This page loads its crypto (blake2b + ML-DSA-44 post-quantum signatures) from a public CDN over the
network. If you are offline or the CDN is blocked, collecting cannot run.
Get started
Generate a brand-new collecting identity (an ML-DSA-44 post-quantum keypair) or import an
existing private key. Everything happens locally in your browser — your private key never
leaves this device.
This key controls your collecting rewards. Back up either the 24-word recovery phrase or the raw private key below — save it somewhere safe. Anyone who has it controls your coins, and if you lose both there is no way to recover.
Write these 24 words down in order. You can restore this exact wallet on any device from them — and so can anyone else who reads them.
Show the raw private key instead
Collecting identities must prove they run on a real phone. Right after this step the wallet asks your device to attest itself; a computer, VM or emulator cannot, and will not be able to collect once the rule is active.
“Continue” stores the key in this browser's localStorage so collecting can auto-resume. By default it is plain text — turn on Settings → Encrypt wallet with a password to encrypt it at rest and enable auto-lock. Only keep a plain-text key on a device you trust.
🔒 Wallet locked
Your wallet is encrypted on this device. Enter your password to unlock it.
Forgot the password?
There is no password recovery — the key can't be decrypted without it. Restore your wallet from its 24-word recovery phrase or private-key backup instead (that replaces the locked copy).
Change relay node
If your relay is unreachable you could get locked out. Set a working full-node URL here so the app can connect.
Wallet —
Balance
—
—free
· —bonded
🪙 Playable
—
Identity
—
Registered—
· Fidelity—
Savings
—
⏳ Amounts marked “confirming” are being sealed into a block right now. They can't be spent or played yet — they unlock automatically, usually in under a minute. Nothing is lost.
—
Reveal / export private key
Never share this. Anyone with it owns your rewards.
Collecting
Why this device cannot register, and what to doAttest another way
A Ledger or Trezor Safe can vouch for this wallet instead of a phone or TPM (Chrome, Edge or Brave on a computer; close Ledger Live / Trezor Suite first). The wallet's coins stay here — the hardware only proves it is one real device.
How to attest with a Ledger or Trezor
Ledger Nano S, Nano S Plus, Nano X, Stax, Flex:
1. Close Ledger Live — it holds the device.
2. Plug the Ledger in, enter the PIN, stay on the dashboard (no app open).
3. Use Chrome, Edge or Brave on a computer, press "Attest with Ledger" and pick the device in the browser dialog.
4. The Ledger asks "Allow unsafe manager?": press both buttons to allow. The wallet registers by itself.
Renews weekly on its own; the Ledger only vouches, it never holds this wallet's key.
Trezor Safe 3 (T2B1, T3B1), Safe 5 (T3T1), Safe 7 (T3W1):
1. Close Trezor Suite (and the Trezor Bridge) — they hold the device.
2. Plug the Trezor in and unlock it.
3. Use Chrome, Edge or Brave on a computer, press "Attest with Trezor Safe" and pick the device in the browser dialog.
4. Confirm the device-authentication prompt on the Trezor's screen. The wallet registers by itself.
Trezor One and Model T have no secure element and cannot vouch.
Attest another wallet or node
Vouch for another wallet or a node from this device. Paste the address (a wallet's address, or a node's from its /status page), then press the button: this device attests that address, the statement travels through the network, and the other wallet or node registers itself with it. Renew once per lease (36 h from a phone, 7 days from a Windows PC). This device is the one bound, so it cannot vouch for a second identity while that lease lives.
—
Status
Idle
Device
Current epoch
—
Expected time to collect
—
Collecting while locked
—
Presence lease ⓘ—
%
Dividend accrued ⓘ—
Collecting rewards
last 7 days
— NADO
OPEN lane—BONDED lane—Dividend—
Selection lanes
Open lane
—collectors
Bonded lane
—validators
Open weight
—
Bonded shares
—
OPEN 30%
BONDED 70%
Open lane — free, capital-lessBonded lane — locked stake
—
Send
Payment request loaded — review and confirm.
Network fee: —ⓘ
Spendable balance: —
Receive
Share this QR or payment link to request NADO. Scanning it with a phone opens this
wallet with a Send pre-filled — the sender always reviews and confirms before anything is sent.
