Native Layer 1 Proof-of-Work Blockchain
CPU-friendly, memory-hard Proof-of-Work blockchain (ConvergenceX) with a transparent on-chain Gold Vault and Proof of Personal Custody (PoPC) architecture. Each block reward is split 50% miner / 50% DTD (the on-chain distribution draw). Until V15 (block 25,000) the split was 50% miner / 25% Gold Vault / 25% PoPC; at V15 the Gold Vault and PoPC shares of NEW emission went to 0 and their accumulated balances became the reserve the DTD Jackpot spends — supply-neutral, no new emission. SOST is not fully gold-backed at issuance; the Gold Vault is a protocol-level reserve-accumulation mechanism, not a redeemable backing or financial guarantee. Open source under the MIT License.
The Foundation's manual operations during Phase 1 are transitional by design, not permanent — progressive decentralization toward full automation is a constitutional commitment, not a discretionary goal.
- Website: https://sostcore.com
- Explorer: https://sostcore.com/sost-explorer.html
- GitHub: https://github.com/Neob1844/sost-core
- Whitepaper: https://sostcore.com/whitepaper.pdf
✓ SLIP-0044 recognition (June 15, 2026) — SOST is registered in the BIP-44 / SLIP-0044 coin-type registry, merged by SatoshiLabs (creators of Trezor) in satoshilabs/slips#2004.
| Field | Value |
|---|---|
| coin_type (decimal) | 1869902947 |
| coin_type (hex) | 0x6F747463 |
| BIP-44 derivation path | m/44'/1869902947'/0'/0/0 |
The reference wallet currently uses BIP-39 mnemonics with the seed used directly as the key (no BIP-32 derivation). The official SLIP-0044 coin_type is registered; full BIP-44 hierarchical derivation (the path above) is planned for a future wallet version, with migration tooling and advance community notice. This is a wallet/UX enhancement, not a consensus change — existing addresses and keys remain valid.
| Role | RAM | CPU | Notes |
|---|---|---|---|
| Full node (verify/send/receive) | ~500 MB | Any modern CPU | Verifies blocks via Transcript V2 in ~0.2ms. 2 GB VPS sufficient. |
| Miner (find blocks) | 8 GB min (4 GB dataset + 4 GB scratchpad) | Multi-core recommended | 16 GB total system RAM recommended. Each thread = 1 independent attempt. |
Mining is memory-hard (ASIC resistant), but verification is lightweight — anyone can run a node.
# 1. Build
sudo apt install build-essential cmake libssl-dev libsecp256k1-dev
git clone https://github.com/Neob1844/sost-core.git
cd sost-core && mkdir build && cd build
cmake .. -DCMAKE_BUILD_TYPE=Release && make -j$(nproc)
# 2. Create wallet
./sost-cli --wallet wallet.json newwallet
./sost-cli --wallet wallet.json getnewaddress "my-miner" # label the mining key
# 3. Pick YOUR OWN RPC password and keep it out of the command line.
# There is no SOST-wide RPC password: this one protects YOUR node, and it
# is not your wallet passphrase.
mkdir -p ~/.sost && umask 077
openssl rand -base64 30 > ~/.sost/rpc.pass && chmod 600 ~/.sost/rpc.pass
# 4. Start node (terminal 1) — connects to seed.sostcore.com automatically
./sost-node --genesis genesis_block.json --chain chain.json \
--rpc-user <user> --rpc-pass-file ~/.sost/rpc.pass \
--profile mainnet --p2p-enc on
# 5. Start mining (terminal 2). --wallet + --mining-key-label select the key
# that SIGNS your blocks (SbPoW); the payout address is derived from it.
./sost-miner --wallet wallet.json --mining-key-label "my-miner" \
--genesis genesis_block.json \
--rpc 127.0.0.1:18232 \
--rpc-user <user> --rpc-pass-file ~/.sost/rpc.pass \
--profile mainnet --realtime --threads 4 --blocks 100
# 6. Send SOST (requires 1,000+ confirmations on coinbase UTXOs)
./sost-cli --wallet wallet.json --rpc-user <user> --rpc-pass-file ~/.sost/rpc.pass \
send <destination_address> 10.0Current release: v16.2.3. Official binaries and hashes:
https://github.com/Neob1844/sost-core/releases/tag/v16.2.3 — verify with
sha256sum -c SHA256SUMS before running anything. If you build from source the
build directory must be named build, or the hashes will not match.
| Binary | SHA-256 (v16.2.3) | Description |
|---|---|---|
| sost-node | b253e4a9c352ea4b… |
Full node — P2P, JSON-RPC, chain validation, mempool |
| sost-miner | 2ef9d0a77f243224… |
ConvergenceX Transcript V2 PoW miner (SbPoW-signed blocks) |
| sost-cli | 489f43741437a08b… |
Wallet CLI — keys, balances, transactions, NODE_BIND |
| sost-rpc | (built from source) | Standalone RPC client for node queries |
Already running a node or a miner? The agreed update window is after block #29,900 and before #30,000: https://sostcore.com/sost-upgrade-v1622.html. V16 consensus activates by itself at #30,000; the first DTD Jackpot V2 draw is #30,186.
