that routes a payment from Alice to Bob - usually belongs to a company.

That company could (theoretically) change the fees, freeze an account, or go offline.

Payment channels were supposed to help by moving small payments off-chain, but they create a different problem: someone still has to keep a payments hub online.

Everlink

Everlink’s answer is not a better human operator. It is no operator.

The project is an Interledger connector implemented as a HotPocket smart contract on Evernode. Several hosts run the same program, agree every few seconds, and share one Xahau account that needs a majority of their keys to sign. Peers prepay through payment channels, send ordinary Interledger packets, and the cluster routes the payment, takes a small fee, and settles on-ledger.

And one of the most incredible innovations, is that those fees can then pay the cluster’s own Evernode rent in EVR! 😲

After the account’s master key is turned off, only the cluster’s signer list can move the money.

The Initial Experiment

On September 3rd, a three-host cluster on Evernode mainnet settled a real Xahau payment: "Alice" opened a 5 XAH channel, streamed a claim, and paid "Bob" 1 XAH in about 24 seconds. The cluster co-signed the redemption and the payout, then returned her unused 2 XAH.

Hosting for the first run cost a near-zero amount; a second cluster later extended its own leases automatically.

Who, What, When

@XRPLNick published the work the same day, calling it “an Interledger connector that nobody runs.”

The code is open-source, and available at GitHub: github.com/XRPLNick/everlink.

What It All Means

In plain language, Everlink shows that financial plumbing can behave like a vending machine instead of a human-run business.

You do not have to trust Nick - or any host - to “keep the books.” Once the master key is disabled, there is no (one) person that can interfere in the process.

A payment switch can take money in, send money out, and pay its own infrastructure bill ... automatically!

More innovations incoming

This is an early experiment.

But ... it is a reminder of why hosting smart contracts next to a payments ledger is a powerful concept. When software can route value, sign for itself, and renew its own lease, it opens the doors to help solve many other intractable problems for the designers of the new finternet.

Nick, whose 'X' profile describes his focus on 'freedom tech', indicated he's still considering the next logical steps for Everlink ... and he shared a powerful part of his own perspective:

"The best way to predict your future is to create it."

Sources

Announcement of the mainnet connector: https://x.com/XRPLNick/status/2095390274440790321
Project README: https://github.com/XRPLNick/everlink/blob/main/README.md
GitHub repository: https://github.com/XRPLNick/everlink
Evernode: https://evernode.org/
Interledger: https://interledger.org/developers/get-started/

Stablecoins: XRP Ledger & Xahau

Hodor — Thu, 03 Sep 2026 19:04:08 GMT

In July 2014, a small team led by Dan Larimer - the same engineer who founded EOS - launched something called BitUSD on a blockchain called BitShares. The idea: lock up volatile crypto as collateral, and mint a token that tracks the US dollar. Charles Hoskinson, who'd later found Cardano, was involved in the early concepts. Two months later, a project called NuBits tried a different approach - no collateral at all, just an algorithm that expanded and contracted supply to defend a $1 peg.

Then, in October 2014, a third project called Realcoin launched on top of the Bitcoin network. It was renamed a month later ... to Tether.

Tether: Of the three, only Tether survived contact with a real market. BitUSD's collateral crashed with the rest of crypto in 2018 and never recovered. NuBits' algorithm broke under sustained selling, twice. Tether won because because it was easy to understand: one token, backed by one dollar.

That's the model that dominates the market today.

In 2015, stablecoins existed as a convenience - they let new centralized crypto exchanges (CEXes) give traders a place to park value that wouldn't crash overnight. It let people move between crypto and "cash" using cryptocurrency ... without touching a bank.

That was the secret sauce.

Fast-forward to 2026: The total stablecoin market now sits above $300 billion. Three of the world's largest economies - the United States, the European Union, and Hong Kong - now regulate stablecoin issuance.

Stablecoins are settling remittances into Ethiopia, funding B2B supplier payments in Latin America, and used directly by the proprietary machinery of Visa, Mastercard, PayPal, and a growing list of banks. What started as an exchange's small project has become something regulators, central banks, and Fortune 500 payment companies are all racing to understand.

Why The Attention?

Stablecoins solved a problem: moving money across a border.

Lower cost: Traditional cross-border transfers through correspondent banking typically take two to five business days, cost around 6% in fees, and route through multiple intermediary banks - each one adding a delay, and more cost. By contrast, stablecoin rails settle the same transfer in seconds to minutes, for a fraction of a percent.

Trust: A dollar sitting in a fractional-reserve bank account is, strangely-enough, a loan the bank made to itself. The deposit is an IOU, not cash in a vault, and you're relying on regulation and deposit insurance to make you whole if something goes wrong.

A properly regulated stablecoin, by contrast, is legally required to hold reserves 1:1 against every token in circulation, with periodic public disclosures.

Add to that: 24/7/365 settlement with no banking-hours restriction, and it's clear that using stablecoins is highly preferable to traditional rails.

It's Happening

The numbers, while still small relative to world-wide payments as a whole, are moving fast in one direction.

B2B - "business to business" - stablecoin payment flows reached roughly $226 billion annually as of early 2026, growing 733% year-over-year - and B2B now represents the large majority of (non-trading) stablecoin payment volume.

Stablecoin B2B transfers cost roughly 0.1–0.5% per transaction, against 3–6% for traditional wires. In Latin America specifically, 71% of firms surveyed already use stablecoins for cross-border settlement. 😲

Remittance corridors into Sub-Saharan Africa, where traditional fees still average over 6%, are a particular focus for stablecoin rails. The Ethiopia remittance corridor - discussed later - is a noteworthy example.

U.S. Headline Legislation

The regulatory turning point in the U.S. was the GENIUS Act, signed into law July of 2025.

Genius Act: It restricts issuance to "permitted payment stablecoin issuers" operating through a bank subsidiary, an Office of the Comptroller of the Currency (OCC)-supervised nonbank, or another state-qualified entity. Reserves must be 1:1 in cash or similarly liquid assets, monthly disclosure is mandatory, and - notably - issuers cannot pay interest or yield to holders. The FDIC & FinCEN/OFAC have been rolling out changes and updates to their policies and procedures.

Clarity Act: A companion bill, the Digital Asset Market Clarity Act, would go further - establishing which digital assets count as securities versus commodities, and which regulator oversees exchanges and brokers.

It passed the House in July 2025 and cleared the Senate Banking Committee in May 2026, but it has since stalled: a Senate floor vote was pushed to mid-September 2026. Unlike GENIUS, CLARITY is not yet law - it remains the most-watched, unresolved piece of US crypto policy as of this writing.

World-Wide Regulation

Outside the U.S., the regulatory picture is a patchwork - some jurisdictions are fully operational, and others are finalized on paper, but not yet binding.

The following table provides an executive summary of those efforts.

Jurisdiction	Law	Regulator(s)	Status (Aug 2026)	Issuer Requirements	Reserve Rules	Threshold/Tiers
US	GENIUS Act	OCC, Fed, FDIC, states, FinCEN/OFAC	Enacted; rules in NPRM stage	Must be a PPSI: bank sub, OCC nonbank, or state-qualified	1:1 cash/liquid assets; monthly disclosure; no yield to holders	State issuers capped at $10B, then move to federal
EU	MICA	NCAs, ESMA, EBA	Fully in force	EMT: e-money/credit institution license. ART: Art. 16 authorization	Segregated, held at EU credit institutions, par redemption	No hard cap; "significant" EMTs face added limits
UK	FSMA Cryptoassets Regs 2026	FCA, BoE	Rules final (Jun 2026); full effect Oct 2027	FCA authorization to issue a Qualifying Stablecoin	Single-currency backing only; systemic issuers: 70% gilts/30% BoE deposits	Standard FCA track vs. BoE "systemic" designation
Hong Kong	Stablecoins Ordinance	HKMA	In force; first licenses granted Apr 2026	HKMA license; ~HK$25M min. paid-up capital	100% high-quality liquid assets, segregated, audited, par redemption	Small first cohort; entity-by-entity approval
Singapore	MAS SCS framework	MAS	In force (Jul 2026)	Major Payment Institution license required	MAS-set reserve/capital/redemption standards	SGD or G10-currency pegs only
Japan	Payment Services Act	FSA	In force; full effect Jun 2026	Bank-only: banks, trust cos., or fund transfer providers	100% segregated liquid assets; par redemption	No size cap; gated by entity type, not volume
South Korea	DABA (proposed)	FSC vs. BOK (disputed)	Not in force; delayed to H2 2026+	Unresolved: BOK wants ≥51% bank ownership; FSC opposes	Draft: ≥100% reserves, segregated custody	No final tiers; ownership rule still contested

The pattern. Across nearly every finalized approach - MICA, GENIUS, Hong Kong's Ordinance, Japan's Payment Services Act - there are commonalities: full reserve backing, licensed issuers, and guaranteed redemption.

Functional Standards

Regulation hasn't stopped at "hold enough reserves." Increasingly, it reaches directly into how a stablecoin has to behave on-chain.

The (U.S.) GENIUS Act requires issuers to maintain the technical capability to "block, freeze, and reject specific or impermissible transactions" - and this extends to seizing or burning tokens in response to a lawful US order.

MICA grants EU regulators freeze powers during reserve investigations and requires issuers to maintain the technical ability to freeze tokens for sanctions enforcement. Hong Kong has gone further, publishing a reference smart-contract architecture with named roles - a PAUSER to halt transfers during an incident, a FREEZER to lock individual wallets, a BLACKLISTER to manage prohibited addresses - all deliberately separated so no single key can do everything.

None of this is theoretical.

Major issuers had already built freeze and blacklist functionality into contracts before regulation caught up - this is one case where industry practice led, and law is now formalizing those standards.

A true "clawback" - a function that reverses a completed transfer without the recipient's cooperation - is rare; what's actually required is closer to freeze-then-burn: lock a wallet, then destroy tokens through a lawful redemption or seizure process, rather than debiting an account.

Layer One Fit: XRP Ledger & Xahau

Most of the compliance architecture - freeze functions, blacklists, role-based access control - has to be built by the issuer, from scratch, as custom smart contract code on general-purpose chains like Ethereum. Every issuer effectively reinvents the same wheel; every implementation is a new audit & attack surface, and may contain unforeseen weaknesses.

The XRP Ledger takes a fundamentally different approach: freeze and clawback are native, protocol-level features, not application code an issuer has to write and maintain. XRPL's trust-line system supports Individual Freeze, Deep Freeze (blocking a wallet from both sending and receiving), and Global Freeze - a direct match to the "block, freeze, and reject" language written into the GENIUS Act. Clawback is similarly built-in: an issuer opts in with a flag before ever issuing a token, then executes a native transaction to reclaim funds, including tokens deposited into an automated market maker.

Ripple's RLUSD already uses this pattern: Deep Freeze to lock an account during an investigation, followed by Clawback once a court order arrives. And it works identically whether RLUSD is running on the XRP Ledger or on its Ethereum-based counterpart, according to David Schwartz - which is itself a demonstration of how much more directly XRPL maps onto what regulators are now demanding, compared to a general-purpose smart contract chain.

Xahau, a network built on XRPL's core, inherits a set of those native compliance primitives, and then adds something the XRPL doesn't have: Hooks, a system of bounded, account-centric, WebAssembly-based programs that run inline with every transaction. Where the XRPL gives an issuer freeze and clawback as fixed, built-in tools, hooks let an issuer add a layer of custom logic - automatic transaction screening, conditional whitelisting via deposit preauthorization, and jurisdiction-specific rule engines. Xahau's own positioning is explicit about this: it's built with regulated and enterprise compliance use cases in mind, not as an afterthought.

Xahau is already operating according to this paradigm with real money.

An initial remittance project has since been scaled into a large three-way arrangement between TerraPay, Coopbank, and Quantoz Payments - a Dutch, DNB-regulated e-money institution - routing euro-denominated payments into Ethiopia's $5-billion-a-year inbound corridor. Quantoz's MICA-compliant euro stablecoin, EURQ, is the settlement asset for the euro leg, issued natively on Xahau alongside deployments on Ethereum, Stellar, Algorand, and the XRP Ledger.

XRPL and Xahau aren't the only chains built this way.

Stellar and Algorand both offer similar native freeze and clawback primitives as first-class ledger features rather than custom contract code, and Quantoz deliberately issues across several of these "compliance-native" chains rather than picking just one.

That's an interesting pattern - a regulated, supervised issuer choosing to deploy the same asset across XRPL, Xahau, Stellar, and Algorand in parallel suggests that the market sees real, practical value in this whole family of utility chains, not just enthusiasm for any one of them.

Within that family, Xahau's combination of inherited native primitives plus hooks-based programmability gives it an edge for issuers who need more than the baseline - without forcing them into the far larger complexity of a general-purpose smart contract chain to get there.

