Sirius
Live on Solana devnet

Watch a real epoch of private payments prove itself in under 10 seconds.

A private payments system on Solana. 1000 transactions per epoch, the final proof verified onchain.

How it works
The record · measured

3 consecutive epochs, 1000 transactions each · all verified.

~8.7s
steady interval
per epoch · pipelined
106122
transactions / sec
1000 tx × 3 epochs
9.54M
constraints · groth16
256-byte proof · BN254
verified on devnet
onchain alt_bn128
Prove it live

Prove 1000 transactions live: every epoch under 10 seconds.

Kick off a real run on the prover: three consecutive 1000-tx epochs, pipelined, each settling sub-10s and verified on Solana devnet.

Run it yourself · live GPU

Run a real 1000-tx throughput proof, right now.

● Connecting…
Live now

Every epoch's proof, verified on Solana.

The console settles each proven epoch into a Solana program that checks the BN254 pairing onchain.

Live on Solana devnetrecursive STARK → Groth16 (BN254) · verified onchain
106 to 122TPS
steady throughput
1000 tx / epoch · pipelined
≈8.4s
per-epoch interval
sub-10s ✓
last settled epoch
on Solana devnet
Reading the onchain head…

Each settled epoch publishes its recursive proof to the Solana program, which verifies the BN254 pairing onchain before accepting the new state root.

Is this real?

Yes, and you can check it yourself.

01

Recursive STARK aggregation

Each epoch is a single STARK; a second STARK verifies the first, collapsing a thousand transactions into one fixed-size proof.

02

Self-contained proving

The whole pipeline proves itself end to end, with no distributed prover market and no trusted coordinator.

03

Checkable on Solana

The final 256-byte Groth16 proof is verified onchain by the native alt_bn128 pairing, so anyone can confirm it.

04

Private to its owner

Your balance is private to you. The chain holds only a commitment plus a ZK proof the transition is valid.

recursive STARK aggregation · sub-10s · verified on Solana