Sirius Labs

Modular security infrastructure for Solana financial flows.

Solana made execution fast. The edges around execution (receiving,
signing, and offline authorization) remain exposed. We secure them.

The Problem

Three problems Solana hasn't solved. Until now.

LEAK 01: Key Exposure

Your key goes online to sign

Private keys on connected devices are exposed to malware and phishing on every signature.

terminal
EXPOSED: malware @ network_layer
Solved by AirSign
LEAK 02: Connectivity

Every payment requires internet

Solana payments require a live RPC connection. In low-signal environments, transaction broadcasting is impossible.

terminal
BLOCKED: no network detected
Solved by MORA
LEAK 03: Deanonymization

Payment history exposes wallet

Who you pay exposes your balance and history. On-chain addresses are permanent links to real-world identities.

terminal
EXPOSED: history permanently linked
Solved by GrayBox

How it works · MORA

Live Devnet Demo: No Wallet Extension Required

Lock once. Pay offline. Settle later.

A merchant accepts SOL payments via QR.
No 4G, no wallet popup, no confirmation wait.

Offline voucher signing, no RPC call

nonce=1 · escrow: 9fcX···4aJ8 · 0.01 SOL
nonce=2 · escrow: 9fcX···4aJ8 · 0.02 SOL
nonce=3 · escrow: 9fcX···4aJ8 · 0.015 SOL

84-byte message · fits in one QR

Step 01
On-chain · Once

Alice locks SOL into escrow PDA via create_escrow.
Internet is never needed for payments again.

Step 02
Offline · Zero network

Alice signs an 84-byte MORA message on her air-gapped device. It encodes the escrow address, a unique nonce, the payee, and the amount. The 148-byte signed voucher (message + Ed25519 signature) reaches Bob via QR: no RPC call, no connectivity required.

Step 03
Under the hood

Each nonce deterministically derives a unique Receipt PDA
on-chain. Replay protection is enforced by Solana. The same voucher cannot be settled twice.

Step 04
Bob settles online

Bob settles on Solana later. Native Ed25519Program pre-verify ensures permanent replay protection during settlement.

Protocol in Action

Alice Pays Bob: How it works?

The Sirius stack integrates seamlessly to provide a complete privacy and resilience layer for low-connectivity transactions.

Air-gappedStealth Vault

Part 1: Setup

Bob shares a Stealth ID. Alice derives a one-time vault address and signs the intention air-gapped via AirSign.

Offline84-Byte Voucher

Part 2: Offline Payment

Alice signs an 84-byte voucher offline. Bob scans the QR. No internet required at payment time.

On-ChainExplorer-verifiable

Part 3: Settlement

Bob settles on Solana later. Funds land in the stealth vault. Bob signs his claim air-gapped to complete the cycle.

Key Security

Key never online

Resilience

Zero network required

Privacy

Wallet never exposed

Trust

Settlement verifiable

Private settlement lane84-byte voucher → PDA escrow••••• SOL
Alice Knows:
  • Her signing key stayed offline throughout
  • Final settlement is verifiable on Explorer
Bob Knows:
  • SOL received safely in his stealth vault
  • His real identity was never linked on-chain
  • His claim key remained air-gapped
The Chain Knows:
  • Alice's public key & a settled amount
  • A one-time vault address was used
  • Nothing about Bob's real identity

Technical flow details

Step 0
GrayBox Registration

Bob generates a stealth base key via GrayBox. He shares a single, permanent Meta-Address with Alice. This address is never seen on-chain.

Step 1
AirSign Derivation

Alice uses Bob's Meta-Address to derive a one-time stealth public key. She signs the transfer intention using AirSign in total isolation.

Step 2
MORA Offline Sign

Alice signs the 84-byte MORA voucher offline. Her device is in airplane mode. Replay protection is enforced on-chain via a Receipt PDA, not a hash chain.

Step 3-4
Transfer & Settlement

Bob verifies the signature offline. Hours later, he connects to the internet to submit the signature to the MORA program and claim funds.

Use Cases

Privacy for every real-world payment.

From payroll to cross-border settlement, every flow benefits from recipient privacy and transaction unlinkability.

Institutional Payroll

Privacy

Salary amounts stay private. Only the authorized auditor can decrypt.

Cross-border Remittance

Global

Send across borders without exposing sender or recipient identity on-chain.