QR generator unavailable — copy the payment link below.
📣 Share NADO
Anyone who scans this opens the collector and can start collecting in one tap — no install, no signup. This is how NADO spreads: share the link.
QR generator unavailable — copy the link below.
Assets tokens on the execution layer
Anyone can issue a token here. Balances live on the
execution layer and are committed in its settled root, so a holding is as provable as a NADO balance —
but a token is not NADO and has no bridge back to L1. An asset is fixed-supply by default;
tick mintable only if you need to issue more later, and remember you can renounce that
power permanently but never get it back. Moves apply at finality (a few minutes).
Your assets
—
Send
Issue a new asset
Assets you issued
—
Burn
Approvals (delegated spend)
Authorise someone else to move a set amount of your token
on your behalf — a keeper, a custodian, or another account. They can never move more than you approve
or more than you hold. Approving again replaces the amount; approving 0 revokes.
Approvals you granted
—
Approvals granted to you
—
Reserve vaults
A creator locks NADO behind a token. Any holder can redeem
their tokens for a pro-rata share of that reserve at any time — so the reserve is a floor price you can
always take, not a badge. The creator can only take the NADO back after an announced waiting period, and
redemption stays open the whole time.
—
Redeem — hand tokens back for your share of the reserve
Back a vault — add NADO to its reserve (raises the floor)
Create or manage a vault (issuers)
Back a token you issued
The notice period is fixed forever once set and can
never be shortened — a longer commitment is a stronger signal to holders. One vault per token.
Announce, cancel or release a withdrawal
Aliases a name instead of a hash
Register a short name that resolves to your own address (self) — others
can then send to the name instead of your 49-char NADO address. Names are global and first-come:
3–32 chars, lowercase letters/digits/_/-, starting with a letter.
Registering costs a small anti-squat fee; use Transfer to point it at a different address,
or Unregister to free it.
Your aliases: —
Stake — bond / unbond
Spendable
—
Bonded
—
Tap Estimate to compute the current bonded-stake APY from recent blocks.
Unbonded stake stays locked for 1440 blocks (BOND_UNLOCK_DELAY) after an unbond request before it is spendable again.
Network fee: —ⓘ
% of new rewards → bonded
On — bonding 80% of new collecting rewards each epoch (auto-compounding the bonded lane). Set 0 to keep rewards spendable.
No network fee — unbonding is free.
—leaving savings
History
🏆 Rich list
The largest wallets on the network, by total holdings (spendable + savings).
loading…
📊 Network stats
zkVM execution layer (L2)
no data yet
The execution layer applies contract blobs once their L1 block is final, so its height intentionally trails the L1 tip by the finality window. Deploy and call contracts on the Rollup tab; settlement detail is on the Settlement tab.
Block interval (recent, seconds)
Block reward (recent, NADO)
Transactions per block (recent)
Reorgs per day — blocks this relay reverted, and the deepest single reorg (last 30 days, UTC)
—
Consensus health per day — state-root rejects and emergency-mode entries, stacked (last 30 days, UTC)
—
Transactions per day by type (last 30 days, UTC)
—
Fees burned per day (NADO, last 30 days)
—
Collecting participation per day — present collectors at daily peak
—
Network size per day — peers this relay knew at daily peak
—
Transaction volatility per day — mempool dissent across peers at daily peak (%)
—
Upcoming-block consensus per day — peers agreeing on the next block's transactions, daily low (%)
—
Top balances (NADO)
Wallet distribution — wallets by holdings (NADO)
—
Lane participation
Devices — what collectors run on
—
Reward distribution — where each block's reward flows
Supply distribution
Node map — where the network's peers are
Network nodes — what each peer is running
—
Live from the relay you're connected to. Time-series cover the most recent blocks.
🧩 Rollups — contracts
Deploy and call contracts on the NADO execution layer. Deploys and calls ride L1 as ordered blobs and apply at finality (a few minutes); reads below are live from the exec node.
Contracts
Call a method
Call history
Deploy a contract
⚖️ Settlement (L2)
NADO settles a separate execution layer: bonded collectors attest the L2 state root to L1, and it becomes canonical once 2/3 of bonded stake agrees. This shows the settled root, this node's execution tip, and your role as a collector.