It Will Only Grow

The most visible examples of this thesis in practice are RLUSD on the XRP Ledger and EURQ on Xahau - a GENIUS-Act-aligned dollar stablecoin and a MICA-compliant euro stablecoin, both built on chains where the compliance machinery was already sitting there, as a native feature.

It is high-probability that more will be added.

As regulated issuers look for a chain that doesn't force them to build and audit their own freeze-and-seize logic from the ground up, and as more everyday users get comfortable moving value instantly through non-custodial wallets like Xaman rather than waiting on a bank's internal batch process, the compelling argument for XRPL and Xahau only gets stronger.

Why trust a third party to keep an accurate, honest copy of your ones and zeros - hoping they've reconciled their ledger correctly, hoping their reserves are real - when a crypto network can prove it, and hand you the keys?

X | X>

Sources

Early stablecoin history: https://www.deltecbank.com/news-and-insights/the-history-of-stablecoins/
Tether's origin and timeline: https://www.tradingview.com/news/beincrypto:7cd73f950:0-tether-usdt-turns-8-a-history-of-fud-regulation-and-growth/
Stablecoin market and cross-border stats: https://reap.global/blog/stablecoin-statistics-2026
B2B stablecoin payment growth: https://stablecoininsider.org/stablecoin-b2b-cross-border-payments/
Stablecoins' share of world-wide payment flows: https://www.openfx.com/stablecoins-cross-border-payments-report-2026
GENIUS Act overview: https://www.fintechweekly.com/magazine/articles/stablecoins-mainstream-payments-genius-act-2026
CLARITY Act status: https://tech-insider.org/clarity-act-2026-status/
EU MICA dashboard: https://defillama.com/mica
RLUSD freeze/clawback on Ethereum and XRPL: https://u.today/ripple-cto-explains-crucial-rlusd-stablecoin-feature
EURQ launch on Xahau: https://thecryptobasic.com/2025/10/30/quantoz-unveils-euro-backed-stablecoin-eurq-on-xrp-ledger-sidechain-xahau-network/
TerraPay/Coopbank/Quantoz Xahau deal: https://xpert.page/hodor/blog/xahau-settlement-terrapay-coop-bank-and-quantoz
Quantoz expansion to Algorand: https://www.quantoz.com/blog/quantoz-brings-european-regulated-stablecoins-eurq-and-usdq-to-algorand
Quantoz multi-chain roadmap: https://stablecoininsider.org/quantoz-payments/

Evergram: Orion Release

Hodor — Thu, 27 Aug 2026 14:40:38 GMT

Brad Garlinghouse, Ripple's CEO, has called XRP the company's "North Star" - a guiding fixed point that every product decision eventually orbits back to.

It's a fitting metaphor for a space that loves its cosmological branding.

Andrei Rosseti, the Brazil-based developer behind the Web 3.0 chat app Evergram, seems to agree: his newest release isn't called "2.0" or "v3" - it's called Orion, after one of the night sky's most recognizable constellations.

For a product built on the idea that your identity and your messages should answer to no one but you, a name borrowed from the stars feels appropriate. Orion marks Evergram's move from its first incarnation into a much richer version; and it's worth understanding both what Evergram is and why this particular update matters.

Evergram

Evergram is a messaging app built on a creative idea: no accounts, no passwords, no central server storing your conversations. Instead, your identity is your wallet - specifically, a wallet on the XRP Ledger or its smart-contract-enabled sibling network, Xahau. Log in with a non-custodial wallet like Xaman, and you're in.

There's nothing to sign up for, nothing to forget, and no company database of usernames and passwords for anyone to breach.

In its original form, Evergram covered the essentials: one-on-one encrypted messaging, a functioning client on both the Xaman wallet (as an embedded "xApp") and a standalone website, and a working demonstration that a chat app could run on decentralized rails instead of conventional cloud infrastructure.

Andrei Rosseti kept the initial rollout limited and precise, so that he could analyze the early data, address any roadblocks or issues, and then methodically add his wish list of new functions according to his own schedule and preferred level of high quality.

Wallet-Based Encryption

The core trust model behind Evergram is worth unpacking, because it differs dramatically from how mainstream messaging apps work.

Every chat in Evergram gets its own unique symmetric encryption key, generated with AES-grade strength. That key is used to encrypt message content on the sender's device, before anything ever leaves it.

The key itself is then re-encrypted separately for each participant and each of their devices, and delivered using public-key cryptography - the same underlying mathematical approach that secures cryptocurrency wallets. The result, according to Rosseti, is that:

"... neither Evergram nor the underlying infrastructure can decrypt messages."

If new devices join, keys automatically rotate; if a device goes inactive for too long, it's automatically cut off.

Identity works the same way. Instead of a phone number or an email address tying you to your account - both of which are ultimately controlled by a third party who can be pressured, subpoenaed, or hacked - your identity is a cryptographic wallet address.

You prove who you are by controlling the private keys to that address.

It's a system that trades convenience for resilience. And it's also, as it turns out, a natural extension of everything Rosseti had already spent the past year and a half building.

Andrei Rosseti's Trophy Room

Evergram didn't appear out of nowhere: It's the third act in a run of Xahau-based projects from Andrei Rosseti.

The connecting thread across all three projects is identity and trust: proving that a document, a signature, or a message really came from who it claims to have come from - without leaning on a centralized authority.

Date	Project	What It Did
Early 2025	Xahau DocProof	A blockchain-based notary service. Two or more wallets can cryptographically prove that a document had been signed by the parties involved, with the proof recorded immutably on Xahau.
November 2025	Origo	An evolution of DocProof for single-signer verification - checking that a document is authentic and came from the domain it claims to, using a TOML-file verification method borrowed from the XRP Ledger.
January 2026	Evergram	A full step into a Web 3.0 messaging app: encrypted, wallet-authenticated chat, hosted on decentralized infrastructure.
August 2026	Orion	Evergram's graduation from initial roll-out to a greatly-enhanced version.

Each project built on lessons from the last.

DocProof proved that Xahau's "Hooks" - account-level smart contracts, most commonly written in C - could enforce complex trust logic (checking payments, verifying signatures, recording proof) using very little code; DocProof's entire notarization logic runs through a single Hook. Origo then explored what verification could look like without needing an on-chain transaction for every check. Evergram took the identity and trust lessons from both and applied them to something far more real-time and personal: private conversations.

August 27, 2026: Orion

Which brings us to now. On August 27, 2026, Evergram's Orion release went live.

Orion's High Points

Orion isn't a minor version bump. It's closer to a relaunch, expanding Evergram from "a wallet-based chat client" into what its own release notes describe as a full communication stack: chat, discovery, payments, and a developer SDK, all without a central account system.

User Features

The most visible changes are in the day-to-day experience of using the app. Groups now live in a proper left-hand navigation panel, showing the most recent message from each conversation at a glance.

More significantly, Orion introduces public discovery: users can browse and search public groups across the network and request to join ones that interest them ... no invite link required.

For groups that do want to control their doors, admins can generate shareable invite links, approve join requests before granting access, and run fully moderated chats where only approved participants can speak.

Bots can join through these same public links - a detail that hints at where the developer ecosystem is headed.

It's worth noting that joining a group this way - whether through discovery or an invite link - still requires a wallet; group membership itself is wallet-authenticated.

Wallet-free access comes from a different feature: embeddable widgets.

Any website can drop in a single script tag and get encrypted chat for its visitors, with no account or wallet required on the visitor's end. This capability builds directly on Evergram's original anonymous chat feature, which was the first to prove that a wallet-authenticated user and a wallet-less user could hold a fully end-to-end encrypted conversation with each other. Widgets take that same proven mechanism and make it embeddable anywhere.

One more addition rounds out the social layer: slash commands - an homage to old-school IRC — bring chat and payments into the same composer box; typing /pay, /nick, or /leave handles actions that used to require switching screens or apps entirely.

User Customization: Device & Account Management

Orion also puts real effort into the unglamorous but important parts of running a security-conscious app: account hygiene. A new unified settings screen gives users one place to manage their account, connected devices, and preferences.

Device management gets an upgrade.

Previously, hitting a device limit could mean getting blocked outright; now, users can simply revoke an older or lost device and keep going. Every connected device is listed in one place, and storage management tools let users see exactly how much space each conversation is using - and clear it, per chat, if they want to.

Users also gained finer control over their own exposure. Example: A link-security feature, which previously blocked clicking or copying any external link shared in a chat, can now be toggled off in Settings for users who want that flexibility back.

Technical Stuff

Under the hood, Orion represents a substantial engineering push.

The release is backed by more than 400 unit tests spanning the full stack - the smart contract layer, the SDK, the web client, and the gateway/relay server that bridges them. That's a notable level of test coverage for a project of Evergram's size, and it signals an intent to be taken seriously as production infrastructure rather than a hobby project.

Performance was also a focal point.

Evergram's backend runs on HotPocket, Evernode's smart-contract execution environment, which is architecturally solid but historically slow on writes due to the round-trips required for decentralized consensus. Orion ships several front-end and back-end performance improvements to soften that cost. On the scaling side, early estimates put a single node's capacity at around 5,000 users - with a relay architecture already being explored to push well past that ceiling as adoption grows.

Evernode

Evergram continues to run entirely on Evernode, a decentralized hosting network built on top of the same consensus technology as the XRP Ledger. Instead of paying a conventional cloud provider, Andrei pays for Evergram's infrastructure in EVR, Evernode's native token, and the app runs across independently operated nodes rather than a single company's servers.

This is the detail that turns Evergram from "a chat app that happens to use crypto wallets for login" into a fully-built-out Web 3.0 application. A centralized chat app - no matter how well encrypted - can still be pressured, deplatformed, or shut down at the hosting layer. An app running on Evernode is architecturally much harder to switch off, because there's no single company or server to switch off in the first place.

Corporate Use Cases

Evergram's embeddable widgets open up a use case that goes beyond peer-to-peer conversation between crypto-native users. Because a widget only requires the site owner embedding it to be wallet-authenticated - not the visitor on the other end - anyone can land on a page and start talking without a wallet, an account, or any setup at all.

This is the same anonymous-chat mechanism described earlier, packaged into a drop-in script tag.

The most obvious application is customer support: the kind of live chat widget nearly every business now runs, but with the conversation encrypted end-to-end and the underlying infrastructure resistant to outages or takedown. But the same mechanism generalizes well beyond support tickets.

Anywhere an organization needs to collect sensitive information from someone who shouldn't have to create an account to share it - tip lines, intake forms, one-off consultations - an embedded, encrypted Evergram widget is a plausible, privacy-preserving alternative.

Moderation

No messaging platform that prioritizes privacy and resists centralized control gets to skip the hard conversation about misuse. Any tool that makes it easy to reach strangers anonymously will, inevitably, attract people who want to scam, harass, or exploit others - including the most vulnerable users, such as children.

Orion's moderation tools are a robust starting toolkit:

join approval
moderated-mode groups
admin-gated invites
block lists
per-user interaction permissions
per-user link-security settings

Generally, Evergram, and platforms like it, will need to keep evolving their tools and norms as adoption grows and bad actors test limits.

My Take

The new feature set in the Evergram Orion release is lengthy, but two additions stand out as the ones most likely to change how people actually use Evergram day to day.

The first is searchable, public groups. Discovery has always been the missing piece for decentralized chat - encryption and censorship-resistance don't matter if nobody can find the community they're looking for. Public discovery finally gives Evergram a way to grow organically instead of purely through direct referral.

The second is the invitation model - shareable links that let anyone join a public group chat with just a wallet, no separate invite or approval needed, plus the parallel ability to embed that same conversational experience, wallet-free, directly on a website via widgets.

Together, these two paths are the exact mechanic that turned Telegram and Discord into default infrastructure for online communities: a link (or an embed), dropped into a bio or a page, that turns a stranger into a participant in one click.

Evergram now competes in that same category, but with a very different trust model.

Evergram: A Bet On Security & Privacy

Privacy and security are basic human needs.

Using technology should not mean that you take risks with either one - and with Orion, Evergram is making a serious bet that you shouldn't have to.

X | X> | E>

Sources

Orion photo by Photo by Pascal Debrunner: https://unsplash.com/photos/stars-in-the-sky-during-night-time-b_8cJyp2BwI
Brad Garlinghouse on XRP as Ripple's "North Star": https://x.com/bgarlinghouse/status/2049187934843093167
Evergram's official site: https://evergram.app
Evergram Orion staging release notes: https://staging.evergram.app/releases/orion
"Evergram" - Intro to Evergram: https://xpert.page/hodor/blog/evergram
"Origo" - background article on Origo and Xahau DocProof: https://xpert.page/hodor/blog/origo
Xahau DocProof, live notary application: https://xahaudocproof.com
Xahau DocProof source code (open source): https://github.com/rosseti/xahau-docproof
Xahau Coding Competition: https://xahau.network/contest/
Orion Promo video: https://www.youtube.com/watch?v=7mmMjjp7NLE
Evernode Hot Pocket: https://docs.evernode.org/en/latest/platform/hotpocket/index.html

What Is Xahau (XAH)?