Treasury Management

Strategy

Move funds between accounts without telegraphing strategy to on-chain observers.

Vendor Payments

Ops

Pay contractors without making payment relationships permanently public.

Offline Payments

Offline

MORA enables payment authorization without live connectivity. Settle later.

Compliance Ready

Audit

Viewing keys let authorized auditors trace stealth transactions without full public exposure.

FAQ

Common questions.

Everything you need to know about MORA, AirSign, and GrayBox.

Technical Stack

Modularity by Design

MORAVoucher Ready...

Offline Settlement

Ed25519 signed voucher · double-spend protected · Anchor PDA settlement. Each nonce is unique. The chain rejects replay before funds move.

FrameworkAnchor 0.32
SigningEd25519
AirSignQR Encoding...

Signing Isolation

Fountain-coded QR frames · Argon2id KDF · Ed25519. Tolerates significant QR frame loss (~30%). Designed for air-gapped signing devices.

ProtocolEd25519 + WASM
KDFArgon2id
GrayBoxDeriving Stealth...

Receiver Privacy

x25519 ECDH stealth addresses · unique vault per transfer. AML-screened quarantine vault. Each receiver gets an isolated address.

DerivationECDH
SecurityVault Isolation
TypeScript SDK

Integrate Sirius flows from your codebase.

One SDK for coordinating AirSign × MORA × GrayBox flows. It handles Anchor programs, offline Ed25519 vouchers, and explorer-verifiable settlements without re-implementing the cryptographic stack.

@solana/web3.jsAnchor 0.32Ed25519
  • Stealth address derivation out of the box
  • Offline voucher signing without RPC
  • Explorer-verifiable settlement on devnet
TypeScript
// sirius-integrators · create escrow + sign 84-byte voucher offline
import { AnchorProvider, Program, BN } from "@coral-xyz/anchor";
import { Connection, PublicKey } from "@solana/web3.js";
import nacl from "tweetnacl";
import { Buffer } from "buffer";
import idl from "./mora_idl.json";

// Prerequisites: wallet (AnchorWallet), bob (payee PublicKey),
// keypair (payer, air-gapped), totalLamports (bigint),
// nonceBuffer / amountBuffer / payee (PublicKey) — see docs for details.

const MORA_PROGRAM_ID = new PublicKey("9fcXHD3pHDKLX79JuVgCEKQiqYkvVqFtpoAEVjBq4aJ8");
const connection = new Connection("https://api.devnet.solana.com");
const provider = new AnchorProvider(connection, wallet, {});
const program = new Program(idl, MORA_PROGRAM_ID, provider);

// 1) Lock SOL into escrow PDA — internet required only once
const seed = Date.now();
const seedBuffer = Buffer.alloc(8);
seedBuffer.writeBigUInt64LE(BigInt(seed));
const [escrow] = PublicKey.findProgramAddressSync(
  [wallet.publicKey.toBuffer(), seedBuffer], MORA_PROGRAM_ID);

await program.methods
  .createEscrow(new BN(totalLamports.toString()))
  .accounts({ payer: wallet.publicKey, escrow })
  .rpc();

// 2) Sign 84-byte voucher offline — no RPC call needed
// Format: "MORA"(4) | escrow(32) | nonce(8) | payee(32) | amount(8)
const msg = Buffer.concat([Buffer.from("MORA"), escrow.toBuffer(),
  nonceBuffer, payee.toBuffer(), amountBuffer]);
const sig = nacl.sign.detached(msg, keypair.secretKey);

// 3) Bob settles — Ed25519 native verify + on-chain transfer
await program.methods
  .settle(Buffer.from(sig))
  .accounts({ settler: bob.publicKey, escrow })
  .rpc();
Videos

Pitch + Demo

Watch the pitch and the live MORA offline payment walkthrough.

Pitch Video

The Three-Problem Stack

Protocol-level security for Solana financial flows.

Demo Video

MORA Offline Payment + Explorer Verify

Live devnet walkthrough, no wallet extension required.

Partner and stack integrations carousel

Built for the toolchain you already audit.

Modular with battle-tested Solana primitives: Anchor programs, WASM modules,
ECDH derivation, Explorer-verifiable devnet proofs.

Solana Programs/Anchor·v0.32/Rust wasm-bindgen/Fountain QR/x25519/Ed25519/Devnet explorers/x25519 ECDH

On-Chain Proof

Deployed. Verified. Explorer-verifiable.

