CPU-friendly Native Layer 1 Proof-of-Work blockchain. Every block splits 50% to the miner and 50% to the DTD distribution, which returns that half to active miners by lottery — enforced by consensus since V15, block #25,000. Until #25,000 the other half funded an on-chain Gold Vault and Proof of Personal Custody rewards; those shares are 0 today, and what they already hold stays on chain and auditable.
Important: SOST is a native crypto-asset created solely by Proof-of-Work mining. It does not represent shares, equity, debt, dividends, profit participation, voting rights, ownership of a company, ownership of mining assets, or any redemption or legal claim against the Gold Vault or any reserve. SOST currently has no market price and no associated value. Nothing here is investment advice or an offer of securities.
SOST · Sovereign Stock Token · ConvergenceX PoW · Native L1 Blockchain
Four properties hardcoded at genesis and enforced by the current consensus rules — any change requires a transparent, network-adopted protocol upgrade. Two enforce credibility (Time, Work). Two enforce value (Scarcity, Store-of-Value Architecture).
Target spacing of 600 seconds → 144 blocks/day = F₁₂, the 12th Fibonacci
number (12²). Difficulty self-corrects every block via the cASERT controller —
bits_q (Q16.16) as primary regulator plus the ConvergenceX equalizer overlay
(profiles E7–H35), driven by a 288-block average, bidirectional and integer-only.
The schedule is sovereign by design: emission decays by e−1/4 each
131,553-block epoch (≈ Feigenbaum α) toward a hard cap of
≈4,669,201 SOST (≈ Feigenbaum δ). No bulk retargets.
Native ConvergenceX Proof-of-Work — not a fork of Bitcoin SHA-256, Monero RandomX, Ethereum Ethash, Equihash, CryptoNight, Scrypt, X11, or any prior algorithm. Memory-hard by construction: 4 GB dataset + 4 GB scratchpad = 8 GB total per mining thread. Per-block 256-op program changes every block. CPU-friendly by design, ASIC-hostile by construction. Verifier reconstructs sampled rounds in ~0.2 ms with 500 MB of RAM.
Hard cap. The number is the first seven significant digits of Feigenbaum's δ (≈ 4.6692016…), the universal constant that governs the period-doubling route to chaos in dynamical systems — the same kind of system ConvergenceX itself solves. No premine. No ICO. No dev tax. No inflation lever. Forever. Emission decays per epoch with q = e-1/4 ≈ 0.7788.
Each epoch is exactly 2.5029 years — the Feigenbaum α
constant. ~95% of the supply is mined in the first ~12 epochs
(~30 years); the remaining tail decays asymptotically across
deeper epochs:
· ~99% → ~18 epochs (~45 years)
· ~99.9% → ~28 epochs (~70 years)
· ~99.99% → ~36 epochs (~91 years)
· ~99.999% → ~46 epochs (~115 years)
The cap of 4,669,201 SOST is an asymptotic limit by mathematical
construction — it is never strictly hit, only approached forever.
That is the point: scarcity guaranteed by mathematics, not by a
calendar.
This was the plan until block #25,000. It is no longer in force: since V15 the
non-miner half of every block goes to the DTD distribution, and the two shares below are zero.
What follows is the record of the original design.
Up to half of total supply was to be gradually converted into gold-funded reserve value, by consensus, every block:
25% (until #25,000; 0 since) — Proof of Personal Custody (PoPC): contracts collateralised
by tokenised gold today, by physically self-custodied gold in the future, with on-chain
cryptographic proof and operator privacy preserved.
25% (until #25,000; 0 since) — Perpetual Gold Vault: network-funded, one-way purchases of
tokenised precious metals (XAUT/PAXG today, broader basket later), accumulated forever in a
Heritage Reserve. Observable reserve ratio — not a peg, not a redemption right.
No peg. No redemption right. No price floor. No investment return. No legal claim over the reserve.
Hardcoded at genesis · enforced by the current consensus rules · any change needs a network-adopted upgrade
The original store-of-value plan — converting up to 50% of supply into a gold-funded reserve (Perpetual Gold Vault + PoPC gold custody) — is no longer the active plan. It has been temporarily superseded by the DTD at V15 (block #25,000).
Why: SOST pursues full decentralization — no operator, no treasury. A network-funded gold reserve leaned on third-party custodians and tokenized-gold issuers (XAUT/PAXG), adding custody, counterparty and regulatory risk that a sovereign, trustless chain should not carry. Instead of parking 50% of emission in an off-chain reserve, that value is now returned directly, on-chain and supply-neutrally to the participants who secure the network, through the DTD. The gold pages are kept for the historical record; nothing is deleted.