./sost-node [options]
--genesis <path> Genesis block JSON (required)
--chain <path> Chain state file (load/save)
--wallet <path> Wallet file (default: wallet.json)
--port <n> P2P port (default: 19333)
--rpc-port <n> RPC port (default: 18232)
--rpc-user <user> RPC authentication username (required unless --rpc-noauth)
--rpc-pass-file <path> RPC password read from a PRIVATE file (mode 600) — preferred
--rpc-pass <pass> RPC authentication password (visible in ps; use --rpc-pass-file)
--rpc-noauth Disable RPC authentication (not recommended)
--connect <host:port> Connect to specific peer (default: seed.sostcore.com:19333)
--profile <p> Network profile: mainnet|testnet|dev (default: mainnet)
The node:
- Validates all blocks and transactions against consensus rules (R1-R14, S1-S12, CB1-CB10)
- Maintains the UTXO set and mempool
- Rescans wallet UTXOs on startup and persists to disk
- Auto-saves chain state after every accepted block
- P2P block/tx relay with DoS protection (ban scoring, 64 inbound peer limit)
- Checkpoint validation and max reorg depth (500 blocks)
./sost-miner [options]
--address <sost1..> REQUIRED: your wallet address to receive mining rewards
--genesis <path> Genesis block JSON (required)
--chain <path> Chain state file (required)
--rpc <host:port> Submit blocks to node via RPC (recommended)
--rpc-user <user> RPC authentication username
--rpc-pass-file <path> RPC password from a PRIVATE file (mode 600) — preferred
--rpc-pass-fd <n> RPC password from an open descriptor
--rpc-pass <pass> RPC authentication password (visible in ps)
--blocks <n> Number of blocks to mine (default: 5)
--max-nonce <n> Max nonce per round (default: 500000)
--profile <p> Network profile: mainnet|testnet|dev
--realtime Use real timestamps (default)
RPC mode (--rpc 127.0.0.1:18232): Fetches mempool transactions via getblocktemplate, includes them in the block, distributes fees across coinbase outputs, submits via submitblock. Recommended.
Standalone mode (no --rpc): Writes directly to chain.json, coinbase-only blocks, no transaction support. Not recommended for production.
./sost-cli [--wallet <path>] [--rpc-user <user> --rpc-pass-file <path>] <command> [args...]
newwallet Create new wallet file
getnewaddress [label] Generate new receiving address
listaddresses List all wallet addresses with balances
importprivkey <hex> Import a 32-byte private key (hex)
importgenesis <path> Import genesis block coinbase UTXOs
getbalance [address] Show balance in SOST
listunspent [address] List unspent transaction outputs
createtx <to> <amount> Create and sign a transaction (outputs hex)
send <to> <amount> Create, sign and broadcast to node via RPC
dumpprivkey <address> Reveal private key (DANGER)
info Wallet summary
Fee calculation: CLI v1.3 calculates fees automatically based on transaction size (default: 1 stock/byte, minimum relay fee: 1,000 stocks). Use --fee-rate <n> to override.
Coinbase maturity: Coinbase UTXOs require 1,000 confirmations before they can be spent. The CLI automatically filters immature UTXOs and shows clear error messages.
Wallet encryption: AES-256-GCM with scrypt key derivation (N=32768, r=8, p=1). Encrypt via save_encrypted() / decrypt via load_encrypted().
