← Sosaiem
Technical Whitepaper

Sosaiem

A post-quantum, feeless, leaderless currency
Version 1 · Community Draft · No company · No pre-mine
Abstract

Sosaiem is a cryptocurrency designed so that no institution stands between a person and their money. New coins are created only by proof-of-work, at a steady network-wide rate, up to a fixed and final supply of 12,212,010 SOSA. Unusually, mining rewards are split across all active miners in proportion to verifiable work, giving smooth earnings without any pool operator. Every signature uses a NIST post-quantum standard, so the network is secure against quantum computers from its first block. Coins move without fees: transfers are confirmed not by miners but by stake-weighted votes among holders, where a participant’s weight is simply the coins they hold — making forged identities worthless. The result is a single shared ledger secured by two complementary mechanisms, run entirely by its participants, with no privileged party anywhere in the design.

IDesign goals

Sosaiem was built around a small set of non-negotiable commitments, and every mechanism below follows from them:

IISupply and issuance

The total supply is fixed at 12,212,010 SOSA and is never exceeded. Coins come into existence only when a block is mined; there is no other source. Issuance targets approximately 100 SOSA per hour across the entire network, independent of how many miners participate, achieved by aiming for one block roughly every ten seconds with a per-block reward of about 0.27777778 SOSA. Once the cap is reached, block rewards fall to zero and mining naturally winds down, while transfers continue indefinitely by voting. Because transfers never depended on mining for their fees, the network does not face the usual “end of block reward” security cliff.

Total supply12,212,010 SOSA
Target issuance~100 SOSA / hour (network-wide)
Target block time~10 seconds
Block reward~0.27777778 SOSA
Smallest unit10⁻⁸ SOSA

IIIProof-of-work and difficulty

A block is valid only when its hash, read as a number, falls below a difficulty target. Miners search for a qualifying hash by varying a nonce; the block hash is taken over a compact fixed-size header that includes a fingerprint of the block’s contents, so tampering with any transaction still invalidates the block while keeping each hash attempt fast regardless of block size.

Difficulty adjusts itself. Every eight blocks — one epoch — the network measures how long the recent blocks actually took and nudges the target so the average returns toward ten seconds. Each measured interval is clamped before it counts, so a single abnormal gap (a laptop asleep for hours, a node paused) can influence at most one bounded adjustment rather than sending difficulty into a spiral. As more miners join, blocks arrive faster, difficulty rises, and the network-wide rate settles back — which is exactly what keeps issuance near 100 SOSA per hour no matter the crowd.

As with any proof-of-work system, individual block times vary widely; only the average is controlled. This randomness is a feature — it is what keeps two miners from repeatedly finding blocks at the same instant.

IVFair rewards through work-shares

In most coins, one miner wins each block and takes the whole reward; smooth income requires joining a pool run by a trusted operator. Sosaiem removes the operator. While racing for a block, each miner also finds work-shares: hashes of a simpler, publicly-checkable puzzle bound to the current block height and to that miner’s own address. A share is genuine proof-of-work — it cannot be forged without spending effort, nor stolen, nor replayed on another block.

Miners broadcast their shares. Whoever ultimately wins the block must embed the shares seen and split the reward in proportion to them, and every node re-verifies both the shares and the split before accepting the block. The effect is pool-smooth earnings — every active miner is paid a slice of nearly every block, proportional to the work they proved — with no coordinator and nothing to trust beyond mathematics each participant checks for themselves.

Known limitation

A winning miner could deliberately omit shares it saw to keep a larger slice. Honest nodes include every share they receive; the complete defence — a shared share-chain that orphans the blocks of miners who cheat, as in P2Pool — is a substantial addition and is not yet implemented.

VPost-quantum signatures

Ownership and voting are authorised with ML-DSA-65, the module-lattice digital signature standard published by NIST as FIPS 204 (derived from CRYSTALS-Dilithium). Unlike the elliptic-curve signatures underpinning most cryptocurrencies, ML-DSA is designed to resist attacks by large-scale quantum computers. An address is derived as SOSA followed by the first forty hexadecimal characters of the SHA-256 hash of the public key. The trade-off is size: post-quantum keys and signatures are far larger than elliptic-curve ones, which Sosaiem accepts as the cost of durable security.

Signature schemeML-DSA-65 (FIPS 204)
Public key~1,952 bytes
Signature~3,309 bytes
AddressSOSA + sha256(pubkey)[:40]

VIFeeless transfer by stake-weighted voting

Transfers do not ride inside mined blocks and never wait for one. When a holder signs a transfer, it is gossiped across the network. Each validating node checks it against the shared rules — valid signature, sufficient funds, not already spent — and broadcasts a signed vote. A node’s vote carries weight equal to its coin balance. Once votes representing more than half of the online stake approve a transfer, every node applies it. There is no fee at any step.

Votes are monotonic and self-healing. Because nodes are sometimes momentarily a block apart, a node might first judge a transfer invalid; when its ledger catches up it upgrades its vote from no to yes. A yes is never withdrawn, so confirmations are final and a replayed old vote cannot undo them. This lets a perfectly valid transfer confirm reliably even when the sender spends coins so fresh that some peers have not yet seen them.

VIIOne ledger, and Sybil resistance

A participant’s balance is the sum of two records on one ledger: the mining rewards credited to them by the blockchain, plus the net of the transfers confirmed to and from them by voting. Both records are replicated and independently verified by every node, so all honest nodes compute identical balances.

Crucially, voting weight is conserved coin. Splitting a balance across a thousand fresh addresses does not create more weight — it only divides the same weight. Creating empty identities is therefore useless: they carry no stake and no vote that counts. This is what secures the voting layer against the Sybil attacks that defeat naive one-identity-one-vote schemes, and it means validators are not authorities — they are calculators whose influence is bounded by the coins they genuinely hold.

VIIINetworking

Every participant runs a node that both secures the network and serves that participant a complete wallet and block explorer in their own browser — there is no central web service holding funds or keys. Nodes speak over ordinary HTTP and find each other three ways: automatic discovery on a local network, exchange of peer lists so that knowing one reachable node bootstraps a newcomer into the whole network, and an optional published seed list. Each node independently validates every block, share, vote, and signature it receives, so introductions can come from anywhere without requiring trust.

IXSecurity model & honest limitations

Sosaiem is real and works for ordinary use, and it is deliberately honest about what remains hard. Its guarantees hold for the normal case; the following are the frontier, not yet fully solved, and a participant should understand them:

These are stated plainly because a currency asking for trust should earn it with candour rather than claims. None of them is hidden; all are open problems that grow more tractable as more capable people take part.

XParticipation

Sosaiem has no sale, no allocation, and nothing to buy from anyone. The only way in is to run a node: obtain the client, start it, and either mine to help issue and secure coins or receive them from someone who already holds some. The network is its people. Its future — its value, its resilience, its reach — is not something any single party can grant; it is something participants build by showing up.