The First Post-Quantum Private Money
MoneroUSD (USDm) is true digital cash — a dollar-pegged stablecoin on the world's first private, zero-knowledge block-DAG. Every payment is untraceable and quantum-proof, and settles in under two seconds. It's also the foundation of a complete post-quantum DeFi ecosystem: swap, message, pay, build, and explore — all with zero metadata revealed.
$ 1 USDm = 1 USD — protocol-enforced · post-quantum · zero metadata
A List of Firsts
Not an iteration of anything — a genuinely new kind of money. Watch each breakthrough actually work.
The First Private zk-DAG
Every other private coin runs a single-file chain. MoneroUSD is a GHOSTDAG block-DAG — blocks confirm in parallel lanes and link to many parents, so the ledger is fast and leaderless. Each block seals itself with its own zero-knowledge proof and carries the identical constant-256 cover, so the graph you're watching reveals nothing about who paid whom.
Post-Quantum at Every Layer
ML-KEM-768 encryption, ML-DSA-65 signatures, Poseidon2 hashing, WHIR proofs — and not a single elliptic curve anywhere. A quantum computer can't unwind today's transactions tomorrow: harvest-now-decrypt-later simply bounces off. The first money built to outlive the quantum era.
True Digital Cash
Every block records exactly 256 notes and 256 spend tags — real payments hidden among byte-indistinguishable cover, shuffled to random positions. Scan the chain as any node, indexer, or global adversary: count, volume, timing, amounts, identities — all invisible. One note is one dollar bill.
PQ FCMP++ Membership
MoneroUSD's own post-quantum Full-Chain Membership Proofs. A spend proves it references a real, unspent note somewhere in the entire chain — millions of candidates — without ever pointing at one. No decoy rings, no heuristics to attack: the proof closes and not a single note lights up.
O(1) at Any Height
The chain grows forever; the node doesn't grow at all. State, RAM, and proof size stay constant at any height — notes are stored nowhere and regenerated on demand. A phone verifies the whole chain from a single WHIR proof of about 45 kilobytes — the megabyte-scale STARK it replaces is retired — whether the chain is a day or a decade old.
Absolute Finality, Under 2s
Blocks land about every 500 milliseconds, and a post-quantum finality certificate makes settlement absolute in under two seconds — card-swipe fast with cash finality. No probabilistic waiting, no rollback window, no "wait for six confirmations."
The First 100% Tor-Native Chain
Every node speaks only over Tor v3 onion services — there is no clearnet path in the protocol at all — and constant-rate cover cells make even packet timing meaningless. The DAG's default width of 32 absorbs onion latency completely: blocks confirm in parallel while packets take the scenic route, so total network privacy costs zero speed.
One Ecosystem, Fully Private
Everything you can do with money — reimagined post-quantum, node-first, and metadata-free. Your node is the hub; every app orbits it.
USDm Wallet
The first post-quantum private desktop & mobile wallet. Sub-second sends, a live mirror of your own node, and a built-in browser that opens every ecosystem app.
Ion Swap
A fully private DeFi exchange — swaps, liquidity pools, one-click token launches, DCA, yield, and NFTs — running entirely on your node, with no order-flow or balances leaked.
Letter
Private messaging that works like sending a sealed letter: ML-KEM-768 handshake, ML-DSA-65 authentication, onion transport, and a metadata-blind relay. Nobody can see who wrote to whom.
USDm Pay
A private, self-custodial bank in your pocket — pay by @username, tap-to-pay at the register, and a spend-bounded card key. The privacy of cash with the convenience of a card.
Explorer
A novel private block explorer: real proving power and TPS, with a constant 256 transactions shown for every block — because a true-cash chain must never reveal how many payments really happened.
MonerousD IDE & DSOL
Write and deploy smart contracts on DSOL — a post-quantum contract VM — straight from an in-browser IDE. Programmable money that keeps every layer quantum-safe and private.
Run a Node
The chain is the backend, so anyone can host it. One click runs a full post-quantum node — O(1) state, instant sync, onion transport — that produces, verifies, and serves the whole ecosystem.
Sovereign Hosting
Every app here is served by the chain itself — the node is the backend. No cloud, no VPS, no single point to censor or take down. The network hosts the network.
How It Works
Three steps to private, stable money.
Create Your Wallet
Generate a recovery seed. That's your only credential — no accounts, no email, no identity verification. Your seed alone restores your full balance and spendability from the chain, at any height, forever.
Fund with Crypto
Swap BTC or XMR for USDm at live market rates, backed at 150% — deposit $150 of crypto to receive 100 USDm. Every USDm is overcollateralized from the moment it exists, so the reserve can only grow.
Spend Privately
Send USDm to anyone in under two seconds. PQ FCMP++ membership proofs plus constant cover traffic make every payment untraceable — your balance, your history, your identity, and even how often you pay stay private.
Download
Native desktop wallet for every platform.
macOS
Windows
Linux
macOS Users: Allow App to Run
MoneroUSD is not signed with an Apple Developer certificate, so macOS will show "damaged and can't be opened." To fix this, open Terminal and run:
sudo xattr -rd com.apple.quarantine "/Applications/Monero USD Wallet.app" && sudo codesign --force --deep --sign - "/Applications/Monero USD Wallet.app"
This removes the quarantine flag and ad-hoc signs the app locally. You will be prompted for your Mac password. If it still doesn't open, go to System Settings → Privacy & Security and click "Open Anyway" next to the MoneroUSD message.
PQ FCMP++ — Privacy That Survives Quantum
MoneroUSD's own post-quantum Full-Chain Membership Proofs — the strongest transaction privacy ever shipped, and the only kind a quantum computer can't unwind.
The anonymity set is the whole chain
PQ FCMP++ (post-quantum Full-Chain Membership Proofs) replaces decoy selection entirely. A spend proves — with Poseidon2 commitments and a WHIR zero-knowledge proof, no elliptic curves anywhere — that it references a real, unspent note somewhere in the entire chain. Millions of candidates, zero information leaked. Double-spends are blocked by an O(1) nullifier accumulator while the spent note stays unlinkable, and the proof is a constant few tens of kilobytes that verifies in milliseconds on a phone — at any chain height, against any quantum adversary, forever.
Ring Signatures (Legacy)
- 11–16 decoy outputs per input
- Statistical analysis can narrow candidates
- Classical curves — breakable by a quantum computer
- Privacy degrades over time with chain analysis
PQ FCMP++ (MoneroUSD)
- Every note on-chain is a candidate — millions
- Zero-knowledge proof — no information leakage
- Post-quantum — safe against quantum adversaries
- Privacy is cryptographic, not statistical
FAQ
Common questions about MoneroUSD.
sudo xattr -rd com.apple.quarantine "/Applications/Monero USD Wallet.app" && sudo codesign --force --deep --sign - "/Applications/Monero USD Wallet.app" — this removes the quarantine flag and ad-hoc signs the app locally. If it still won't open, go to System Settings → Privacy & Security and click "Open Anyway."Download the Wallet
Download the native desktop wallet for macOS, Windows, and Linux. Your keys never leave your device.
Download Now