Hodor — Sat, 22 Aug 2026 15:17:31 GMT

If you're new to XRP, you may have noticed some of us discussing another network named 'Xahau', or its native currency, 'XAH'.

It's Like XRP ... But Different

The Xahau network was created in 2023, and its starting point was the open-source code for the XRP Ledger. A small team of researchers and entrepreneurs decided to add smart contracts to the network code.

The XRP Ledger has no smart contract capabilities, by default.

To integrate smart contracts, the team decided to use an architecture that includes 'WASM' or 'web assembly' code. Each account can have up to 10 'hooks' installed that are triggered for transactions that match specific criteria. They can run before or after a transaction is processed. This enables a variety of use cases that do not involve the need to change the network's core code.

Hooks

A 'hook' is what is known as a smart contract that can be triggered in relation to a specific account and its transactions.

The term arises from the programming world, where it generally means "code that runs based on triggering conditions." In Xahau's case, it indicates code that is run before, or after, a transaction is processed.

A hook can also be triggered by the passage of time (CRON). ⏰

Each hook must be installed on a specific account by the party that controls the account - i.e., the secret key holder.

What Can XAH Do That XRP Cannot?

The primary benefit from the use of hooks, is that the core network code does not need to be changed every time a new use case is identified. This means that additional use cases can be addressed immediately, with no requirement for intervening steps, such as:

Community review
Community approval
Amendment voting

All of those steps are eliminated with the use of hooks; new use cases can be addressed as fast as the code can be developed.

Key Differences From XRP

Other unique differences from the XRP Ledger include:

Smaller supply ~655 million coins vs. 100 billion coins
XAH 'hodlers' are rewarded at 4% of their account balance
UNL participants are incentivized
Payment channels available for user-created tokens (IOUs)
URI tokens instead of NFT tokens

Why Xahau?

Hooks are the mechanism, but they're not the pitch.

What actually makes Xahau worth a business's attention is what people have already built with that mechanism - faster settlement, built-in compliance tooling, real DeFi, an emerging anti-fraud layer, and use cases that stretch well past finance.

Here's a closer look at each.

Project L-10K

One of the primary enhancements that the Xahau development team accomplished was to supercharge the throughput ... up to ten thousand transactions per ledger. This project was known as 'Project L-10k', and was completed in 2025 contemporaneously with the first production remittance application to use Xahau.

Production settlement service level agreements demand robust & dependable responsiveness.

Inline Payment Firewall

Compliance with AML and KYC regulations requires organizations to have total control over value transfers into and out of their ledger wallets. Xahau is one of the only current cryptocurrency networks that has a protocol-layer equivalent of a 'payment firewall'.

If an organization only wants to accept transfers from whitelisted accounts, that can be done with hooks; and several production implementations have put this approach into effect.

Remittance Settlement Layer

One of the flagship projects for Xahau is the cross-border remittance application built by three parties, with guidance from the InFTF: Quantoz, Cooperative Bank of Oromia (Coopbank), and TerraPay all collaborated to bring EURO-to-BIRR cross-border value transfers, with a fully built-out production application going live on May 6, 2026.

Xahau isn't only theoretical infrastructure for crypto speculators - it's already settling real money, for real banks, in a live production remittance corridor.

Decentralized Finance

Xahau's roadmap has promised native DeFi primitives in its latest roadmap - an Automated Market Maker (AMM), a price oracle, and a cross-chain bridge called FeatureExport.

"Price oracle" is now live; but two of those features still require a network-wide amendment vote before they are activated later in 2026.

Rather than wait, a Xahau community developer known as Cbot built One Xahau, a full DeFi suite implemented entirely with hooks: an AMM, a collateralized lending pool, and perpetual futures contracts.

Fees from all three products route into a DAO treasury, governed by a token called XXX that's earned by liquidity providers and consumed (burned) with every vote - giving it a built-in deflationary mechanic.

Early results are encouraging: a side-by-side comparison of order books found the Xahau EVR/XAH pairing running a tighter spread and considerably deeper liquidity than the equivalent pairing on the XRP Ledger, just weeks after One Xahau's AMM launched.

Anti-Abuse Layer

Public, irreversible ledgers are efficient for legitimate users - and just as efficient for thieves. XRP Ledger history includes plenty of phishing and giveaway scams, and once stolen funds start hopping through freshly created "mule" accounts, tracing them has traditionally fallen to unpaid volunteers and community forensics accounts, racing the clock before funds reach an exchange and get cashed out.

Odin's Eyes is a Xahau-native attempt to fix that. One account (the "Eye") maintains a shared, on-chain reputation registry - clean, suspicious, or confirmed malicious - for addresses across the ecosystem. Any participating account installs a lightweight companion hook (a "raven") that checks incoming transactions against that registry.

To keep the watchers engaged, Odin's Eyes pays out a capped-supply reward token (RVN) - a small baseline reward just for actively screening traffic, plus larger bounties for confirmed catches.

It's a paid, incentive-aligned alternative to the volunteer model that's driven anti-fraud efforts on public ledgers.

Limitless Use Cases

Account-based smart contracts - up to ten per account - enable almost anything a developer or entrepreneur can imagine, and the use cases aren't limited to trading and payments.

Take Mithra, a sensor company co-founded by Xahau's Wietse Wind after his own home flooded when a decades-old sewer alert system (a simple buzzer) failed to notify him in time.

Mithra's LoRa-connected sensors monitor equipment like sewer pumps - tracking runtime, current draw, and temperature to predict failures before they happen - and publish that data directly on-chain via Xahau "invoke" transactions, signed by the sensor hardware itself.

Because the data lives in a hook's on-chain storage rather than a single company's private database, it's available to any interested party: homeowners, maintenance contractors, insurers, or researchers - without vendor lock-in. In one early real-world test, a Mithra sensor flagged a failing pump at an Amsterdam daycare center days before it would have overflowed.

It's a useful illustration of the broader point: once you can attach programmable logic to an account, the line between "blockchain project" and "ordinary business problem" gets a lot blurrier.

Who's Who of Xahau?

The list of those that are either founders, or closely associated with the founding organizations, is extensive. Here are the names of three organizations mentioned in the whitepaper, or their current moniker:

Xaman (formerly Xumm) is a non-custodial wallet built by XRPL Labs, the Netherlands-based team founded by Wietse Wind that has served as one of the primary engineering forces behind both the XRP Ledger and Xahau ecosystems. Gatehub is one of the oldest XRP Ledger gateways and wallet providers, issuing fiat and crypto IOUs since 2014 and now serving as the main bridge that lets XRP Ledger users acquire and redeem native XAH. InFTF is the nonprofit successor to the former XRP Ledger Foundation - rebranded in 2024 to reflect a broader mission - which now focuses on compliant, blockchain-based remittance infrastructure for underserved markets, with Xahau as its preferred settlement network.

There exists a long list of impressive developers, architects, and technologists among the Xahau inner circle. But the three names that people associate most prominently with the leadership of the Xahau network are Wietse Wind, Richard Holland, and Denis Angell.

The links to their 'X' accounts are:

The Relationship: Xahau & XRP Ledger

So how do Xahau fans view the relationship between XRP and XAH?

The Xahau team - and many of its community members - advocate for the use of a 'dual-chain' solution to implement smart contracts. In addition, a third community of loyal DePIN fans see an additional component in the list so that the XRP Ledger & Xahau can access any conceivable use case for cryptocurrency: The Evernode network.

Evernode allows the procurement and incentivization of decentralized infrastructure; in addition, it supports smart contracts with limitless complexity, using a consensus engine borrowed from the XRP Ledger.

XRP Ledger: Best at payments & robust utility functions
Xahau: Predominantly XRP Ledger code, but with account-based smart contracts called 'hooks'
Evernode: A DePIN network that can handle high-complexity smart contracts

Xahau also hosts the financial incentives for the Evernode network, and is scheduled to tighten its orchestration with the XRP Ledger, via an amendment (in progress as of this writing) called 'FeatureExport'.

Competition Or Synergy?

From an economic standpoint, every chain that has its own digital asset is a competitor in a narrow, liquidity-only sense; but the simple way to think about Xahau, is that a 'bunch of XRP geeks' decided to implement smart contracts on their own version of the XRP Ledger.

The team emphasized transparency along the way, and initially received support from the primary XRP stakeholder, Ripple. They published Xahau as open-source code that could, in theory, be back-engineered and integrated with the XRP Ledger.

Synergy effects between the two camps speak to a genuine camaraderie, with many Xahau developers being open and willing to help with changes to the core XRP Ledger protocol. You can find many examples of this open dialogue on the 'X' platform.

XAH Distribution

The Xahau whitepaper originally targeted a 600 million XAH distribution: 96 million split across eight validator seats, 16 million to Gatehub, 160 million to Xaman, and 328 million to the Foundation. What actually happened on-chain differs slightly - some funds went to early vendors and investors instead - but the total landed almost exactly on target, at roughly 599 million XAH.

That's a supply about 1/200th the size of XRP's, but it's still a large amount of coin for the market to track, understand, and account for.

Here's how that supply breaks down today, by holder:

Holder	XAH Held	% of Total Supply	Status
Xaman Treasury	125,000,000	~21%	Locked in a time-released smart contract
InFTF Treasury	250,000,000	~42%	Locked in a time-released smart contract
Everybody Else	224,000,000	~37%	Circulating among validators, early investors, vendors, and the general public
Total	599,000,000	100%

The two treasury wallets alone account for more than three out of every five XAH in existence.

Rather than use simple escrows, both organizations locked their holdings into hook-based, time-release smart contracts - a more technically demonstrative approach that still lets the wallets keep claiming their monthly balance-adjustment reward. If the maximum amount is claimed every period, the release schedule unlocks over roughly six years.

A dashboard exists to display the current status of these XAH Vaults: xahau-treasury.xrpl-labs.com/

Even with those two mega-wallets accounted for, XAH ownership remains fairly concentrated - a common early-stage pattern, but one the network will need to address as it matures.

How To Purchase XAH

If you wish to speculate by buying XAH directly, it depends on where you are located. If you're in a country that is supported by Bitrue or Coinex, you can directly purchase or trade XAH by using those centralized exchanges.

If you're in a country not supported by either of those two exchanges - such as the United States - you can exchange RLUSD or XRP for (Gatehub) XAH on the XRP Ledger Decentralized Exchange. Several convenient interfaces exist to do this, including the Xaman non-custodial wallet.

Xaman: Using the Xaman non-custodial wallet, go to the xApp tab, and choose the 'DEX Trade' xApp, and use it to acquire (Gatehub) XAH IOUs. Then, use a different xApp called "XAH Teleport" to convert them into real, native XAH on the Xahau network.

Where Xahau Still Has Work To Do

No introduction to a young network is complete without an honest look at what's still unfinished. The following areas are ones where work remains to be done:

Better Orchestration With The XRP Ledger. The FeatureExport bridge is a sought-after amendment that has the potential to expand current 'Xahau-only' projects like One Xahau and Odin's Eye to the XRP Ledger.
Hook Auditing Is Young. While a community developer has stepped forward in a major way, constructing hook auditing and hook 'prover' software, this is still a fresh space; trust in published, proven hooks is improving.
Ownership concentration. As covered above, more than half of XAH's circulating supply sits in two founder-linked treasury wallets. Even with those wallets locked into gradual, transparent release schedules, that level of concentration is a major risk factor for speculators.
Liquidity Sources. The shut-down of BItmart subtracted one major CEX from Xahau's liquidity; however, it still lists two major exchanges: Coinex and Bitrue. There has been recent discussion of bridging to other networks with DEX-enabled protocols, such as Solana.

None of this is unusual for a network in its third year of operation; it's simply worth knowing within the context of a comprehensive introduction.

The Future Of Defi And Payments

Once you've seen the extensive list of use cases that XAH easily handles, it's truly inspiring. Xahau is everything that you love about XRP, plus a long list of more things to love. ❤️

Be an early adopter of XAH and the Xahau network! Follow the accounts that seem to reflect your own interest - speculator, developer, or crypto fan. You have a place in our community, no matter what your background or interests are. Welcome to the future of crypto Defi and Payments.

