About
What this is.
Morana is a volunteer-built, privacy-first proof-of-work network. It is a testnet with invited access, still running on foundation-operated servers: the coins have no value, the chain can be reset, and nothing here is audited yet.
Build identity
Which build of this site you are looking at
Quote these two lines in any problem report. A report that does not name a build cannot be reproduced or closed.
- Version
- unknown (unstamped build)
- Build hash
- unknown (unstamped build)
This deployment was not stamped with a version and commit at build time, so we will not guess one. A wrong build id is worse than a missing one: a missing one prompts a question, a wrong one sends the maintainer to the wrong commit. The operator sets MORANA_BUILD_VERSION / MORANA_BUILD_HASH when building the image.
Reporting on the wallet or the messenger?
Use that application’s own About screen for its version and hash — the numbers above identify this website, not the app you are running.
Honesty
What Morana is not, yet
- Not audited. No external review of the cryptography or the Tor integration has happened.
- Not decentralized yet. Access is by invitation, the relay swarm is foundation-operated, and a registry decides which relays are admitted. Mining is open to any GPU, but the network itself still runs on our servers — see the roadmap.
- Not distributing signed binaries. There is one update root — TUF — and it is not live; see verify.
- Not a currency. Testnet coins have no value and are not for sale; the chain can be reset and balances wiped at any time.
- Not dated. We do not promise a mainnet date; the roadmap describes order, not timing.
- Not a company. This is volunteer-run open source, which is also why there is no bug bounty.
Found a vulnerability? Disclosure channel.