Now accepting sealed bids
Bidders encrypt their bids client-side with FHE. The Solana program compares ciphertexts to pick a winner without ever decrypting them. The property settles cross-chain via an Ika dWallet — no bridge, no custodian, no operator who can see the room.
Every bid is encrypted with Encrypt FHE before it touches Solana. The program runs a compare_bids graph on ciphertexts to pick the winner — no validator, no operator, no indexer ever sees the amounts. Sealed in the envelope, opened only at settlement.
The property token lives on Bitcoin, Ethereum, or any chain inside an Ika dWallet — a 2PC-MPC signing object jointly controlled by the seller and the Ika network. Settlement is a single cross-chain signature direct from the dWallet. No wrapped tokens, no relayer, no message bus.
The frontend rides RPC Fast Yellowstone gRPC: the backend subscribes once to the program, fans out via SSE, and the browser sees listings and bids appear with sub-second latency. The wax seal on every active lot pulses while the stream is alive.
Reserve price is encrypted with Encrypt FHE; the listing reserves an Ika dWallet for the property's home chain. A canonical message hash binds the sale to id, seller, metadata, and deadline.
Each amount is encrypted client-side; only the ciphertext pubkey lands in the Bid PDA. Bidders never see each other's offers.
The seller runs the FHE compare_bids graph against every bid to determine the winner — without decrypting any of them. The losers stay sealed forever.
Encrypt's threshold network decrypts only the winning bid's amount and the winner's identity. Every other bidder remains private.
The Ika dWallet signs a transfer for the property token on the target chain — direct from the dWallet, no bridge, no wrapped collateral, no custodian.
One codebase, three independent track submissions — each judged on its own merits.
Real CPI integration with Encrypt FHE (compare_bids graph + threshold decryption) and Ika dWallets (approve_message). Eight on-chain instructions tested end-to-end against surfpool. Without these primitives, Hadal cannot exist.
Backend subscribes once via Yellowstone gRPC and fans out to every browser over SSE. The wax seal on every active lot turns live — and pulses — the moment RPC Fast is wired.
Connect-wallet-to-bid in 30 seconds, sub-second updates, editorial UI. The full sealed-bid lifecycle works in the browser — list, bid, finalize, reveal, settle, acknowledge.