Trust from math,
not from people.
The first blockchain where privacy and regulatory compliance coexist by design. End-to-end TFHE encryption. Quantum-Proof Distributed Custody. Permissionless from day one.
Products
67 Threshold
Layers
Node Runners
are not enemies.
Every existing crypto solution forces a brutal choice: privacy without compliance (Tornado, Monero — banned), or compliance without privacy (Coinbase, Fireblocks — surveilled). Sunima resolves the contradiction.
Every balance, every transfer, every state variable is encrypted with Torus FHE. Plaintext never leaves the user's device. Not even Sunima Labs sees your data.
Every protocol operation passes through multiple independent validation layers before it touches user funds. Each layer is responsible for a specific class of checks — input validation, rate limiting, sanctions filtering, threshold authorization, settlement queues. A vulnerability in one layer cannot cascade into the others. The full security model is documented for verified auditors.
Master key split into 100 Shamir shares across 5 independent layers. No single attack vector — including the founder — can reconstruct it. Protected against everything except nuclear war.
AI-powered Sentinel monitors transactions in real time. Gray market is respected. Black market (OFAC, terror, ransomware) flagged via 67/100 threshold consensus and court orders.
ERC-5564 stealth addresses + ERC-4337 account abstraction. One transaction = two visible addresses. Everything between them is invisible. UX as fast as a bank transfer.
No hired developers. No VC backing. No advisors. No "strategic partners." Just open code, distributed nodes, and the founding philosophy. Anyone, anywhere, can run a Sunima node from day one.
A focused set of privacy-first DeFi primitives, each engineered to feel like a familiar product but with end-to-end TFHE encryption built in from day one. Real liquidity, real users, real fees — and complete confidentiality of amounts, balances, and positions.
Automated market maker with confidential swap amounts. Trade like Uniswap, but observers see only that a swap happened — never the size or direction. Liquidity providers earn fees in $SUN.
Yield-bearing vault with encrypted balances. Stake any supported asset, earn rewards denominated in $SUN. Your position size is invisible to the public chain.
Confidential lending and borrowing. Supply assets to earn interest, borrow against collateral, get liquidated only when you should be — but no one knows your health factor or position size.
Cross-chain transfers with encrypted message contents. Bridge between Ethereum, Arbitrum, Base, Fhenix and other major chains. Validators sign attestations without ever seeing what they attest to.
Sunima follows a defense-in-depth design. Each product is engineered as an independent module with its own access control, rate limits, circuit breakers, and compliance hooks. Modules communicate through encrypted channels with strict whitelist enforcement, so a vulnerability in one component cannot cascade into the protocol as a whole.
The full architecture is described in the technical documentation, available to verified node runners and protocol auditors.
Distributed Custody
The master threshold key is never assembled in one place, on any device, at any time. It exists only as 100 Shamir shares distributed across 5 independent layers. 67 shares from any combination are required for reconstruction.
Permissionless global network. Anyone, anywhere, can run a Sunima node. Not legalized, not licensed, not registered. Geographic distribution makes the network unkillable. Bitcoin model.
Encrypted blobs embedded in contracts on Fhenix, Ethereum, Arbitrum, Base. Public ciphertext, useless without the protocol's decryption key.
HKDF-derived shares bound to user wallet addresses. Whales literally hold a piece of protocol security in their own wallets. The largest depositors have the strongest incentives to protect it.
Hardware-encrypted persistent storage in air-gapped facilities. RAM and GPU explicitly excluded — they are volatile and lose data on reboot. Disk + passphrase only. Even protocol operators cannot reconstruct the key alone.
Steel backup plates (fire and flood resistant), paper printouts in bank safety deposit boxes, sealed envelopes held by trusted individuals. Air-gapped. Quantum-resistant. No computer can attack them.
Protected against hackers, governments, OFAC sanctions, validator collusion, social engineering, physical theft, fire, founder death, and quantum computing. Vulnerable only to global thermonuclear war.
via AI Sentinel
Three-tier monitoring filters 99% of transactions instantly, 0.9% through lightweight ML, and 0.1% through full HYDRA consensus. At 1M tx/day, total compliance cost is bounded at $5,000/day — orders of magnitude less than a traditional KYC department.
Rust + Bloom filters. OFAC checks, known drainer lists, amount thresholds, rate limits. Sub-millisecond, zero cost. 100,000 tx/sec on modest hardware. ~99% of traffic.
TinyLlama 1B / Phi-3 Mini running locally on Sunima infrastructure. Graph embeddings, Lazarus pattern matching, structuring detection. ~$0.0001 per transaction. ~0.9% of traffic.