sost-cli sendqueries the node for current chain height (maturity filtering)- CLI selects mature UTXOs, calculates fee, builds and signs TX
- CLI broadcasts signed TX to the node via
sendrawtransactionRPC - Node validates the transaction and accepts it to the mempool
sost-minerfetches mempool viagetblocktemplateand includes transactions in the next block- Node confirms the transaction when the block is accepted
- Transaction outputs become spendable immediately (coinbase outputs require 1,000 blocks)
curl -s -u <user>:<pass> -X POST -H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"getinfo","params":[]}' \
http://localhost:18232| Method | Params | Description |
|---|---|---|
| getinfo | — | Node status, height, difficulty, balance, mempool |
| getblockcount | — | Current chain height |
| getblockhash | height | Block hash at given height |
| getblock | hash | Block details including cASERT mode |
| getaddressinfo | address | Address balance, UTXO count and list |
| getbalance | — | Wallet balance |
| listunspent | — | Wallet UTXOs |
| gettxout | txid, vout | Query specific UTXO |
| validateaddress | address | Check address validity and ownership |
| getnewaddress | [label] | Generate new wallet address |
| sendrawtransaction | hex | Submit signed transaction to mempool |
| getmempoolinfo | — | Mempool size, bytes, fees |
| getrawmempool | — | Pending transaction IDs |
| getrawtransaction | txid [verbose] | Get raw tx from mempool |
| getpeerinfo | — | Connected P2P peers |
| submitblock | block_json | Submit mined block (used by miner) |
| getblocktemplate | — | Get mempool txs for block building |
| Parameter | Value |
|---|---|
| Algorithm | ConvergenceX Transcript V2 (CPU, 8GB RAM mining: 4GB dataset + 4GB scratchpad; ~500MB node validation via 11-phase segment/round verification at ~0.2ms, ASIC-resistant) |
| Block time | 10 minutes target |
| Difficulty | cASERT unified (bitsQ Q16.16 + 43 equalizer profiles E7-H35). V1 (blocks <1450): 48h halflife, 6.25% delta cap. V2 (blocks 1450-5174): 24h halflife, 12.5% delta cap. HISTORICAL 5260-5269: ±30 s dead band, 0.5%/1.5%/2.5%/3.0%, median288 check. Current: target 600 s; avg288 bitsQ (block 5175+, compares avg of last 288 block intervals vs 600s target), recomputed every block. Dynamic cap (block 5270+): dead band ±15 s, then 0.5%/1.0%/2.0%/3.0% by deviation. Equalizer (structural work profile, never touches bitsQ): 43 profiles E7-H35 (table since block 5750), direct lag map since block 5323, ceiling H35 since block 12000, anti-stall 60 min, V12 triangular cascade (block 7350+). H10+ margin=115. |
| Initial block reward | 7.85100863 SOST |
| Emission | Smooth exponential decay, q = e^(-1/4) |
| Epoch length | 131,553 blocks (~2.503 years, Feigenbaum alpha) |
| Max supply | 4,669,201 SOST hard cap, enforced at consensus level (subsidy drops to zero when cap is reached; miners earn fees only) |
| 95% supply | ~12 epochs (~30 years) |
| Reward split | 50% miner / 50% DTD from V15 (#25,000). Before V15: 50% miner / 25% Gold Funding Vault / 25% PoPC Pool. Gold Vault and PoPC receive 0% of new emission from V15; their existing balances fund the DTD Jackpot (100 SOST base, 500 cap, no new emission). |
| Coinbase maturity | 1,000 blocks |
| Min relay fee | 1,000 stocks (0.00001 SOST) |
| Address format | sost1 + 40 hex chars (20-byte pubkey hash) |
| Signature | ECDSA secp256k1 (libsecp256k1) with LOW-S |
| P2P port | 19333 |
| RPC port | 18232 |
| Default seed | seed.sostcore.com:19333 |
| Mainnet genesis | 2026-03-15 18:00:00 UTC |
| Chain selection | Best chain by cumulative work (NOT longest chain). work = floor(2^256 / (target+1)) per block |
| Fork resolution | Atomic reorg with full rollback on failure. MAX_REORG_DEPTH = 500 blocks (~3.5 days) |
| P2P encryption | X25519 + ChaCha20-Poly1305 (default on) |
These addresses receive coinbase rewards at every block. Hardcoded at genesis, immutable forever.
| Role | Allocation |
|---|---|
| Miner reward | 50% to miner's configured address |
| Gold Funding Vault | 25% to automatic XAUT/PAXG purchases (auditable on-chain) |
| PoPC Pool | 25% to Proof of Personal Custody rewards |
Gold Funding Vault and PoPC Pool addresses are defined in include/sost/params.h.
| Parameter | Value |
|---|---|
| Min relay fee | 1 stock/byte (0.00000001 SOST/byte) |
| Typical TX (~250 bytes) | ~0.00000250 SOST |
| Fee split | 50% miner / 25% Gold Vault / 25% PoPC Pool |
| Fee market | RBF (Replace-by-Fee) + CPFP (Child-Pays-for-Parent) |
| Arithmetic | Rational integer (no floating-point in consensus) |
Fees follow the same constitutional 50/25/25 split (blocks 0–24,999; 50/50 miner/DTD since #25,000) as block subsidies. After emission ends, fees continue accumulating gold reserves in perpetuity.