The DTD (Deterministic Token Distribution) is a consensus-run, per-draw distribution of the block’s value to eligible network participants — deterministic (the winner is computed by the rules, not chosen by anyone), keyless at SOST layer, and supply-neutral (it moves coins, it never mints them). It runs today and intensified at V15 (#25,000), where the split became 50% miner / 50% DTD.
In plain terms, deterministic token distribution means the split is computed from fixed, reproducible rules — never chosen by anyone.
It does not depend on who runs the calculation, which phone or computer, the browser, the internet speed, or any manual decision.
Auditable by anyone. Because the outcome is pure consensus data, anyone can re-derive the eligible set and the winner straight from the public chain and confirm it matches — via the explorer’s getlotteryaudit (per jackpot) or by recomputing the eligibility set over the last 288 blocks. You never have to trust a website or a person.
The regular DTD distributes the block’s DTD share to an eligible participant, chosen
deterministically by the consensus rules. Historically a draw lands on 1 of every 3 blocks
(it went 2-of-3 at bootstrap #7,100, then 1-of-3 from #12,100).
At V15 (#25,000) it moves to 3-of-3 — a draw on EVERY block, permanently.
Same total value, 3× more & smaller payouts — maximum decentralization. Eligibility is
gated (recent-producer cooldown, anti-dominance) so payouts spread across many participants.
At V16 (#30,000) the draw itself does not change — still every block, still uniform,
still never weighted by PoW, same seed, same 50/50 split — but who qualifies does.
See the gates below.
The same #30,000 activation brings on-chain a native-asset layer (asset genesis / issue / transfer / burn, conservation + supply-cap safety, reorg-safe index), four tokenization modalities (Tokenize, Auction, Draw, Project Funding) and a SOST-layer DEX. While RESTRICTED DEVELOPER MODE (S14) is in force, every native-asset operation must carry an admin-authorized input or the network rejects it at consensus, and public access is disabled — no CLI, RPC or browser bypass. Technical availability is not regulatory authorization; ordinary SOST transfers are unaffected.
The winner is drawn deterministically and uniformly from the set of addresses that pass every gate (any one excludes an address):
Active signed miner — must be a real SbPoW-signed miner identity (its most recent block at height ≥ #7,100); enforced from #12,100. No signed identity, no eligibility.
Active miner (recency) — from #25,000, must have mined ≥1 block in the last 5,000 blocks. From #30,000 (V16) this tightens to the last 288 blocks (~2 days), at every height including jackpot heights; dormant addresses drop out until they mine again.
Recent-producer cooldown — excluded if it produced any of the previous 6 blocks (5 before V13) — stops back-to-back wins. Note it keys on having mined, not on having won. From #30,000 it yields when applying it would leave the draw with nobody.
Anti-dominance cap — excluded if its share of the last 288 blocks is ≥ 10% (from #12,100) — caps concentration. From #30,000 the gate is armed only when the window holds ≥11 distinct miners: below that it would exclude the very miners keeping the chain alive, so with a single active miner that miner can take 100% of the block (50% miner + 50% DTD).
Uniform & keyless — every eligible address has the same probability; the winner is computed from chain state by the rules — never weighted by balance, stake or any payment.
No purchase, deposit, ticket, KYC or fiat requirement. A block’s own producer is not excluded from that block’s draw.
The DTD Jackpot returns the reserve already accumulated in the Gold Vault + PoPC addresses
(~52,000 SOST at V15) back to the miners who run the network — instead of leaving it locked in an off-chain-referenced vault.
It fires on a 288-block cadence (~48 h), paying a jackpot of base 100 / cap 500 SOST, first at
height #25,290, draining over ~3 years. It is supply-neutral (it only moves coins that
already exist) and ends when the reserve is empty — after which only the normal per-block DTD remains.
From block #30,000 the Jackpot is an independent draw with its own eligibility and its own winner:
Active node — the miner identity must have a confirmed NODE_BIND (mining key + node key) and the required heartbeats (none for the first draw, then one per completed 288-block epoch, ramping to 3 of the last 4 epochs).
Real work — at least 3 SbPoW blocks in the last 2,016; the chance of winning is linear in those blocks.
No cooldown and no anti-dominance — those belong to the normal per-block DTD only.
Must have an eligible winner — with no eligible address nothing is paid and the pot rolls over to the next draw (cap 500 SOST).
Historical (#25,290–#29,898): the jackpot went to the DTD winner of the jackpot block, with a 20,000-block recency window.
The normal DTD runs in every block. The DTD Jackpot V2 runs only at jackpot heights (every 288 blocks: #30,186, #30,474, …). At a jackpot height both draws happen in the same block, and they are independent: different eligible sets, different rules, different winners. One miner can win the normal DTD while another wins the Jackpot; the same miner can also win both if both draws select it.
Randomness. Both draws read the same public entropy — the hashes of the 16 previous blocks and the height — but each hashes it under its own domain tag
(SOST_LOTTERY_V11 for the normal DTD, SOST_HIST_JACKPOT for the Jackpot), so each gets its own seed and its own roll. Anyone can recompute both from the chain.