Sources:

XRPL Payment Channels for IOU Amendment (not implemented): https://xls.xrpl.org/xls/XLS-0034-paychan-escrow-for-tokens.html
WASM Smart Contracts: https://en.wikipedia.org/wiki/WebAssembly
Xahau network - what is different: https://docs.xahau.network/readme/what-is-different
Xahau whitepaper: https://xahau.network/Xahau-Whitepaper.pdf
Xahau website: https://docs.xahau.network/
Coinex listing for XAH: https://coinex-announcement.zendesk.com/hc/en-us/articles/36042461173780-CoinEx-Will-List-XAH-Xahau-on-Mar-27-2025
Xahau Network Roadmap: https://xahau.network/roadmap/
Xahau Hooks documentation: https://docs.xahau.network/features/network-features/hooks
TerraPay, Coopbank & Quantoz launch (Finextra): https://www.finextra.com/pressarticle/109728/terrapay-cooperative-bank-of-oromia-and-quantoz-board-blockchain-for-ethiopian-remmitances
TerraPay Ethiopia remittance launch (TerraPay): https://www.terrapay.com/media/terrapay-launches-cross-border-blockchain-remittances-to-ethiopia/
Coopbank & TerraPay launch announcement (Cooperative Bank of Oromia): https://coopbankoromia.com.et/coopbank-and-terrapay-launch-blockchain-based-remittance-settlement-to-enhance-cross-border-transfers/
InFTF - About & mission: https://inftf.org/
InFTF rebrand from XRP Ledger Foundation (Bitcoinist): https://bitcoinist.com/xrp-ledger-foundation-dissolves/
GateHub - company & gateway overview: https://gatehub.net/
"One Xahau" (Xpert Page): https://xpert.page/hodor/blog/one-xahau
One Xahau platform: https://onexah.io/defi
"One Xahau AMM: Doing Its Job" (Xpert Page): https://xpert.page/hodor/blog/one-xahau-amm-doing-its-job
"Odin's Eyes" (Xpert Page): https://xpert.page/hodor/blog/odins-eyes
Odin's Eyes platform: https://odinseyes.io/
"The Internet Of Things & Xahau" (Xpert Page): https://xpert.page/hodor/blog/the-internet-of-things-and-xahau
"XAH Distribution" (Hodor, 'X'): https://x.com/Hodor/status/1862587365467783295
Xahau Treasury blog (Xaman): https://xaman.app/blog/xahau-treasury
Xahau TreasuryHook (GitHub): https://github.com/Xahau/TreasuryHook
Xahau Treasury Dashboard: https://xaman.app/blog/xahau-treasury
Xahau Account Zero (Explorer): https://xahauexplorer.com/explorer/rrrrrrrrrrrrrrrrrrrrrhoLvTp
Hook 'Prover' Software Developer: https://x.com/Cryptocrazy589

The Lost Crypto

Hodor — Sun, 16 Aug 2026 13:33:30 GMT

In 2013, a British IT worker named James Howells cleaned out his desk, tossed an old hard drive in the trash, and threw away roughly 8,000 BTC.

He knows exactly where it is: a specific cell in the Docksway landfill in Newport, Wales. He has spent years - and a small fortune in legal fees - trying to get permission to dig it up. As of today, that hard drive is still there, and at recent prices, so is a fortune worth hundreds of millions of dollars.

It's one of the most-told stories in crypto, and also one of the most misleading, because it makes "lost crypto" sound like a freak accident.

It isn't.

It's a byproduct of how crypto networks are designed, and it happens at a scale most people never think to ask about. When a business audience looks at a chain's stated supply - 21 million BTC, 100 billion XRP - that number implies every unit is out there, live, and potentially in play. In reality, a slice of any chain's supply is inert: unreachable, untouched, and for practical purposes, gone.

"Lost" crypto generally falls into a few categories:

Death - an owner dies and never told anyone where the keys were, or how to use them.
Lost or destroyed storage media - the Howells story is the extreme version, but discarded phones, wiped laptops, and corrupted drives are a major occurrence.
Forgotten passwords - encrypted wallets where the owner is alive, but can't remember the passphrase.
Smart contract bugs and freezes - code errors that lock funds permanently, with no theft involved.
Dormant early-era coins - balances that have not moved since the network's earliest days, for unknown reasons.

The last category is the trickiest: on-chain data can show that a wallet hasn't moved in ten years. It cannot show why. A dormant wallet looks identical whether the owner died, lost the keys, or is simply a long-term 'hodler'.

Every statistic in this article inherits that uncertainty - the numbers are very rough estimates, not audited totals.

Lost BTC

On the BTC chain, coins don't sit in accounts, they sit in individual, traceable "unspent transaction outputs" ("UTXOs"). A coin mined in 2009 that hasn't moved is still sitting there - which lets analysts age-bucket the entire supply and estimate how much of it is gone.

The most-cited figure comes from blockchain analytics firm Chainalysis, whose research puts permanently-lost bitcoin at somewhere between 2.3 and 3.7 million BTC - roughly 11% to 18% of the fixed 21 million supply cap.

Other analysts have pushed the estimate as high as 4 million BTC, and some methodologies that include the "Satoshi" dormant wallets put the figure closer to 20% of the entire supply!

An estimated 1.1 million BTC sit in wallets attributed to Bitcoin's supposed creator, untouched since 2009–2010.

Nobody knows whether the keys still exist in usable form, whether "Satoshi" is an actual person or group of people, or whether those coins will ever move. Beyond Satoshi, the losses are overwhelmingly concentrated in BTC's earliest, most casual years - before hardware wallets, before seed-phrase standards, when the asset was worth cents and nobody treated key management as a serious discipline. James Howells' landfill drive is simply the most famous individual instance of a pattern that played out thousands of times, in less dramatic ways.

Lost ETH

The single largest documented individual loss on any major chain traces to Ethereum: the 2017 Parity multisig bug, in which a user accidentally triggered a flaw that permanently deleted the shared code library underpinning hundreds of multisig wallets. The result: 513,746 ETH - worth $1.93 billion at recent prices - frozen across 587 wallets.

The funds became permanently inaccessible, including a large stake belonging to the Web3 Foundation.

One 2025 analysis found that 913,111 ETH - about $3.43 billion - has been permanently lost to user error and contract bugs across Ethereum's history, representing roughly 0.76% of total supply. Add in the ETH deliberately burned through Ethereum's fee-burning mechanism (a different, intentional category, not "loss") and over 5% of all ETH ever created, worth more than $23 billion, has been permanently removed from circulation.

XRP: A Different Story

This is where it gets interesting for XRP fans like myself.

The XRP Ledger has no Chainalysis-style dormancy study the way Bitcoin does - there's been far less independent forensic research done on it. But a few well-documented patterns exist, and one of them is unique to how XRPL was designed.

The reserve mechanic is the key.

Every XRP Ledger account is required to hold a minimum balance, called the base reserve, simply to stay active - a spam-prevention measure. That minimum has not stayed constant. It started at 1,000 XRP when the ledger launched, then was progressively lowered by validator vote: to 200 XRP, then 20 XRP (from 2013 to 2021), then 10 XRP, and most recently down to just 1 XRP in late 2024, largely as XRP's market price climbed and the old thresholds became disproportionately expensive to maintain.

The effect: every time the reserve requirement dropped, it left behind a trail of accounts that were funded to the old minimum and then abandoned. On-chain analysis has identified over 1.1 million wallets holding a combined 16.7 million XRP sitting at these legacy reserve minimums (many at exactly the old 20 XRP threshold), untouched for years. It's a form of "lost crypto" essentially unique to XRPL's design - Bitcoin has no equivalent minimum-balance mechanic to leave this kind of trail.

Beyond reserve dust, a manual review of the ledger's top 100 largest dormant wallets - untouched for over ten years - turned up roughly 106 million XRP.

Layer in one more category - known theft, which is philosophically distinct from loss since a thief is an active possessor, not an absence of one. The largest documented case is a 2024 credential-compromise theft from Ripple co-founder Chris Larsen, in which roughly 283 million XRP (about $150 million at the time) was stolen after private keys stored in a password manager were compromised in an earlier breach. Forensic trackers followed the funds moving rapidly through multiple exchanges - the classic signature of active theft rather than genuine loss.

Put those three categories together and XRP's total sits at roughly 172.7 million XRP - a mere 0.0017% of total supply. Compare that to Bitcoin's 11–18%+ and the gap is dramatic. Some of that may reflect XRP being a younger network with less time for keys to be lost to death or decay. But a large part of the answer is simpler: nobody has done the exhaustive dormancy research on XRP that Chainalysis has done on Bitcoin for over a decade.

Estates: Making Sure It Isn't You

Every story above shares a common thread - someone, at some point, had no working plan for what happens to their crypto if they become unable to access it themselves.

Owning self-custody crypto is not the same a bank account; there's no customer service line to call, no password reset, no next-of-kin override. The same cryptographic strength that makes crypto secure against theft also makes it hostile to inheritance. Fortunately, a set of techniques and tools has developed to address this problem.

Multisig wallets are the most-established approach. A wallet requires a threshold of keys (say, 2-of-3) to move funds - you hold one, a spouse or attorney holds another, and heirs only need to gather the required number of keys, not one single perfect password. Managed services like "Casa" and "Unchained Capital" build on this. The tradeoff with any managed service is obvious: your plan is only as durable as the company behind it.

Shamir's Secret Sharing takes a different approach, splitting the seed phrase into multiple fragments (e.g., 3-of-5 needed to reconstruct it), typically stored on separate metal plates in separate locations.

Dead man's switches automate the release of access after a period of inactivity, and this is where things get interesting on the newest ledgers.

Xahau: Purpose-Built Solutions

The XRP Ledger itself is deliberately limited - it doesn't support general smart contracts, by design. Xahau, a network built using the XRPL code, added a feature called Hooks: WebAssembly modules that attach custom logic directly to an account and trigger on specific ledger events. That capability opens up inheritance mechanisms that aren't possible on XRPL.

Two of the following are unique to Hooks; the third works identically to standard XRPL multisig:

A dead-man's-switch hook. One community-developed version nominates a beneficiary address via a stored HookParameter, and tracks a rolling "ledger limit" - roughly 1–2 years' worth of ledger closes. Every time the account holder transacts normally, the hook resets the countdown automatically. If that threshold is ever exceeded - meaning the account has gone untouched for the full window - the nominated address becomes able to withdraw the balance.
A fully open-ended hook that can accept virtually any triggering input and then release its balance according to whatever logic the account owner codes - a flexible foundation that developers can shape into custom inheritance, escrow, or conditional-release mechanisms ... limited only by imagination.
Standard multisig, identical in concept to XRPL's native multi-signature accounts, requiring no Hooks at all - included here simply because it's available on Xahau exactly as it is on the XRP Ledger.

These are elegant, native-on-chain answers to the single biggest cause of "lost crypto": death or incapacitation without a technical path forward. They also carry a symmetrical risk - a poorly configured inactivity window can trigger a transfer while the owner is still alive and simply traveling, and unaudited smart-contract code is its own category of danger.

New tools, techniques, and services have now begun to be developed to verify hook-based smart contracts. These 'prover' tools are very new, and some of them exist on a site called 'Kairo Vault', developed by Hugegreencandle.

The Passage of Time

Every category in this article shares one property: it only grows.

Bitcoin's earliest coins get older every year, and the generation that mined or bought them in the 2009–2013 window is now, inevitably, aging with them - meaning "death without a plan" will eventually overtake forgotten passwords and discarded hardware as the dominant cause of future losses. The same clock is now ticking on every other chain as well, including XRP & Xahau, as its own early participants age alongside their holdings.

The countervailing force is the one described in the prior section: the tools for preventing this are better, cheaper, and more accessible than they've ever been.

The technology that makes loss so permanent is the same technology now being used to prevent it. Whether that balance tips the "lost crypto" percentage down over the next decade, rather than up, will depend less on the chains themselves than on how many people actually put a plan in place before they need one.
X>

Sources

"How Many Bitcoin Are Lost?": https://www.ledger.com/academy/topics/economics-and-regulation/how-many-bitcoin-are-lost-ledger
"Bitcoin's $30 billion sell-off" (Chainalysis methodology on lost BTC): https://www.chainalysis.com/blog/money-supply/
"Lost Bitcoin: 3.7 million Bitcoin are probably gone forever" (Decrypt): https://decrypt.co/37171/lost-bitcoin-3-7-million-bitcoin-are-probably-gone-forever
"Ethereum ghost ledger: $23b gone, burned, or bugged" (lost/burned ETH breakdown): https://www.itiger.com/news/2554743978
"Parity Multisig Wallet Bug Locks 513k ETH": https://dn.institute/research/cyberattacks/incidents/2017-11-06-parity/
"Lower Reserves Are Now In Effect" (XRPL.org, 2021 reserve reduction): https://xrpl.org/blog/2021/reserves-lowered
"Lower Reserves Are In Effect" (XRPL.org, 2024 reserve reduction): https://xrpl.org/blog/2024/lower-reserves-are-in-effect
"Over 1.1 Million XRPL Wallets Hold $51.7 Million in Dormant XRP" (reserve-dust wallet analysis): https://www.mexc.com/news/101776
Ripple co-founder dormant/stolen XRP wallet tracking (ZachXBT reporting): https://www.theblock.co/post/364164/ripple-chris-larsen-xrp-zachxbt
"What Happens To Your Crypto When You Die? Casa Inheritance Has a New Solution" (Unchained): https://unchainedcrypto.com/what-happens-to-your-crypto-when-you-die-casa-inheritance-has-a-new-solution/
Xahau Hooks documentation: https://xahau.network/docs/hooks/
Xahau dead-man's-switch hook concept (X/Twitter post by @Satish_nl): https://x.com/Satish_nl/status/1864065517612327047
Xahau dead-man's switch hook code by Handy Andy: https://github.com/Handy4ndy/HandyHooks/tree/main/Beneficiary
Kairo Vault & hook 'prover' tech: https://kairovault.com/prove.html

Masters Of Illusion

Hodor — Thu, 13 Aug 2026 16:51:17 GMT

In late 2024, a small crypto asset called NexFundAI started trading on several exchanges.