SOST does not support smart contracts. Instead, purpose-built transaction types provide financial primitives directly in the consensus layer — deterministic, auditable, and not exploitable through contract bugs.
| Phase | Timeline | Description |
|---|---|---|
| 0 | IMPLEMENTED | BOND_LOCK (0x10) + ESCROW_LOCK (0x11) — consensus types, activate at height 5000 |
| 0 | IMPLEMENTED | PoPC Model A (bond+custody) — 5 RPC commands, registry, rewards, slash |
| 0 | IMPLEMENTED | PoPC Model B (escrow) — 4 RPC commands, immediate rewards |
| 1 | Q2-Q3 2026 | Live custody verification via Etherscan + first PoPC participants |
| 2 | Q4 2027-Q1 2028 | Native metal tokens (XAUT-SOST, PAXG-SOST, SLVR-SOST) |
| 3 | Q2 2028 | Fully native PoPC — zero Ethereum dependency |
Active output types at height 5000: OUT_BOND_LOCK (0x10), OUT_ESCROW_LOCK (0x11). OUT_BURN (0x20) is reserved but not planned for activation — SOST supply is immutable by construction.
PoPC RPC commands (10 total): popc_register, popc_status, popc_check, popc_release, popc_slash, escrow_register, escrow_status, escrow_verify, escrow_complete, getsostprice. Dynamic rewards adjusted by Pool Utilization Ratio (PUR). Anti-whale tiers above 10 oz. Step-by-step guide: website/sost-popc.html.
SOST Reference Price: Calculated as (gold committed in PoPC × gold price) ÷ total SOST supply. Foundation commitment: 0.6 XAUT + 0.6 PAXG = 1.2 oz. Gold prices fetched live from CoinGecko (XAUT + PAXG average). This is NOT a market price — it will be replaced by exchange data when SOST is listed on a CEX/DEX.
Standalone HTML file (explorer.html) that connects to your node's RPC with authentication.
Features: dashboard with block height/supply/hashrate, difficulty progress bar, Gold Reserves tracker, PoPC Pool tracker, emission curve chart, chain timing panel, block detail with cASERT equalizer profiles (E7-H35), address view with mature/immature balances, Foundation Reserves page, smart search, RPC auth, auto-refresh (10s), responsive design.
| Component | Status |
|---|---|
| Transaction signing (libsecp256k1) | Complete |
| Consensus validation (R1-R14, S1-S12, CB1-CB10) | Complete |
| cASERT bitsQ difficulty adjustment (avg288 + dynamic cap) and Equalizer (43 profiles E7-H35, direct lag map) | Complete |
| Mempool validation and relay | Complete |
| Transaction confirmation in blocks | Complete |
| RPC authentication (--rpc-user/--rpc-pass) | Complete |
| Coinbase maturity filter (1,000 blocks) | Complete |
| Dynamic fee calculation (CLI v1.3) | Complete |
| Wallet encryption (AES-256-GCM + scrypt) | Complete |
| P2P DoS protection (ban scoring, peer limits) | Complete |
| Checkpoints + reorg limit (500 blocks) | Complete |
| write_exact() reliable socket writes | Complete |
| P2P encryption (X25519 + ChaCha20-Poly1305) | Active (default on) |
| HD Wallet BIP39 (12-word seed phrases) | Complete |
| SOST-PSBT offline signing | Complete |
| Native multisig (sost3 addresses, OP_CHECKMULTISIG) | Complete |
| Trusted address book (4 trust levels) | Complete |
| Treasury safety profile (daily limits, vault mode) | Complete |
| RBF (Replace-by-Fee) | Complete |
| CPFP (Child-Pays-for-Parent) | Complete |
| Build hardening (6 compiler/linker flags) | Complete |
| Capsule Protocol v1 (binary tx metadata, height 5000) | Complete |
| cASERT V2 fork (24h halflife, 12.5% cap, block 1450) | Complete (historical) |
| cASERT avg288 bitsQ (block 5175+) + dynamic cap (block 5270+; 5260-5269 historical variant) | Complete |
28/28 CTest targets pass.
cASERT profile update note: No regenesis required. Genesis block hash, commit format, and Transcript V2 verification semantics are unchanged. However, the expanded cASERT profile range (E4-H35, 40 profiles at the time; 43 profiles E7-H35 since block 5750) is consensus-affecting across software versions: the node validates the miner's declared profile against the permitted range. All nodes and miners must run the updated binary before launch to ensure consistent profile validation.