The DTD and the Jackpot never mint new SOST. They redistribute value that consensus already assigned. Total supply stays capped at 4,669,201 SOST.
Winners are computed deterministically from chain state by the published rules. No treasury, no admin key, no discretion — height-anchored and enforced at #25,000.
Every draw and jackpot is on-chain and auditable in the explorer. Consensus is open source (MIT). Canonical spec: V15 DTD Jackpot.
Deterministic Token Distribution · active since block #25,000 · supply-neutral · enforced by consensus · any change needs a network-adopted upgrade
genesis_block.jsoninclude/sost/params.h — the hard cap, and the emission split for each height range (50/25/25 for blocks 0–24,999, 50/50 miner/DTD from #25,000)#7,100 carries a Schnorr signature over its PoW commitment#12,100 — addresses with ≥ 10 % share of the previous 288 blocks are excluded from the DTD reward until their rolling share drops below 10 %, and only miners with an SbPoW-signed block (most recent block at height ≥ 7,100) are eligible; logic lives in src/lottery.cpp::compute_lottery_eligibility_set and include/sost/params.h::is_dtd_dominant / is_sbpow_eligiblemain and the output hash matches the running binarySOST is officially registered in the BIP-44 / SLIP-0044 global cryptocurrency standard, merged by SatoshiLabs (creators of Trezor). SOST now has a reserved coin type in the registry used across the hardware- and software-wallet ecosystem.
| coin_type (decimal) | 1869902947 |
| coin_type (hex) | 0x6F747463 |
| BIP-44 derivation path | m/44'/1869902947'/0'/0/0 |
| Standards | SLIP-0044 registered (BIP-173/350 address format) |
| Reference wallet | currently BIP-39 (seed = key); full BIP-44 HD derivation planned for a future version with migration tooling |
| Reference | satoshilabs/slips #2004 |
Target block spacing is 600 seconds (10 minutes), maintained by the cASERT unified difficulty adjustment system. The bitsQ primary controller handles hashrate changes; the equalizer prevents short-term emission acceleration.
View live block data on Explorer →| Epoch | Years | Reward / Block | Decay |
|---|---|---|---|
| 0 | 0 – 2.5 | 7.85100863 SOST | — |
| 1 | 2.5 – 5 | ~6.1145 SOST | × 0.7788 |
| 2 | 5 – 7.5 | ~4.7613 SOST | × 0.7788 |
| 3 | 7.5 – 10 | ~3.7084 SOST | × 0.7788 |
| 4 | 10 – 12.5 | ~2.8882 SOST | × 0.7788 |
| 5 | 12.5 – 15 | ~2.2492 SOST | × 0.7788 |
q = e-1/4 ≈ 0.7788 · Epoch = 131,553 blocks (≈2.5 years)
In force since V15, block #25,000.
Historical, blocks 0–24,999: 50% Miner · 25% Gold Funding Vault · 25% PoPC Pool. Those two shares are 0 today — nothing new flows into them, and what they already hold stays on chain and auditable.
Block 0 mined on March 15, 2026 at 18:00:00 UTC. First reward: 7.85100863 SOST, split under the rules in force then (miner / Gold Funding Vault / PoPC Pool). Since #25,000 the split is 50% miner / 50% DTD.
View genesis block details →Gold spot (XAU/USD), month-end close. The SOST line is the gold line × the fixed reference weight (0.8886707657 mg) — it moves only with gold, never by decree. Gold reference, not a market price; once SOST is listed, its price evolves on its own, no longer tied to gold.
View all markets →Lines-of-code totals for the SOST stack as of 2026-06-21, side by side with the Bitcoin Core reference implementation. LOC is a rough engineering metric — not a quality, security or decentralisation metric — but it gives a sense of how much surface area the project covers.
| Component |  SOST |  Bitcoin Core |
|---|---|---|
| SOST — Blockchain core (C++ / protocol) | 36,740 | ~280–310k |
| SOST — Consensus & integration tests (C++ / Python) | 37,187 | — |
| SOST — Front-end & explorer (HTML + JS + CSS) | 76,283 | — |
| SOST — Protocol scripts, tooling & services (Python) | 24,457 | — |
| Documentation (markdown) | 37,650 | (separate) |
| Total code (excl. docs) | 174,667 | ~280–310k |
| Total code + docs | 212,317 | — |
1. The blockchain core alone is 6–7× smaller than Bitcoin Core. Bitcoin Core has 15+ years of P2P hardening, scripting (Script + Taproot), thousands of tests, and dozens of network conditions handled in production. SOST does not, and pretending otherwise would be dishonest.