It had a working website, a pitch about AI-driven finance, and steadily climbing volume. It also had one problem for anyone who tried to buy it: it wasn't real.

NexFundAI was created by the FBI.

The token was the centerpiece of Operation Token Mirrors, an undercover sting run by the FBI and the IRS. Agents built a fake crypto company, minted a token on the Ethereum blockchain, and then went shopping for "market makers" to help it look popular. Several firms took the bait. According to the resulting indictments, firms including Gotbit, ZM Quant, and CLS Global agreed to trade the token against itself - buying and selling in circles with no real change of ownership - to manufacture the appearance of demand.

The investigation ultimately touched more than 60 different cryptocurrencies and led to the seizure of over $25 million. One firm, CLS Global, later pleaded guilty and admitted in court filings that it had agreed to run exactly this kind of sham trading. Blockchain forensics in a related case were almost comically direct: investigators traced 1,209 of 1,221 transactions - 99% - straight back to the wallets of the firm accused of running the scheme.

It's a dramatic story, but it's also a useful lens.

Crypto's reputation for wild price swings and inflated valuations isn't just a story about a new asset class in its early stages. Part of it is a story about markets that, for years, purposefully created the illusion of a busy, liquid market.

What Is Legal Versus Illegal

It's important to be precise here, because two different activities get lumped together under "market manipulation" in casual conversation:

Market-making is legal, and essential.

A market maker continuously quotes both a buy price and a sell price for an asset, ready to trade either side. This is what keeps markets liquid - it's why you can buy or sell a stock, or a major crypto token, in seconds rather than waiting for a matching counterparty. Firms like Jane Street, Citadel Securities, and Wintermute do this at enormous scale, and they are regulated participants in trad-fi markets.

Wash trading is illegal, everywhere it falls under a regulator's jurisdiction.

This is when a firm or individual trades with itself, or with a colluding party, to fabricate volume, with no real risk or change in ownership. Related tactics include spoofing (placing orders you intend to cancel, to fake demand) and painting the tape (coordinated trading to move a reported price). In the U.S., these are forbidden under the Securities Exchange Act and the Commodity Exchange Act, and the SEC and CFTC have pursued cases in both traditional and crypto markets for years.

The line, in short: providing real liquidity is a service. Faking liquidity is fraud.

Where crypto has differed from traditional finance ("trad-fi") isn't the law - it's the strength of the surrounding infrastructure that catches violations:

Topic	Trad-fi & Securities	Crypto (Mainly CEXes)
Wash trading legality	Clearly illegal, long-established case law	Illegal wherever securities or commodities law applies - but jurisdiction is often murky
Exchange oversight	Regulated entities, required to monitor and report suspicious activity	Historically ranged from tightly regulated to offshore and lightly supervised
Enforcement track record	Decades of precedent and consistent case flow	Improving, but younger and more uneven
Common outcome	Wash trading exists, but is actively policed	Studies have found large shares of reported volume on some exchanges were fabricated

The rules themselves are very similar for both markets.

The Early Years

Long before most people had heard of Bitcoin Cash or Bitcoin SV, BTC had an unchallenged monopoly on the 'Bitcoin' name, and was a very small market.

Nobody would recognize it by today's standards. In the early 2010s, price discovery happened largely on forums like Bitcointalk, where a small speculator community compared notes, traded tips, and watched a handful of exchanges - most famously Mt. Gox - handle the bulk of global volume.

That combination was a near-perfect recipe for volatility.

Order books were thin, so a single large trade could move the price double digits in minutes. The total market was small enough that early miners and adopters could individually swing it. There were no futures or options markets to let traders hedge or arbitrage prices ... that infrastructure didn't arrive until CME and CBOE launched Bitcoin futures in December 2017. And the dominant exchange ran into trouble: Mt. Gox's 2014 collapse, with roughly 850,000 BTC lost or stolen, wiped out the market's central pricing venue overnight.

Bitcoin's wild early swings were simply what happens when a small, thinly-traded market has no organized liquidity behind it. But that same thinness also made the market unusually easy to manipulate - which set the stage for the next chapter.

The First Stablecoin

As Bitcoin's 2017 run toward $20,000 unfolded, a persistent question followed it: how much of that rally was organic?

Finance professors John Griffin (University of Texas) and Amin Shams (Ohio State) set out to answer it using blockchain forensics, in research eventually published in the peer-reviewed Journal of Finance. Their focus was Tether (USDT), a stablecoin marketed as fully backed 1:1 by U.S. dollars.

Griffin and Shams found that purchases made with newly issued Tether were disproportionately timed after Bitcoin price downturns, and that a small number of high-issuance hours accounted for an outsized share of Bitcoin's gains. Specifically, the 95 hours with the heaviest Tether issuance between March 2017 and March 2018 corresponded to 59% of Bitcoin's compounded returns over that period.

Their interpretation: issuing Tether without full backing acted like printing new money chasing the same supply of Bitcoin ... inflating its price without any real capital entering the market.

The pattern wasn't airtight proof on its own - some of it was also consistent with ordinary arbitrage trading. But it lined up with a legal reckoning that followed: in 2021, the New York Attorney General settled with Tether and its affiliated exchange Bitfinex over misrepresentations about reserve backing, including an undisclosed $850 million shortfall.

New Regulations: New Crypto World

New guardrails are now being built. The West is setting the pace, with the EU slightly ahead of the U.S. on the calendar.

Date	Milestone
Jun 2023	EU's Markets in Crypto-Assets Regulation (MiCA) enters into force
Jun 2024	MiCA stablecoin rules (for asset-referenced and e-money tokens) become applicable
Oct 2024	FBI's Operation Token Mirrors sting begins
Dec 2024	MiCA's full exchange licensing and market-abuse rules take effect
Jul 2025	U.S. GENIUS Act signed into law, mandating audited 1:1 stablecoin reserves
Jul 2026	GENIUS Act implementing rules due from U.S. federal regulators
Jan 2027	GENIUS Act reaches full effect (backstop enforcement date)

The EU's MiCA framework directly targets market abuse and requires licensed exchanges to actively surveil for it, with full rules already in effect since December 2024 (though some member states have granted existing exchanges transition time into mid-2026). The U.S. GENIUS Act attacks the problem from the stablecoin side: once fully in force, issuers must hold verifiable, audited reserves - closing the exact loophole Griffin and Shams documented, where new tokens could be minted without dollars behind them.

What this won't do is make wash trading vanish.

Stablecoin reserve rules fix the fake money problem; they don't stop two accounts from trading with each other. That still requires active enforcement, and enforcement appetite can shift - the SEC dropped several of its civil wash-trading cases in early 2026 even as separate criminal charges from Operation Token Mirrors continued. This reflects traditional finance: securities laws have banned wash trading since 1934, and regulators still bring cases today. Better rules reduce the problem.

But they don't erase it, in any market.

The Wild West Is Gone

All of this points to a market that is slowly maturing.

The early, small BTC market, prone to wild swings on thin liquidity, has given way to one with derivatives, professional market makers, and audited reserves standing behind the stablecoins that fuel most trading. The unregulated stretch that let unbacked tokens and sham volume distort prices is closing, not because the underlying temptation to cheat has disappeared, but because the capability to catch it finally exists.

Markets, like any relationship worth having, run on trust.

Sources

Next fund AI website: https://nexfundai.com/
Reuters, CLS Global guilty plea: https://uk.marketscreener.com/quote/cryptocurrency/BITCOIN-BTC-USD-45553945/news/Cryptocurrency-financial-firm-to-plead-guilty-after-novel-FBI-probe-48828125/
TRM Labs, Operation Token Mirrors overview: https://www.trmlabs.com/resources/blog/ten-fraudsters-from-four-financial-services-firms-charged-in-different-cryptocurrency-market-manipulation-schemes-out-of-northern-district-of-california
TechSpot, FBI's fake token sting: https://www.techspot.com/news/105096-fbi-creates-fake-cryptocurrency-sting-operation-catch-market.html
Hodder Law, SEC charges on market-manipulation-as-a-service: https://hodder.law/fbi-launches-undercover-token-in-sting-operation-entrapping-market-makers/
Bitcointalk forum: https://bitcointalk.org/
Mt GOX background: https://en.wikipedia.org/wiki/Mt._Gox
Griffin & Shams, "Is Bitcoin Really Un-Tethered?" (Journal of Finance): https://pdfs.semanticscholar.org/09ee/3a305500819717c6d7f33f36e323bd109dd1.pdf
Bloomberg, on the Griffin & Shams findings: https://www.bloomberg.com/news/articles/2018-06-13/professor-who-rang-vix-alarm-says-tether-used-to-boost-bitcoin
Fortune/Yahoo Finance, Griffin & Shams follow-up interview: https://finance.yahoo.com/news/wild-theory-price-bitcoin-being-110000608.html
Wikipedia, Markets in Crypto-Assets Regulation (MiCA): https://en.wikipedia.org/wiki/Markets_in_Crypto-Assets
EY Luxembourg, MiCA's phased effective dates: https://www.ey.com/en_lu/insights/digital/micas-full-effect-drops-take-the-next-step-into-eu-financial-digitalization
Sullivan & Cromwell, GENIUS Act implementation timeline: https://www.sullcrom.com/insights/memo/2026/March/OCC-Proposes-Regulations-Implement-GENIUS-Act
Wikipedia, GENIUS Act: https://en.wikipedia.org/wiki/GENIUS_Act
Morrison Foerster, SEC's 2026 dismissal of crypto wash-trading cases: https://www.mofo.com/resources/insights/260421-top-5-sec-enforcement-developments-for-march-2026
Alessa, on CFTC/SEC jurisdictional overlap in crypto: https://alessa.com/blog/crypto-wash-trading/

Xahau & x402 Agentic Payments

Hodor — Sun, 02 Aug 2026 20:53:02 GMT

For thirty years, the web possessed a payment status code it never actually used.

HTTP 402 - "Payment Required" - sat dormant in the protocol since the 1990s, a placeholder for a feature nobody built. That changed in 2025, when Coinbase revived it as the backbone of a new standard called x402, built to let software agents pay for things without a human clicking "confirm."

Since that point in 2025, he standard has been handed to a neutral industry foundation, adopted by household names in finance and cloud computing, and is now being extended to many new networks.

What The Heck Are x402 Payments? 🤔

At its core, x402 lets a server tell a piece of software "this costs money" in the middle of an ordinary web request - and lets that software pay on the spot, without a person in the loop.

An AI agent requests a resource; the server responds with HTTP 402 and a description of what payment it needs; the agent attaches a signed payment authorization to a repeat request; a settlement service verifies and processes that payment on a blockchain; and the server hands over the resource along with a receipt.

The whole exchange typically settles in stablecoins - tokens pegged to a fiat currency like the US dollar.

The effect is that pricing shifts from "sign up for a plan" to "pay per use," down to fractions of a cent. That's the piece that's new: no previous payment rail could profitably process a $0.001 charge for a single API call.

Is This Real Life?

Here's a scenario:

A logistics company runs an AI agent that monitors global shipping routes. Normally, getting live port-congestion data means negotiating an annual enterprise contract with a data vendor - often tens of thousands of dollars, whether the company uses the feed constantly or barely at all. With x402, that same agent can query the data provider on demand, get billed a fraction of a cent per query, and only pay for what it actually uses.

No annual contract or unused subscription.

That shift - from provisioning access in advance to paying only at the moment of use - is the practical promise behind the protocol, and it applies just as easily to AI inference calls, premium research data, or on-demand compute as it does to shipping data.

Payment Volumes Versus Hype

Volume on Coinbase's Base network went from near-zero in mid-2025 to over 100 million transactions by early 2026, though a large share came from a speculative meme-coin "pay-to-mint" campaign.

More recent data shows monthly volume swinging dramatically - dropping from a late-2025 peak before recovering to a few million dollars a month, with typical transactions well under a dollar. Activity is growing, but it's still early-stage infrastructure.

The much bigger numbers you'll see in headlines - often in the trillions of dollars - refer to a much wider definition of 'agentic': "Any AI-driven purchasing activity across any payment rail, not x402 specifically."