L1 settled root
—
Settled at block
—
Execution tip (this node)
—
Blocks awaiting settlement
—
Your root agrees with the quorum
—
Your role
—
🔀 Atomic swap (HTLC)
Lock coins under a SHA-256 hashlock + a block-height timelock. The claimant reveals the secret to claim before it expires; otherwise you refund. The same hashlock on another chain (BTC/ETH…) makes a trustless cross-chain swap — no bridge, no custodian.
Create a lock
Your swaps
No swaps yet.
Claim with a secret
Treasury Quorum
The treasury is spent only when bonded stakers approve. Anyone can
see it; bonded stakers can propose a spend and vote — one tap, signed with your wallet.
Treasury
—
Max / proposal
—
Next burn
—
Only auto-approve these recipientsOptional. One address (or "faucet") per line. Leave empty to auto-approve every open proposal, whoever it pays.
Multisig shared M-of-N accounts
A shared account that needs M of N member signatures to spend —
for couples, teams, escrow or just two-device security. The address is derived from the member
list + threshold; fund it like any address. Spending is a three-step relay: one member creates a
proposal, co-signers each add a signature (pass the proposal text by any channel — chat, email, QR),
and anyone submits it once enough have signed.
Balance:—
Paste a proposal you received here (or create one above). Add your
signature and pass it on — or submit it once it has enough signatures. Proposals expire if not
submitted within ~50 minutes of creation.
🛡️ Shielded pool
Post-quantum zk-STARK privacy. Withdraw to a fresh address; the proof hides the amount and the banknote you spent.
Shielded balance
0
Pool
…
Deposit (shield)
Your banknotes
No shielded banknotes yet.
🔐 Your shielded address — share it to receive privately
QR generator unavailable — copy the payment link below.
…
Send shielded — a private banknote→banknote payment (no on-chain amount to correlate)
🔒 Proved on this device — fully private (the node never sees your amounts or keys)
Give this claim link to the recipient over any private channel — opening it receives the banknote automatically:
⚠ Don't post this publicly — send it only to the recipient. Anyone who sees it learns the amount (they still can't take the banknote without the recipient's key).
Receive shielded — paste a claim code someone sent you
Withdraw (unshield)
Withdrawals arrive on their own once the proof settles — no extra step. check now
Explore
Network
loading…
Collecting
loading…
Recent blocks
loading…
Mempool
loading…
Messages
Off-chain · end-to-end encrypted · post-quantum · free. History stays on this device.
Settings
Language
Appearance
ThemeRecolours the whole interface — surfaces, text and controls. Contrast is checked for every theme.
Signing & dApps
Allowed dApp sitesSites you trust to request signatures, on top of the official NADO games. Add a dApp's exact origin; anything that moves NADO still shows a confirm that names the site.
A middle ground if you leave the switch above off: bets/spins that escrow up to this much sign without a tap; bigger stakes always ask.
Network
Only the backend changes — this page, its code and your key never move. A failover relay is used only if its finalized chain matches your home relay, re-checked every 5 minutes, and alias payments are cross-checked. Off: the wallet shows offline instead.
Defaults to this page's origin. Your key never leaves this page: a relay only receives signed transactions. A relay can still answer wrongly, so the wallet checks a pinned or failover relay against your home relay (finalized block hash, alias addresses) and every payment confirm shows the exact address. Load the wallet only from get.nadochain.com or a node you run.
Backup
Wallet security
Encrypt the private key stored in this browser with a password (AES-256-GCM). It's decrypted only in memory while unlocked, and auto-lock re-locks it after a period of inactivity.
Account keys
Your address stays the same forever; the keys that may act for it can change. Protecting the account adds a separate recovery phrase — a thief with your device can spend what is liquid, but cannot take the account, your stake or your streak.
Write this recovery phrase down and keep it OFFLINE. It is shown once, never stored on this device, and it can never spend — it can only cancel or approve key changes.
Advanced
Self-test —
Proves this browser's canonical encoding, blake2b hashing, address
derivation, registration PoW, ML-DSA-44 key derivation, txids and signatures are byte-identical
to the node's Python (vectors generated from the live repo).