2
Anchor Programs
11
Instruction Types
Ed25519 Pre-verify
Live Deployments
GrayBox Program
75Hu············ha6C
DEVNETANCHOR 0.32VERIFIED
MORA Program
9fcX············4aJ8
DEVNETANCHOR 0.32VERIFIED
Demo Stealth Vault
DEVNET
FTwz············JEtView
Optional ZK Layer (Cloak, 3rd Party)
MAINNET

The Sirius stack can optionally route through Cloak, an independent ZK shielded pool not operated by Sirius Labs.
The transactions below are Cloak's own mainnet activity, shown as evidence that the integration is live and verifiable.

Deposit into shielded pool
3bpjSixv···View →
ZK withdrawal
4mLPo2J8···View →
Network
SOLANA DEVNET
Verified
Cryptography & Stack
Key Agreementx25519 (ECDH)
WASM RuntimeRust wasm-bindgen
Solana ToolsAnchor 0.32
ComplianceViewing Key Support
VS. ALTERNATIVES

Feature-by-feature. No ambiguity.

CAPABILITY
SIRIUS LABS
Key never goes online
AirSign layer
Air-gap device isolation
Pay without internet
MORA layer
Asynchronous settlement
Receiver identity hidden
GrayBox layer
Isolated stealth vaults
Double-spend protected
MORA layer
On-chain, trustless
Transaction unlinkability
ZK Pool (optional)
Composable ZK pool

The Difference

Sirius Labs protects a fundamentally different attack surface. Existing ZK solutions hide what was sent. Sirius hides when it was sent, who receives it, and ensures the signing key never touches the internet. Double-spending and double-settlement are enforced on-chain by Solana itself. No trusted server required.

Protocol-Level Security3-Layer Security StackZero-Connectivity Ready
Market Opportunity

The market is large.
The infrastructure doesn't exist on Solana yet.

Sirius targets the massive gap between current blockchain requirements and how people actually move value. We unlock Solana for payment flows that demand privacy and resilience.

0.0B
Low-connectivity
adults
$0.0T
Informal economy
0%
Merchants w/o
4G
None
Offline-native
Solana rails

Existing payment rails require internet, identity verification, and real-time connectivity. Sirius removes all three constraints from Solana.

Sources: ILO, World Bank, GSMA. Emerging market estimates.

Phase I: FoundationComplete

Core stack deployed on Solana devnet. MORA offline voucher escrow, GrayBox stealth addresses with AML-gated quarantine vault, and AirSign air-gapped signing, all functional and explorer-verifiable.

Phase II: AI LayerIn Progress

Sirius AI: Private Payroll Agent. The first AI agent layer built on top of the core stack. Offline authorization, stealth address routing, and air-gapped signing orchestrated autonomously for private payroll flows on Solana.

Phase III: GrowthPlanned
Revenue

Usage-linked fees, enterprise licensing, and validator-aligned revenue share as throughput scales.

Distribution

Wallet adapters, hardware-signer partnerships, and handset OEM pilots in low-connectivity markets.

Infrastructure

Mainnet deployment, relayer network expansion with corridor-specific failover, and third-party security audit.

The Architects

Meet the people behind
the infrastructure

Distributed Systems

Furkan Duran

Istanbul

Specializing in Anchor development and high-performance Solana programs. Focused on deterministic state machines.

Rust
Anchor
Solana
Fintech & Payments

Semih Karadeniz

London

Specializing in institutional payment architecture and financial compliance frameworks. Bridging trad-fiat rails with Solana.

Strategy
Compliance
Payments
Economics & Market

Assoc. Prof. Dr. Özgün Burak Kaymakçı

Istanbul

Providing economic analysis and market strategy for frontier technologies. Focused on emerging market adoption.

Analysis
Market
Economics
BACKED & RECOGNIZED

Sirius Labs emerged from the Colosseum Frontier hackathon to close the critical security gaps blocking broader adoption of Solana, recognized by Superteam Turkey and actively pursuing early-stage investment to deploy at scale across the Solana ecosystem.

Colosseum FrontierSuperteam Turkey

Ready to pay offline
on Solana?

Try the MORA demo. No wallet extension, no real SOL required.

Try MORA DemoRead Docs →
✦ Opening email client...