Analyst estimates for that larger category, for 2030, vary from roughly $1.5 trillion to as much as $17.5 trillion. That huge spread is a reflection of the market still being defined. The realistic takeaway for a business audience is that today's actual x402 volume is small, the growth trend is real, and the eventual size of the market is still uncertain.

The Foundation and Its Members

In July 2026, the Linux Foundation - the nonprofit home of major open-source projects like Linux itself - formally took over governance of x402, forming the x402 Foundation as a neutral, vendor-independent steward. No single company controls the protocol's direction.

The founding membership reads like a cross-section of finance and big tech: Visa, Mastercard, American Express, Stripe, Circle, Google, Amazon Web Services, Shopify, Adyen, Cloudflare, and Coinbase are all listed as Premier Members, alongside several major blockchain networks - including the Solana Foundation, the Stellar Development Foundation, and the Monad Foundation.

Ripple is also a Premier Member, and has been actively extending x402 support to the XRP Ledger, enabling agents to transact using both XRP and Ripple's own regulated dollar-stablecoin, RLUSD. Early activity on the XRP Ledger reportedly crossed a million agentic transactions.

The Inclusive Financial Technology Foundation (InFTF), a nonprofit organization that champions the Xahau ecosystem, joined the x402 Foundation as a nonprofit-institution-member.

This extends the x402 starndard to Xahau, a network that is, essentially, built using the XRP Ledger consensus and features, but with its own distinct approach to on-chain programmability.

Xahau: Perfect For x402

Xahau's standout feature is something called "hooks" - smart contracts attached to an account that can inspect, allow, or reject a transaction before it happens, rather than after the fact. That's a distinguishing feature compared to most other smart-contract networks, where logic runs in a separate contract that a transaction has to call.

Why does that matter for agentic payments specifically?

Because the central design problem in letting an AI agent spend money on your behalf isn't the payment rail - it's the guardrails. You want a way to say "this agent can spend up to $400, only with approved merchants, only this week" and have that rule enforced automatically. Xahau's hook architecture was designed with exactly this kind of use case in mind: the network's documentation highlights spending limits and transaction firewalls - rules that can reject unauthorized or oversized withdrawals - as native, ready-made building blocks. Other platforms can approximate this through additional smart-contract-wallet layers bolted on top of the base account, but Xahau organizes the gatekeeping attached to the account itself, at the protocol level.

This observation was echoed in the InFTF's official announcement & blog about their membership in the x402 foundation, which dove into greater detail about three different implementation models:

It's a purposeful design constraint: Hooks are intentionally not capable of unlimited, arbitrary computation. That sounds like a limitation, but for a financial guardrail, it's actually an important feature; simple, predictable rules are easier to audit and harder to exploit than open-ended code.

What x402 Capability Means

x402's pay-per-use model, together with a stable, MiCA-compliant euro stablecoin already live on Xahau, opens up new possibilities:

Metered API and data businesses. Any company selling data, AI services, or compute could move from subscription pricing to true pay-per-call billing, capturing revenue from occasional users who'd never sign up for a plan.
Autonomous procurement agents. A business could deploy agents authorized to shop across multiple vendors for the best price on a recurring purchase - travel, supplies, cloud capacity - with hook-enforced spending limits acting as an automatic compliance layer.
Cross-border and remittance tools. Xahau's roots in fast, low-cost settlement make it a natural fit for developers building agent-driven remittance or treasury tools that need predictable fees and quick finality.
Compliance-friendly agent commerce. For regulated industries, the ability to enforce spending rules at the account level - not just after a transaction clears - offers a cleaner audit trail than bolting compliance checks onto a general-purpose smart contract platform.

None of this requires a business to abandon existing payment infrastructure. x402 is designed to sit side-by-side with traditional rails; not replace them overnight.

Future Payments

x402 and the broader agentic-payments movement is still early - growing, perhaps overhyped, and not yet mature.

But the direction is clear: software is starting to pay for things on its own, and the infrastructure to do that safely, with programmatic guardrails, is being built by a growing group of high-profile players. Among the list of members to the x402 Foundation, Xahau stands out as having one of the most natural integration pathways among smart contract networks. X>

Sources

x402 Whitepaper: https://x402.org/wp-content/uploads/sites/10/2026/06/x402-whitepaper.pdf
Chainalysis, "Inside x402: 100M Agentic Payments on Base": https://www.chainalysis.com/blog/x402-agentic-payments-adoption/
CryptoNews, x402 volume and transaction data: https://cryptonews.net/news/market/32927114/
AgentPayTrend, "5 Forces Behind $1.5T AI Agent Payment Market": https://agentpaytrend.com/ai-agent-payment-forces-2030/
PYMNTS, "Digital Money Has a New Payment Standard and It's Not Built for Humans": https://www.pymnts.com/digital-payments/2026/digital-money-has-a-new-payment-standard-and-its-not-built-for-humans/
Linux Foundation, "Announces Operational Launch of x402 Foundation": https://www.linuxfoundation.org/press/linux-foundation-announces-operational-launch-of-x402-foundation-to-standardize-internet-native-payments-for-ai-agents-and-applications
"Ripple Is Now a Premier Member of the x402 Foundation": https://247wallst.com/investing/cryptocurrency/2026/07/14/ripple-is-now-a-premier-member-of-the-x402-foundation-alongside-visa-and-mastercard/
InFTF "Giving Software a Mandate, Not a Wallet": https://inftf.org/article/giving-software-a-mandate-not-a-wallet/
InFTF Official announcement over 'X': https://x.com/IncFinTech/status/2083843775256842354?s=20
Xahau Network, "Hooks" documentation: https://xahau.network/docs/hooks/
Xahau Network, "Features": https://xahau.network/features/
Quantoz, "INFTF and Quantoz collaborate to bring EURQ stablecoin to Xahau Blockchain": https://www.quantoz.com/blog/inftf-and-quantoz-collaborate-to-bring-eurq-stablecoin-to-xahau-blockchain

Grassroots: Crypto 2.0

Hodor — Wed, 29 Jul 2026 22:59:38 GMT

In September 2011, Bank of America told customers it would start charging $5 a month just to use a debit card.

Wells Fargo floated a similar $3 fee around the same time. Kristen Christian, an art gallery owner in Los Angeles, was fed up - not just with the fee, but with the poor customer service that came with it. She made a Facebook event.

She called it Bank Transfer Day, and picked November 5 - the date Guy Fawkes was captured after his plot against the British House of Lords ... a bit of an over-dramatic reference, but it got the point across.

RSVPs climbed into six figures within weeks. National media picked it up. The head of the U.S. credit union trade association found herself doing interviews on CNN, Fox Business, NPR, and ABC in the same week. Occupy Wall Street, then at its peak, lent informal support even though the two movements weren't affiliated. Within days, banks and credit unions across the country were tracking how much money had moved.

It proved something important: a single person with no institutional backing could force an entire industry to notice.

Fifteen years later, that exact pattern is showing up again - this time inside crypto, and inside communities like XRP, Xahau, and Evernode specifically. 🧐

A Changing Environment

Artificial Intelligence. Building something in crypto used to require a team, funding, and months of infrastructure work before anyone could use it. That barrier is collapsing. AI coding assistants now let a single developer stand up a dashboard, audit a smart contract, or ship a working prototype in the time it used to take to write a spec document. The gap between "I have an idea" and "I shipped something real" has narrowed to almost nothing.

This means that the next wave of crypto projects is far more likely to come from an individual builder or a three-person community project than from a VC-funded startup.

CEXes Are Closing. The centralized exchange model is under real strain, and 2026 has made that hard to ignore.

BitMEX - the exchange that invented the 100x leverage perpetual swap in 2014 - announced on July 23rd that it will fully shut down by September 23rd, two months later, citing a strategic review rather than any single failure.

Three days later, BitMart, running since 2017, announced its own wind-down: new registrations and deposits suspended immediately, all trading ending August 26th, full closure by January 2027. It was the third centralized exchange to announce closure in a matter of weeks, following AscendEX on July 1st. Analysts have tied the pattern to a broader shakeout - one estimate puts the number of crypto projects that folded in 2026, across exchanges, chains, and DeFi protocols, north of thirty.

Every one of those closures leaves a vacuum.

And on the XRP Ledger and Xahau, that gap is increasingly being filled by decentralized exchanges - the XRPL's native AMM and order-book DEX, and community-built interfaces on top of it. Both the XRP Ledger and Xahau DEXes don't require a company to stay in business, keep a banking relationship, or pass a jurisdiction's licensing review in order for users to keep trading.

The EVR Access Dispute & Its Response

Let me preface the following section by saying that I personally appreciate the loyalty that the Uphold Exchange showed to the XRP community when other exchanges looked at the SEC lawsuits in 2020 as an excuse to de-list XRP - a network that many BTC maximalists overtly and covertly resent. Uphold remained strong, and continued to list XRP and served as a primary on-ramp to speculators in the west.

Now for recent events ...

In 2024, Uphold supported the Evernode (EVR) airdrop, crediting roughly 3.9 million EVR into customer accounts. More than two years later, those balances are still marked "storage only" - no withdrawals, no trading, no transfers. No public resolution has come from Uphold.

What's notable isn't the freeze itself - it's who pushed back. A post from Jungle Inc argued that once Uphold chose to accept the airdrop allocation and credit it to customers, it took on an obligation to provide a real path to that value, freeze or no freeze.

Another account pressed further, pointing out that Uphold holds roughly 10% of EVR's circulating supply.

None of these posts came from a law firm. They came from individual community members, and the thread that resulted, pulled in enough voices that it became one of the more visible flashpoints in the XRP community this year.

A few years ago, users on a centralized platform had almost no leverage beyond complaining into a support ticket. Now they coordinate in public, in real time, and the volume is loud enough that it can't be safely ignored - even without a resolution (yet).

The XRP Account Reserve

The XRP Ledger's account reserve - the XRP a wallet must hold to exist on the network - has never been set by a company decree. It's set by validator consensus, and its history is a steady march downward: 1,000 XRP in the ledger's early "account creation fee" era, cut to 200 XRP in 2013, down to 20 XRP, then 10 XRP in 2021, and to a 1 XRP base reserve in December 2024.

That trend is still being actively negotiated. As of this July, a small number of validators have publicly pushed back on proposals to lower the reserve even further, arguing the reserve exists to protect network storage and memory from spam and DDoS abuse - and that any further cut needs evidence it won't weaken that protection.

Others counter that at current prices, even a small reserve is a barrier to new users, compared to other popular networks. It's a live, public discussion between validators and the community, and the outcome will be decided by consensus vote, not a memo from Ripple.

Examples In The Xahau & Evernode Communities

The same pattern shows up at smaller scale across a group of very recent, community-built projects:

Kairo Vault — a community-member-built XRPL dashboard, and a collection of extremely valuable tools for developing trusted smart contracts on the Xahau and Evernode networks.
EverArcade — a toolkit letting indie game developers deploy multiplayer, self-custodial payments and NFTs on Evernode, explicitly designed so builders don't need blockchain expertise to use it.
EverGram — an app & toolkit that supports secure, encrypted communication using all three networks; XRP Ledger, Xahau, and Evernode.
Sound Alive Radio — a decentralized radio project from producer E. Smitty, built on Evernode, aimed at removing the label and platform intermediaries that normally decide which artists get airtime.
One Xahau — part of a push by independent developers to build AMM and Defi functionality into the Xahau ecosystem, using hooks rather than waiting on a core protocol change.

And that list is grossly incomplete. I know I'm missing at least a half-dozen other examples just thinking about it now - but it serves to demonstrate a pattern.

None of these needed a venture round or a corporate grant to exist. They needed a person with an idea, a network with impressive utility, and a community willing to support & use what got built.

Grass-roots Leadership

Bank Transfer Day worked because a system had stopped listening to the people using it, and those people found they didn't need permission to act together.

The same dynamic is now running through crypto - in reserve votes decided by public argument instead of executive decision, in access disputes fought out by individual accounts instead of legal teams, and in tools built by small teams instead of corporate interests. The exchanges shutting their doors this year were built top-down.

What's replacing them is not.

X | X> | E>

Sources:

Odin's Eyes

Hodor — Sun, 26 Jul 2026 20:59:57 GMT

Every crypto community eventually learns the same hard lesson: the technology that makes a public ledger powerful - irreversible, permissionless, instant - is exactly what makes it a paradise for thieves.

The XRP community has learned this lesson ... many times over.

The playbook is familiar to anyone who has spent time in XRP or XRP Ledger circles. A phishing site mimics a wallet login. A fake "support agent" reaches out after someone posts about a problem. A giveaway scam promises to double any XRP sent to a "verification" address. A malicious memo tricks a holder into approving a transfer.

Case Files

In one recent case, an XRP holder lost roughly $16,800 after receiving a payment request with a memo reading "Safe XRPL verify message" - deceptively official-sounding, entirely fake. In another, a compromised hardware wallet led to a $3 million XRP theft, with the stolen funds bridged across chains and laundered through exchanges.

