token22 pixel coin ▶ Insert hash to continue

Mined, not minted.

Bitcoin earns every block with proof-of-work. Memecoins get a name and a ticker and nothing else. token22 makes coins earn their spot: every launch is stamped with real SHA-256 work against a live Bitcoin block, and every coin without a stamp lands on the Unstamped Board.

Tab open since block 0—
Hash owed per coin1
Stamp rule today19+ bits
$T22Not live
Origin story

Toly said the next token might come from outside Labs. We took him up on it.

In 2022, a Reddit user on r/solana asked about Solana's new token program, Token22. Anatoly Yakovenko, Solana's co-founder, answered that it ships under a new program id, and added one line that stuck with us.

token22 is our answer to that line: a new kind of token, built by people outside Labs, that has to show real work before it counts.

r/solana · u/aeyakovenko · 2022
“It's very possible that the next version of token ends up being built by someone outside of Labs.”
Anatoly Yakovenko, replying to a question about Token22. Quoted for context. token22 is independent and is not affiliated with or endorsed by Anatoly Yakovenko, Solana Labs or the Solana Foundation.
Level 0 · Player one

The only coin that ever proved itself.

Bitcoin's first block is 80 bytes. Hash them twice with SHA-256 and the zeros appear, exactly as they did in January 2009. No company or explorer has to vouch for it. Your browser is checking it right now.

That's the standard token22 holds every coin to. Show the work, or go on the board.

Bitcoin block 0 · checked in your browser hashing…
Height
0 (genesis)
Mined
2009-01-03 18:15:05 UTC
Bits
0x1d00ffff
Nonce
2,083,236,893
sha256d
computing…

“The Times 03/Jan/2009 Chancellor on brink of second bailout for banks”

These 80 bytes were hashed on this page, just now. The result has the zeros Bitcoin demanded in 2009, so the block proves itself.

checking
Level 1 · The Unstamped Board

Every coin since block 0 is on the board.

Bitcoin is the only ledger that proves itself: every block carries the work that made it. Every token minted since then skipped the work. token22 puts them all on the board. Each one owes exactly one hash, and the debt stays open until someone pays it against a real Bitcoin block.

The tab has been open for — counted from the genesis timestamp, live
Hash owed per coin1
Coins proven so far0not live yet
CoinBitcoin hash on fileStatusOwes
Bitcoin
the reference
its own, every blockProven0
$T22
not launched
at birth, once livePending1
Wrapped SOLnoneUnproven1
Every dog coinnoneUnproven1 each
Every cat coinnoneUnproven1 each
Whatever launched this morningnoneUnproven1
Your bagsnoneUnproven1 each
Level 2 · Launch

Start your coin with the work already done.

Every coin launched on token22 is stamped before it exists. Your browser binds the new mint address to a fresh Bitcoin block with real proof-of-work, and the coin goes live on pump.fun with the stamp written into its metadata. It never owes a hash, not even for a block.

Birth certificate, stamped at launch
Coin
$YOURCOIN
Born in
Bitcoin block #— (freshest on the relay)
Stamp
00000e7c1… · 19+ zero bits
Status
PROVEN from slot one

Example layout. Real stamps are made on the launchpad page.

Level 3 · How it works

Bitcoin is the clock. Solana is the scoreboard.

1

Relay

Real Bitcoin block headers are fed to the program. Each one has to extend the last and carry valid proof-of-work, or it's refused.

2

File

Anyone can put any Solana mint on the Unstamped Board. From that moment it officially owes Bitcoin one hash.

3

Prove

Find a nonce that binds the coin to one of the six newest Bitcoin blocks, with enough leading zeros. The work is tied to your wallet, so nobody can copy it.

4

Get paid

The coin flips to PROVEN, a receipt points at the Bitcoin block that saw it, and you're paid in $T22. That's the only way $T22 gets minted.

// the whole puzzle
proof = sha256d("TOKEN22:STAMP:v1" || bitcoin_block || coin_mint || your_wallet || nonce)
require leading_zero_bits(proof) >= bitcoin_block.zero_bits / 4
Level 4 · Difficulty

Bitcoin sets the difficulty. $T22 follows it.

A proof needs a quarter of the leading zeros that its Bitcoin block has. A 2009 block has 32 zeros, so a proof against it needs 16. Today's blocks have around 78, so a proof needs 19. Proving never gets cheaper than Bitcoin lets it.

The reward follows Bitcoin too. Each proof pays 50 $T22 in era 0 and halves every 210,000 Bitcoin blocks. When Bitcoin halves, $T22 halves the same day. Each Bitcoin block can back 21 proofs.

$T22 per proof, by Bitcoin era
Era = Bitcoin height ÷ 210,000. Bitcoin is in era 4 (blocks 840,000 to 1,049,999), where a proof pays 3.125 $T22.
Lore
“It doesn't matter who tells you a longest chain, the proof-of-work speaks for itself.”
Satoshi Nakamoto, bitcointalk.org, 7 August 2010, in the thread “Bitcoin minting is thermodynamically perverse”

Later in that thread, the poster who started it changed his mind: “I am now inclined to think that bitcoin is in fact highly EFFICIENT rather than inefficient.” token22 takes it one step further: if proof-of-work speaks for itself, a coin without any has nothing to say.

Historical forum posts, quoted for context. Neither poster has anything to do with token22.

Free play

Pick a game. All of it runs in your browser.

Where $T22 stands

Not live
Mint addressNot published
ProgramNot deployedcode is open, see Docs
PoolsNone
ListingsNone

Anyone selling $T22 before a mint address appears on this page is not token22. $T22 can only be minted by the program, as a reward for a proof. Nobody can sell you any before then.