New nodes sync faster by skipping expensive ConvergenceX recomputation for trusted historical blocks. Structural, semantic, and economic validation always runs — only the expensive CX recompute (100K rounds, 4GB scratchpad + 4GB dataset, stability basin) is conditionally skipped. Note: with Transcript V2, node validation uses an 11-phase compact proof (segments_root + sampled round witnesses) at ~0.2ms per block — no scratchpad/dataset needed (both are independently indexable at O(1) via SplitMix64/SHA256).
This does not change consensus rules. A block that passes fast sync verification would also pass full verification. The only difference is computational cost.
Trust model (two independent mechanisms):
- Hard checkpoints: A block is trusted ONLY if its height AND block hash match a hardcoded checkpoint exactly. Lower height alone is never sufficient.
- Assumevalid anchor: If a known block hash exists on the active chain, ancestors of that branch can skip expensive CX recomputation. If the anchor is not on the active chain, no fast trust.
Always verified (all blocks, all modes): header structure, timestamps/MTP, cASERT bitsQ difficulty, commit<=target, coinbase split (50/25/25), constitutional addresses, transaction semantics, UTXO updates.
Skipped (trusted historical blocks only): full 100K-round gradient descent, 4GB scratchpad + 4GB dataset rebuild (miner-only memory), stability basin re-verification.
Flags:
--full-verify: Force full ConvergenceX recomputation for every block--no-fast-sync: Same as --full-verify
Checkpoints and assumevalid anchor are updated with each source code release.
| Sync mode | 10K blocks | 50K blocks | 100K blocks |
|---|---|---|---|
| --full-verify | ~3 days | ~15 days | ~30 days |
| default (fast) | ~2 min | ~5 min | ~10 min |
# Dependencies (Ubuntu 24.04)
sudo apt install build-essential cmake libssl-dev libsecp256k1-dev
# Build
git clone https://github.com/Neob1844/sost-core.git
cd sost-core
mkdir build && cd build
cmake .. -DCMAKE_BUILD_TYPE=Release
make -j$(nproc)
# Run tests
ctest --output-on-failure- Build hardening: stack protector, ASLR (PIE), RELRO, FORTIFY_SOURCE — 15/15 tests pass
- Transaction Safety Layer: trusted destinations, cooldown, anti-phishing (no consensus change)
- Fee system: 1 stock/byte minimum, rational fee-rate ordering, estimatefee advisory
- cASERT profile exposed via RPC getinfo (real-time from node)
- Beacon II-A notice channel: the operator public key is pinned in
src/beacon.cpp. Canonical fingerprintbbb560e3ec86114a59762d467d645c88cfe0497a8f7ca542c973e2e0def8186b=sha256(lowercase uncompressed pubkey hex). Recompute it against the in-tree key to detect a substituted pubkey; the same fingerprint is cross-published in the whitepaper and the BitcoinTalk ANN. Phase II-B threshold keys remain disabled (sentinelINT64_MAX).
- Bugs and feature requests: https://github.com/Neob1844/sost-core/issues
- Security vulnerabilities: Use the private contact form at sostcore.com/sost-contact.html and select "Security Vulnerability Report". Do NOT open a public GitHub issue for security disclosures.
SOST is experimental, unaudited software. It is a completely new proof-of-work protocol written from scratch — NOT a fork of Bitcoin, Litecoin, Monero, RandomX, Ethash, Equihash, CryptoNight, X11, Scrypt, or any other existing cryptocurrency or mining algorithm. The ConvergenceX proof-of-work, cASERT difficulty adjustment, and constitutional economic model are original designs.
This codebase has NOT been audited by any external security firm. Testing has been conducted using internal tools, 28 test suites, and manual code review. The protocol has NOT been stress-tested by a large number of independent miners. Undiscovered vulnerabilities may exist.
Every participant is solely responsible for their own investment decisions. You may lose your entire investment. The developer (NeoB) assumes NO liability for any losses resulting from the use of this software, whether caused by bugs, vulnerabilities, design flaws, or any other reason. This is not financial advice.
SOST is provided "AS IS" without warranty of any kind.
SOST Protocol and the ConvergenceX implementation contained in this repository are released under the MIT License. See LICENSE for full terms.
The software may be used, copied, modified, integrated, distributed and deployed in accordance with the MIT License.
Exchanges, custodians, wallet providers, block explorers and infrastructure operators may integrate and operate SOST nodes, wallets and RPC services without any licence fee, security deposit or additional permission.
The SOST and ConvergenceX names and associated branding may be subject to separate trademark rights.