The Challenge For Volunteers

Once the funds move, the pattern is almost always the same: the attacker doesn't sit still. Stolen value gets split across dozens of freshly created "mule" accounts, hopped through several intermediate wallets, and sent to an exchange that will convert it to cash before anyone can react.

Every hop is designed to break the trail, or at least slow down whoever's trying to follow it.

For years, stopping this has depended almost entirely on volunteers. Blockchain explorers like XRPScan let victims flag a scam address so others get a warning. Independent forensics teams - community-run efforts like EXFILAI, Xahau Forensics, and other well-known on-chain investigators - trace stolen funds hop by hop and publish what they find. When the money reaches a known exchange, someone has to convince that exchange's support team to freeze the account before the attacker cashes out.

None of this is automatic, and none of it is guaranteed to happen before the money's gone. 🤨

This is the gap that a new project called Odin's Eyes is trying to close - not by making theft impossible, but by making the response to it automatic.

Xahau

To understand how Odin's Eyes works, it helps to understand Xahau.

Xahau is a network built from the same open-source code as the XRP Ledger (XRPL), extended with a feature the XRPL itself doesn't have: hooks. A hook is code - compiled to WebAssembly - that attaches directly to an individual account.

Once installed, a Hook can inspect every transaction touching that account and decide, in real time, whether to allow it, modify it, or reject it. It can also remember things between transactions, and can trigger new transactions on its own.

On many networks, "smart contract" logic lives in its own separate contract and has to be called deliberately. On Xahau, a Hook effectively becomes part of the account it's installed on - every payment in or out passes through it automatically, the way a bank's fraud-detection system reviews every transaction on your card before it clears.

That capability - a small, autonomous checkpoint on every transaction - is exactly what a "whitelist/blacklist" security system needs.

If an account can check every incoming and outgoing transaction against a list of known-bad addresses and block anything involving them, you have the beginning of a real defense system, built directly into the ledger. This general idea - using hooks to enforce an allow/deny list - has circulated in the Xahau developer community since the platform's early days, including a mention in the very original Xahau whitepaper.

Odin's Eyes is the most complete, live realization of this concept to date.

Odin's Eyes

Odin's Eyes was built - by the creator of "One Xahau" - as an evolution of that whitelist/blacklist idea into a full protocol; a shared registry that any Xahau account or product can plug into, rather than every project maintaining its own private blacklist.

At its core, Odin's Eyes is simple, even though its branding leans heavily on Norse mythology. One account - nicknamed "the Eye" - keeps a single status for every address it has judged: clean, verified, suspicious, or confirmed malicious.

Other Xahau accounts install a small companion Hook - nicknamed a "raven" - that checks every visitor against that shared status before allowing a transaction through. If the Eye later marks an address as bad, every raven that's watching for it freezes it, automatically, without anyone pushing an update.

Decoding The Mythology

The poetic names are memorable, but they map cleanly onto ordinary technical components. Here's the translation:

Norse/poetic name	What it actually is
The Eye (Odin's Eyes)	One Xahau account running three stacked hooks: a registry (state + rules), an emission Hook (mints the reward token), and a "shout" Hook (broadcasts freeze events)
The Well	The registry's internal data store - one status per address, retrievable in a single, constant-time lookup regardless of list size
The Watch	The humans (a council) who sign off on freezes, plus an off-chain script (nicknamed "the Keeper") that scans the ledger for suspicious funding patterns and reports them back
Ravens (after Huginn and Muninn, Odin's mythological messenger birds)	A reusable Hook installed on any participating account, which checks visitors against the registry and reports back what it observes
The Eye "shouts"	When an address is blacklisted, the registry Hook broadcasts a message that every registered raven picks up, prompting each to freeze that address on its own account within the same or next transaction
RVN	A capped-supply reward token (100 million maximum) paid to ravens for useful reports - not to be confused with the unrelated, well-established Ravencoin (RVN) cryptocurrency, which is a completely different, older project
Council / Auditors	Addresses with elevated permissions, checked against the registry's own internal records, allowed to freeze, clear, or flag entries
The funding graph	An off-chain process that traces which addresses funded which other addresses - something no Hook can do on its own, since Xahau's hooks can't read historical transaction data

Stripped of the poetry, it's a shared reputation registry with automatic, network-wide enforcement.

Worst Case: The Scammer Scenario

To see why that matters, walk through a theoretical case.

An attacker compromises a wallet and drains it of one million XAH, immediately splitting the stolen funds across a dozen freshly created accounts to obscure the trail - the same "mule fan-out" pattern seen in real XRP thefts.

In a world without Odin's Eyes, the victim (or a volunteer investigator) now races the clock: manually tracing each hop, hoping to identify the destination exchange before the funds are converted to cash and withdrawn.

In an Odin's Eyes–enabled ecosystem, the response looks different. As soon as the theft is reported, a council member - a trusted, wallet-holding participant - flags the attacker's address, signing the action from their own device.

That single verdict writes to the registry.

Then, every raven installed on a connected product - a DEX, a lending protocol, a token issuer - checks against it. The next time the attacker's account (or any of its freshly spawned mule accounts) touches a guarded product, the raven doesn't just block that one transaction; it also checks who funded that mule account, discovers the link back to the flagged attacker, and reports that connection back to the registry. The registry re-judges, and the mule inherits the same bad status. As the stolen funds keep moving to try to stay ahead of detection, they keep tripping this same mechanism - and the "bad" label spreads through the entire tree without anyone having to manually trace each branch.

If the attacker's address is escalated to a full blacklist, any product with a raven installed and a matching issued token freezes that holder's trustline immediately - even before the attacker touches that particular product - because the freeze order is broadcast the moment the blacklist decision is made.

NOTE: The goal isn't to reverse a completed theft (Xahau, like the XRPL, doesn't allow that); it's to freeze the stolen funds in place before they reach a cash-out point, turning what used to be a slow, manual chase into something closer to an automatic circuit breaker.

No More Volunteers

None of this works for long if the people doing the watching aren't compensated for their time. This is where Odin's Eyes' reward token, RVN, comes in.

Anyone can install a raven on their own account, but to have it actively report threats and earn rewards, the operator buys a one-time raven license, paid for in RVN and permanently burned (destroyed) as part of the purchase.

From there, a raven earns RVN in two ways.

A small, steady baseline reward accrues just for actively screening traffic, even if it never finds anything suspicious - this exists specifically to avoid a common failure mode in security incentive systems, where operators only get paid for catches and lose interest the moment an ecosystem is quiet.
On top of that baseline, a larger bounty is paid out for reports that are later confirmed as genuinely malicious, with an extra reward for whoever spots a threat first.

The total supply of RVN is hard-capped at 100 million, released gradually over time on a halving schedule similar in spirit to Bitcoin's. Reputation earned by a raven - which determines both its share of rewards and, eventually, its voting power over the system's detection settings - can only be built through confirmed, legitimate catches; reputation decays if a raven goes idle, so old activity can't be banked indefinitely to farm rewards later.

Instead of relying on volunteers who investigate scams for free, out of goodwill, Odin's Eyes tries to build a sustainable, paid workforce of automated watchers with a direct financial stake in catching real threats - and a built-in penalty (decay) for not doing the job well.

What's Next

As of this writing, Odin's Eyes is live on the Xahau mainnet, with a small footprint: a public blacklist and soft-flag list, a handful of active ravens run by early participants, and a public read API that any developer can query for free.

Now that the project is available for public participation, enhancing broader adoption through its listing on One Xahau is in progress, alongside the the other tokens integrated with that platform.

Learn More

The best way to understand Odin's Eyes in depth is to explore the site:

odinseyes.io - the homepage, with a live look at current blacklist/soft-flag counts and active ravens
The Tome (odinseyes.io/tome) - the full, current blacklist and soft-flag list, updated in real time
The Protocol console (odinseyes.io/registry) - a live feed of on-chain activity between the Eye and its ravens
The Chronicle - the project's own technical documentation, for readers who want the underlying architecture in detail
The public API (odinseyes.io/api) - free, no-key-required access to the live blacklist, for developers who want to see the data firsthand

Automated ... And Incentivized

For as long as public blockchains have existed, defending their users from theft has fallen to volunteers: people who traced stolen funds on their own time, with the sole reward of helping others. It has worked often enough - but it has rarely worked fast enough.

Odin's Eyes doesn't solve crypto crime.

It can't undo a theft, and it only protects the corner of the ecosystem that chooses to install it. But it has something the volunteer model never did: a system where flagging a threat is rewarded, and where a single verdict, once reached, enforces itself instantly, everywhere at once. X>

Sources

XRP Scan: https://docs.xrpscan.com/faqs/how-to-report-scams

EXFILAI 'X' Account: https://x.com/EXFILAI

Xahau Forensics 'X' Account: https://x.com/EXFILAI

Xahau Network - https://xahau.network/

Xahau Hooks documentation - https://docs.xahau.network/features/network-features/hooks

https://github.com/Xahau/Whitepaper/blob/main/Xahau-Whitepaper.pdf

'X' Live Space on July 5, 2026 https://x.com/i/spaces/1AGRnnyBeEPGl?s=20

Odin's Eyes - https://odinseyes.io/

One Xahau - https://onexah.io/

XRPL.org, "Report a Scam" - https://xrpl.org/community/report-a-scam

The Block, "Hackers siphon $3 million in XRP from US user's wallet: ZachXBT" - https://www.theblock.co/post/375252/hackers-siphon-3-million-in-xrp-from-us-users-wallet-zachxbt

U.Today, "XRP Community Targeted in New Scam Exploiting Fake Verification Messages on XRP Ledger" - https://u.today/xrp-community-targeted-in-new-scam-exploiting-fake-verification-messages-on-xrp-ledger

The Memecoin Lifecycle

Hodor — Tue, 14 Jul 2026 13:34:53 GMT

You heard it from a friend of a friend: someone just launched a new memecoin on the Xahau network called BanksterCoin.

No utility, no roadmap, just a logo of a cartoon banker in a top hat. Normally you'd scroll past. But something makes you pause - maybe it's the name, maybe it's the timing - and you pull up the DEX pair to take a look. 🤔

There's almost nothing there. A few hundred dollars of liquidity. A handful of wallets. Twelve transactions total, half of them belong to the developer moving tokens between their own addresses. You close the tab. Nothing about this told you it was going anywhere, and you were right not to buy - statistically, this is where almost every memecoin ends: nowhere, with a chart nobody will ever screenshot.

But every so often, one doesn't die quietly. The interesting part about memecoin economics isn't the meme itself - it's the sequence of very old economic ideas that a coin has to pass through, in order, to become the exception.

Cascade

Before a memecoin can be interesting, it first has to clear a lower bar: it has to get noticed by more than the person who created it. This is where an idea called an informational cascade does the work.

Once a few people take a visible action, the next person often copies it - not because they have new information, but because they assume the earlier movers must know something. If you see three wallets buy a token, you don't ask "what do these three people know that I don't" and go verify it yourself; you just infer that they know something, and you buy too. You've now become the fourth data point for the fifth person.

Nobody in the chain needs to be right. The chain only needs to start.

This is why so many tokens - the vast majority - never make it past this stage. A cascade needs an initial nudge: a KOL post, a coordinated Telegram push, or a lucky repost. Without it, a coin can sit at twelve transactions forever, because people do not ordinarily buy a token simply because it exists.

BanksterCoin, in our hypothetical example, catches a break here.

A Xahau community account reposts the logo as a joke about a recent DeFi exploit. A dozen wallets buy in the next hour, mostly out of curiosity, mostly small amounts. The chart ticks up. And now, for the first time, BanksterCoin has cleared the gate - which means it's eligible for a new, different kind of game.

The Beauty Contest

Once a coin has real trading activity, the question buyers are asking shifts.

It's no longer "do I think this is funny" - it's "do I think other people will think this is funny." This is the territory of what economist John Maynard Keynes called a beauty contest, from a thought experiment in his 1936 book The General Theory of Employment, Interest and Money. Keynes imagined a newspaper contest where readers pick which face, out of many, they think the average reader will also pick as prettiest. The winning strategy isn't picking your own favorite - it's guessing the crowd's guess.

And a sophisticated player goes one level further, trying to guess what the crowd thinks the crowd will guess.

Memecoins run this exact loop, with one twist that makes it even more intense than Keynes' newspaper: the "photo" changes in real time. A rising price is evidence to the next layer of buyers that the crowd has already spoken, which pulls in more buyers, which pushes the price further - a feedback effect economists call reflexivity. At this stage, a coin is competing against every other coin trying to win the same contest.