26 specialized attack heads with multi-model verification. Full audit only for genuinely suspicious transactions. ~$5 per audit. ~0.1% of traffic. Same TERMINATOR engine that audits Sunima's own code.
A legitimate court order is submitted as a signed petition to an on-chain contract. Node runners vote on jurisdiction validity, legal sufficiency, and proportionality. If 67% of active runners approve, the relevant shares are assembled and the specific information is decrypted.
No single jurisdiction can compel compliance. No single entity can abuse the process. Mass-surveillance requests are structurally rejected. All approved disclosures are publicly logged.
Freelance income, cross-border remittances, business privacy, savings protection in unstable jurisdictions. Sunima protects ~80% of global wealth that lives in the gray market. We do not surveil. We do not flag.
OFAC sanctioned addresses, ransomware payments, terror financing per UN lists, Lazarus Group operations. Threshold for flagging is high and based on objective criteria, not subjective judgment.
No LinkedIn farms.
Sunima Labs operates without a public team roster, without VC backing, and without hired advisors. We do not believe in the cult of the founder. We believe in the cult of the code. Every line is open to scrutiny, every audit is published, every protocol decision is verifiable on-chain.
You will not find headshots, biographies, or "about us" pages here. The protocol is the team. The whitepaper is the resume. The audited contracts are the credentials.
We do not have a CMO, a head of growth, or a community manager. Every claim on this site is backed by code, cryptography, or formal verification. If you cannot prove it mathematically, it does not belong in Sunima.
Sunima is designed so that nobody — not the founders, not the validators, not the users — has unilateral control over user funds. Trust is distributed across mathematics, geography, and physics. People are interchangeable. The protocol is forever.
❌ Public team page · ❌ VC raises · ❌ Discounted token allocations to "strategic partners" · ❌ Paid influencer campaigns · ❌ Centralized custody · ❌ KYC for gray-market users
If you want to know who built Sunima, read the code. If you want to know why, read the whitepaper. If you want to know who is responsible if something breaks, read the protocol — because the answer is "nobody, and that is the point."
No VCs. No advisors.
Sunima's native token serves three functions: gas payment, node staking collateral, and governance. Total supply is fixed at 100,000,000 SUN. Non-inflationary. 50% of all protocol fees are burned permanently.
Controlled by threshold governance. Funds development, audits, ecosystem grants, liquidity provision. 4-year vesting.
Distributed over 10 years as rewards for permissionless network participants. Earn $SUN by running a node anywhere in the world.
Airdropped to testnet, beta, and early mainnet users. Real activity, not bot farming.
4-year vesting with a 1-year cliff. The only insider allocation of the supply. No team, no advisors, no VCs, no "strategic partners" to share with.
Seeds initial liquidity across the four products of the Sunima Suite. Incentivizes early LPs. Used for cross-chain bridges.
Half of all protocol fees from DEX, Stake, Lend, and Bridge are permanently removed from circulation. As usage grows, supply shrinks. Structural buy pressure.
From PoC to L1.
A focused, sequential build. No waterfalls, no surprise pivots, no token launch before mainnet. Every phase ships a verifiable artifact: testnet contracts, audit reports, working demos. We do not announce — we deploy.
Core protocol primitives v0.1 deployed on Fhenix testnet. End-to-end encrypted deposit, internal transfer, and withdrawal. Working demo video.
All four products of the Sunima Suite. ERC-4337 account abstraction. Stealth addresses. Sentinel Tier 1. Sunima Wallet SDK in WebAssembly. Private testnet beta with 50-100 users.
Full Sentinel three-tier compliance. Hierarchical Shamir across all 5 layers. Relay network for stealth. External FHE audit. Bug bounty pool $100K. Public testnet.
Mainnet on Fhenix L2. Initial $SUN distribution. Liquidity bootstrapping for all four Sunima Suite products. Public node runner onboarding. Court Order Gateway live with first legal partnerships.
Fork of OP Stack with native TFHE precompiles. Migration of Sunima contracts from Fhenix. Independent sequencer and fraud proof system. Cross-chain bridges from major L1s.
Sunima L1 consensus with Proof of Useful Work. Native TFHE in EVM as first-class instructions, not precompiles. State migration from L2. Independent network bootstrapping.
believe this argument.
We are asking you to watch us make it. Sunima is not a pitch deck, not a roadmap, not a promise. It is a working protocol — code first, claims second. We do not announce milestones. We deploy them.
Sunima Labs · 2026
Trust from math, not from people.