Jun 2026
We deleted the list
Every blockchain is a global spreadsheet of who owns what. We threw the spreadsheet away.
A blockchain is a list. Strip the cryptography and the hype and what's left is one giant spreadsheet of who owns what, copied onto every machine in the network, with a protocol whose only job is making everyone agree on the next row. Bitcoin is that list. Ethereum is that list plus code that edits it. The list is the product, and keeping it in sync is what burns the electricity.
We didn't want the list. So the first question for Verse money was the heretical one. Can you have money without the spreadsheet?
Chaum got there in 1982
The answer is older than Bitcoin by 26 years. In 1982 David Chaum published blind signatures and built them into DigiCash, digital money that behaved like physical cash. A coin was a number the bank had signed, but signed blindly, so the bank could verify its own signature without knowing which coin it was looking at. You could hold it, hand it to someone, and they could check it was real, all without a ledger naming you. DigiCash launched in 1990, signed deals with real banks, and went bankrupt in 1998, mostly because the world would not yet pay for privacy and the company itself had to be the trusted issuer. The math was never the problem. The math was beautiful.
Verse money is Chaumian cash, revived. A token is a blind-signed number you hold. You verify it, spend it, pass it on, and the mint that signed it never learned which token was yours. There's no account, no balance row, no record of who paid whom. Possession is the whole story.
The one thing that needs a list
Here's the catch, and it's the only one. Cash has a double-spend problem. A bearer token is just a number, and numbers copy. So something has to stop you spending the same token twice. That something is the single piece of global state Verse keeps: a set of spent tokens. Not balances, not history. A set you check membership against. Did this exact token already get spent, yes or no.
That's the whole ledger, and notice what it isn't. It doesn't encode how rich you are or trace your payments. It's a set of used-up secrets, and you can garbage-collect it. Rotate the mint's keys every so often and old spent tokens fall out, because they're signed by a key that no longer issues. The thing every blockchain treats as sacred and permanent, the complete history of every transaction forever, we treat as a cache you're allowed to forget.
Not proof of work, not proof of stake
People ask which consensus we use. None. Proof of work and proof of stake exist to answer one question: in what order did these transactions happen, so we can agree on the list. We deleted the list, so the question evaporates. A token is single-owner until you spend it, and single-owner things move with no global agreement at all, a result that goes back to the consensus-number work in distributed systems. The only thing that needs ordering is the spent-set, and that's small, local to the mint, and bonded so the mint loses money if it lies.
What you give up is real. There's a mint, a service that issues and checks tokens, and you're trusting it to hold real reserves and not to double-issue. We make that trust as small and as checkable as we can. The mint's signing key is split across many parties so no one of them can forge. Supply is capped by what backs it. Anyone can audit issued against reserves. It isn't the trust-nobody dream. It's trust-one-small-slashable-thing instead of trust-the-whole-network-to-replay-history-forever. We think that's the better trade, and we think the giant spreadsheet was always the part you didn't actually need.