Back to BanksterCoin: say the joke lands well enough that it spreads past the original community, and for a few days it's competing with a handful of other trending Xahau tokens for the same pool of speculative attention. Holders aren't asking "is the banker joke good" anymore - they're asking "is this the one that's about to be everywhere." Then, inevitably, the buying pressure runs out of new entrants, and the price does what nearly every memecoin price eventually does: it falls, hard.

This is the fork in the road. Most coins that reach the beauty-contest stage die here too - the crash ends their story.

But a small number don't ...

Durable Focality: The Lindy Effect

There's an older, more established idea in economics and probability for what happens when something survives a test like this: the Lindy effect. The name comes from a New York deli where comedians reportedly observed that the longer a show had already run, the longer it tended to keep running. The general version of the idea, discussed by various writers, is that for certain "non-perishable" things - ideas, institutions, cultural objects - survival itself is evidence of durability.

The longer something has lasted, the more reason there is to expect it will continue lasting.

Applied to a memecoin, this is the difference between a coin that pumped once and a coin that has history. If BanksterCoin crashes 90% and then - rather than dying - stabilizes with a smaller, stickier group of holders who keep the joke alive, reference the crash as "the first banker bailout," and keep trading it through a second and third cycle, something has changed. It's no longer competing purely on freshness.

It has lore.

New buyers aren't discovering it cold; they're discovering a coin that other people already decided was worth remembering. That's a fundamentally different, more durable kind of demand than the beauty contest produces - closer to genuine, if informal, brand equity than to a bet on the next viral wave.

A memecoin's staying power is earned through lived, observed survival.

BanksterCoin, if it gets here, becomes something close to the "obvious" banker-joke coin on Xahau, less because of any inherent quality and more because everyone remembers it was the one that survived.

Knowledge Is Power

None of this makes memecoin speculation safe - at best, mapping the mechanism makes the risk more understandable.

The preceding chart is an example of the three phases described in this article; the price action, of course, may be wildly different in real-world examples. It serves to demonstrate the high-level concepts visually, and show the distinct lifecycle phases.

A coin with twelve transactions is not in a beauty contest, no matter how good its meme is. A coin mid-pump has not yet earned any durability, no matter how confident its holders sound. Recognizing which game you're actually playing - cascade, contest, or durability - is a small piece of the puzzle in a market built almost entirely on human psychology.

Sources

Bikhchandani, S., Hirshleifer, D., & Welch, I. (1992). A Theory of Fads, Fashion, Custom, and Cultural Change as Informational Cascades. Journal of Political Economy.

Keynes, J. M. (1936). The General Theory of Employment, Interest and Money, Chapter 12.

Soros, G. (1987). The Alchemy of Finance (for reflexivity).

Ord, T. (2023). The Lindy Effect. University of Oxford working paper, arXiv:2308.09045.

Wikipedia: "Lindy effect": https://en.wikipedia.org/wiki/Lindy_effect

Xahau Network: https://xahau.network

Proving Hooks Are Safe

Hodor — Sun, 12 Jul 2026 01:19:35 GMT

A Xahau community developer, HugeGreenCandle, has written something that sounds like we've stepped into a science fiction movie where the protagonist finds a diary entry from a missing scientist:

"Been building something weird. Protozoa. A little creature that lives on Xahau. One account, the hook is its DNA. It eats real XAH to stay alive, burns energy every ledger on its own, and when it runs out it dies and cleans itself up. Nobody runs it, the chain does."

A creature. On a blockchain. That eats money and dies of old age. 🤔

After that initial report, early on July 4th, the posts kept coming - that same day, and the days after - and each one added a capability that added to the mystery - and my own private skepticism and questions: hunting, sharing food with starving relatives, going dormant instead of dying, even reproducing with genetics decided by a coin flip.

By the end of the week, the posts claimed that the creature could rewrite its own code to grow up.

I'll come back to what that actually means, and whether the claims hold up, in a minute. First, it's worth understanding why a serious developer would spend a holiday week building a digital organism instead of something more conventional. The answer has almost nothing to do with biology, and everything to do with a problem that's currently costing real money in the AI industry: agents that can't stop spending.

The Problem For Agentic Payments

AI agents are starting to pay for things on their own - API calls, data lookups, compute time - without a human clicking "approve". A new protocol called x402 (and several competitors) makes this possible: an agent hits a paywall, pays automatically in digital currency, and proceeds.

The obvious safeguard is a spending cap: "this agent may not spend more than $10 a day." Simple enough - until you remember that agents don't do one thing at a time. A single agent, or a fleet of them, can fire off dozens of requests within the same second.

That's where things break.

Most spending caps work by checking the balance, then approving the payment - two separate steps. If five requests hit that check in the same instant, each one can see the same balance, because none of the other four have been recorded yet.

All five get approved.

A $10 cap becomes an $18 bill. This isn't a hypothetical: real-world reports from teams running these systems have described near-total budget leakage during high-traffic bursts, and it's the same category of bug that lets someone redeem one gift card twice by using two browser tabs at once - just happening at machine speed, thousands of times a day.

A funding cap tells you the most an agent could ever spend. It says nothing about whether the agent's own code behaves the way you assumed it would.

The Challenge of "Proving" Safety

This is where a small but growing industry comes in: smart contract auditors. Firms in this space test contract code against known attack patterns, run automated scanners, and increasingly use AI-assisted tools to flag issues like reentrancy bugs and timing races before code goes live. It's become a narrow specialty precisely because payment code that looks fine in a demo can fail in ways nobody thought to test - especially under the kind of concurrent, high-speed conditions agentic payments create.

But testing has limits.

A test suite can only try the scenarios someone thought to write. A race condition, by definition, only shows up under specific, hard-to-reproduce timing - which is exactly why it tends to slip past normal QA and show up in production.

The stronger alternative is formal verification: instead of testing a handful of cases, you mathematically prove a property holds for every possible input and every possible ordering of events. It's a much harder discipline, and far less common - which is part of why HugeGreenCandle's summer project is worth paying attention to.

The Organism Living on Xahau

It turns out the 'Code Protozoa' isn't really about the organism. It's a stress test.

As HugeGreenCandle put it directly:

"If I can prove a self-reproducing, self-modifying organism can't cheat, then proving a normal payment hook is easy."

The creature is the hardest thing he could think of, to build and formally verify - metabolism, reproduction, predation, cooperation, self-modification - precisely so that verifying an ordinary payment contract looks trivial by comparison. Every "life stage" the creature gained over the week was really a new category of mathematical proof he'd learned to check.

Decoding the Protozoa

Once you swap out the biology metaphor for the underlying technology, the picture is a lot less exotic - and a lot easier to trust.

Here's the translation, mapped directly from HugeGreenCandle's own explanation:

Label	What It Actually Is
Organism / creature	A Xahau account
DNA / genome	A small chunk of saved data (traits) stored on that account
Body / life-stage form	The program ("hook") installed on the account
Energy	Real XAH the account holds - never fabricated
Metabolize	The program subtracts a little energy each time it's triggered
Feed	Someone sends the account a payment
Reproduce	The parent funds a pre-made empty account and writes a new genome into it
Die	The program deletes itself and clears its data
Predation / cooperation	Accounts sending payments or messages to each other
Vivarium (the viewer)	A separate app that reads the accounts and draws a picture of the "world"

Nothing here is is from a dark, medieval laboratory ... it's (mostly) standard engineering on Xahau's Hooks - its native smart-contract layer - described in language built to activate people's imagination.

It worked; that's how this article exists. 😁

A Hook Installing a Hook? And Other Madness

The strangest-sounding claim in the whole thread is that the creature "rewrites its own code" to grow up. That sounds like it should be impossible - and in a sense, it is. HugeGreenCandle was careful to correct my understanding on exactly how it works:

"It never modifies source and never generates or compiles code at runtime... 'Self-modification' means the hook calls SetHook on its own account to replace the installed hook with a different, pre-compiled, pre-proven hook, referenced by hash... it can ONLY ever install a hash from a closed, pre-proven allowlist, or delete, never arbitrary code."

In other words: nothing is invented on the fly.

It's less "a caterpillar spontaneously growing wings" and more "a caterpillar flipping to a pre-approved butterfly blueprint that was already sitting on a shelf."

The idea - proving a program that can install different pre-approved versions of itself can never sneak in an unapproved one - is, in HugeGreenCandle's words, "the hardest verification target," and the whole reason the demo exists.

That difficulty points at something bigger than one creature.

A Hook can, by design, construct and send nearly any transaction type on its account's behalf. That flexibility is powerful, but it also means the space of things a Hook could theoretically do is far too large for any one developer to reason through. Guard rules built into Xahau ensure a Hook can't run forever or loop out of control - but that only proves a Hook stops.

It says nothing about whether it stops having done the right thing. That gap between "it halts" and "it behaves correctly for every possible input" is exactly what formal verification is built to fill.

What's Public, What's Private

HugeGreenCandle has an existing crypto company & site, Kairo Vault Technologies, and is positioning Protozoa as the proof-of-capability behind a paid hook-auditing service - a formal-verification offering for Xahau smart contracts, with agentic (or hook) payment safety certification as an idea.

It's a useful offering: verification services like this barely exist yet in the Xahau ecosystem, and one arriving now says something about how quickly the space is maturing.

It also presents a challenge.

He's been explicit that the prover - the tool that actually does the checking - and the creature's source code stay private: It's a practical desire to prevent his competitive advantage from being copied.

Next Up

The organism itself was never really the point - it was a proof of a different kind.

If Kairo Vault can turn that into an auditing service for Xahau Hooks, it fills a real gap at a moment when the ecosystem clearly needs one. Technology adoption is never a straight line; Kairo Vault is positioned with a useful offering for entrepreneurs and businesses that would like an extra level of assurance as they begin to use Xahau hooks for more and more projects. X>

Sources

Q&A over X DM with the creator of xahau-mcp and evernode-mcp HugeGreenCandle

HugeGreenCandle posts on X, July 4–9, 2026

July 4th Post: https://x.com/Cryptocrazy589/status/2073315704095510559?s=20

July 4th Post: https://x.com/Cryptocrazy589/status/2073429788984050106?s=20

July 4th Post: https://x.com/Cryptocrazy589/status/2073578182142541979?s=20

July 4th Post: https://x.com/Cryptocrazy589/status/2073637391097897203?s=20

July 7th Post: https://x.com/Cryptocrazy589/status/2074398699040735251?s=20

July 9th Post: https://x.com/Cryptocrazy589/status/2075127276547801293?s=20

July 10th Post: https://x.com/Cryptocrazy589/status/2075426678956814343?s=20

Kairo Vault Technologies (https://kairovault.com/)

Xahau Network documentation, Hooks (https://xahau.network/docs/hooks/)

Xahau Network documentation, Debugging Hooks (https://docs.xahau.network/concepts/debugging-hooks)

x402.org, protocol overview (https://x402.org/)

Coinbase Developer Platform, x402 Core Concepts: Facilitator (https://docs.cdp.coinbase.com/x402/core-concepts/facilitator)

"Free-Riding in the AI Economy: Demystifying Logic Flaws in x402-Enabled Payment Systems," arXiv (https://arxiv.org/html/2605.30998v1)

"Five Attacks on x402 Agentic Payment Protocol," Li, Wang & Wang, arXiv (https://arxiv.org/html/2605.11781v1)

"Hardening x402: PII-Safe Agentic Payments via Pre-Execution Metadata Filtering," arXiv (https://arxiv.org/pdf/2604.11430)

Chainalysis, "Inside x402: 100M Agentic Payments on Base" (https://www.chainalysis.com/blog/x402-agentic-payments-adoption/)

One Xahau AMM: Doing Its Job

Hodor — Sun, 05 Jul 2026 20:08:26 GMT

One Xahau launched on May 29, 2026 as one of the first DeFi platforms built natively on the Xahau network, bringing an automated market maker, a lending protocol, and perpetual contracts to the new smart contract network.

Built entirely with hooks - Xahau's account-centric, smart contract layer - One Xahau's AMM supercharges on-ledger liquidity for digital assets like EVR.

Xahau network's native AMM remains on the roadmap, due later this year.

Comparison: XRP Ledger Vs. Xahau Order Books

A comparison of the top five maker-taker offers on each DEX shows the effect that One Xahau had on the Xahau DEX order books for the EVR pairing:

Xahau's EVR order book came in tighter (a 1.58% spread vs. 1.90% on the XRP Ledger) and considerably deeper ($9,118 vs. $2,529 across the top five bid/ask levels).

For a hook-powered AMM that just debuted in late May of this year, that's a fantastic early showing.

One Xahau is proving that its implementation is having a very real, positive, and profound effect on Xahau DEX liquidity for the pairings that it supports, and may set the stage for what will be successful in the native AMM feature. X>

Sources:

Xahau Network Roadmap: https://xahau.network/roadmap/

Xaman DEX xApp snapshots

Site: https://onexah.io/defi

https://xpert.page/hodor/blog/one-xahau

https://x.com/One_Xahau

https://x.com/Cbot_Xrpl