2. The comparison is not like-for-like. The SOST total bundles a hand-rolled front-end and block explorer plus protocol tooling and extensive test suites — domains Bitcoin Core does not contain. The comparable blockchain core is the 36,740-line figure above.
3. What the numbers do show. SOST is a serious project (~212,317 LOC including documentation) with depth beyond a typical altcoin fork — the consensus is custom (ConvergenceX + cASERT), the wallet model is in-house, and the front-end and explorer are hand-rolled.
4. What the numbers do NOT show. Network effect, peer count, security audits, deployed value, decentralisation. Those are independent of LOC and Bitcoin leads on every one of them.
Counts measured 2026-09-14 over the tracked files of the public sost-core repository (git ls-files), excluding vendored code, build trees and bulk data files. Bitcoin Core figure is the upstream bitcoin/bitcoin master snapshot, code + tests, no docs.
SOST is a Proof-of-Work cryptocurrency. Since V15 (#25,000) each mined block splits 50% miner / 50% DTD and no issuance goes to the Gold Funding Vault. Until #25,000, 25% of issuance was allocated to that vault by consensus. Conversions to XAUT/PAXG are operational actions executed with public attestations and auditable trails. The reserve is observable on Ethereum mainnet — not a peg, not a guarantee, but a verifiable commitment.
| Consensus | ConvergenceX PoW — memory-hard, CPU-friendly (reference miner CPU-oriented; protocol does not enforce CPU-only at consensus) |
| Monetary Policy | Smooth exponential decay (q=e-¼), Feigenbaum-derived constants, ~30 years to 95% supply |
| Emission split | 50% miner / 50% DTD since #25,000 (gold and PoPC shares: 0) |
| Reserve | Historical: 25% of every block → tokenized gold (XAUT, PAXG) on Ethereum, until #25,000. Existing holdings remain; SOST is not backed by gold. |
| PoPC | Historical: 25% of every block until #25,000. The DTD requires no PoPC bond at any height. |
| Governance | None. Consensus rules are immutable at genesis. |
| Unit | 1 SOST = 100,000,000 stocks |
| Address Format | sost1 + 40 hex chars (20-byte pubkey hash) |
| Signature | ECDSA secp256k1 with LOW-S enforcement |
Memory-hard proof-of-work requiring 8GB RAM per mining thread (4GB dataset + 4GB scratchpad). Nodes verify blocks in ~0.2ms with only ~500MB RAM. 100,000 sequential iterations and tight memory coupling raise the cost of a competitive GPU/ASIC port; no claim is made that one is impossible. cASERT unified targeting with bitsQ primary controller and equalizer profiles (E4–H12) for progressive hardening under fast-chain conditions.
Explore Technology →
Update — no longer active: at V15 (block #25,000) the Gold Funding Vault / PoPC gold-emission plan has been temporarily replaced by the DTD; the description below is kept for the historical record.
HISTORICAL (until block #25,000): 25% of every block’s coinbase was allocated to the Gold Funding Vault address by consensus. Since V15 that share is 0 — the whole non-miner half goes to the DTD distribution. The vault keeps what it already received, on chain and auditable; SOST is not backed by gold and the reserve is not a peg or a redemption right. The Foundation reserves the right to allocate up to 50% of the vault's accumulated SOST exclusively to fund future centralized-exchange (CEX) listings; the remaining SOST funds gold reserves.
Accumulated SOST is converted to XAUT/PAXG via TWAP pipeline and deposited into
a Heritage Reserve on Ethereum mainnet. Observable reserve ratio —
not a peg.
PoPC is paused indefinitely. Its previous role has been superseded by the current DTD / DTD Jackpot architecture, which redistributes the accumulated reserve on-chain. The 25% coinbase allocation now flows to DTD. Kept here as legacy architecture context.
PoPC (legacy) →Signed offers, acceptances, cancellations, and settlement notices — off-chain, replay-resistant, cryptographically authenticated. Not chat: private economic coordination with canonical hashes and deterministic serialization.
Technical Details →SOST ↔ XAUT/PAXG and native precious-metal positions. Peer-to-peer, thin-chain/fat-edge architecture with deal state machine, watchers, and settlement daemon. Ethereum as minimal onboarding rail, SOST as sovereign center.
Technical Details →
Paused / legacy. The PoPC contract layer (SOSTEscrow.sol base)
is retained for reference; PoPC is superseded by the current DTD / DTD Jackpot architecture and is not an active mechanism.
Build from source, create a wallet, connect to the seed node, and mine your first block. CPU only — no GPU required.
Mining Guide →Real-time dashboard with block details, difficulty tracking, emission curve, Gold Funding Vault and PoPC Pool charts, address lookup.
Open Explorer →Full protocol specification: ConvergenceX algorithm, monetary policy, reserve mechanics, PoPC design, security analysis, and consensus rules.
Read Whitepaper →