A social app that is also
your wallet.
Speak freely. Own everything. Pipoke is anonymous-by-default social, on-chain markets, voice rooms, and a full Octra wallet, all in one app.
Six surfaces, one app.
Pipoke is the social layer of Octra: read, post, speak, trade, play, govern, without ever leaving for a wallet, a DEX, or a voice app.
Wallet is the app.
Your POKE balance, your launched coins, your positions, your P&L, all live where your feed does. You sign once and a session key handles the rest. Octra closes the loop in about half a second.
Sign once. Tap forever.
Built for the people
making the thing.
Pipoke is for creators who would rather own a coin than rent a Patreon. Who would rather stream into a recorded on-chain artifact than a 24-hour Twitch VOD. Who would rather get paid the same epoch as the work, not the same quarter.
Launch your own coin
A bonding curve in ten seconds. Your fans buy in, graduate the curve at 500 OCT, you keep 2.5% of supply unlocked at graduation. Trade fees fund creator + community pools.
Coin LauncherLive stream with a paid gate
Drops are single-host live broadcasts, audio + video, with an optional POKE entry fee. Recorded on-chain as a sealed VOD that lives forever. Listeners count, paid listeners count separately.
Drops · LiveKit + OctraRun a community treasury
Spin up a community in minutes. Multi-admin, on-chain proposals, POKE treasury, mod queue, appeals. Your subscribers fund it; your governance decides.
CommunitiesGet paid for the writing itself
Voice notes, stories, long-form essays (up to 150,000 chars with Premium+). Every action you take feeds the engagement vault, you earn POKE just for being active. See the next section.
Premium tiers + engagement vaultAuction unreleased work
Sealed-bid commit-reveal auctions for digital items, your Biont NFTs, or any OCS01 token. Buyers commit a hash, reveal the salt, settle on second-highest bid.
Commit-reveal · 16 public shardsNo payout cycle. Just on-chain.
Payments land in your wallet the same epoch they happen. No "Stripe will pay you in 14 days." No middle layer. No platform float.
Octra epoch finalityGet on the founding-creator track.
Early bonded handle, gold rim, and a coin-launch slot reserved during the mainnet rollout. Hop into the Discord and tell us what you make.
Pipoke pays you back.
Every fee paid on the network feeds an on-chain vault. Every period, the vault redistributes POKE to users who engaged, weighted by tier. No corporate "creator fund." No 90-day payout cycle. A Merkle proof, a claim transaction, done.
You act, fees split.
Every paid action on Pipoke, post, like, repost, poke, premium claim, pays a small POKE fee. That fee is split on-chain: 50% burn, 40% engagement vault, 10% treasury. (5K / 4K / 1K of every 10K POKE.)
A period closes.
When the period closes, an off-chain compute builds a Merkle tree of every contributor's share. The root is published to the engagement vault on-chain.
You claim with a proof.
Open your wallet. The app fetches your Merkle path. You sign one claim transaction (claim_with_proof_d4 / d8 / d16 depending on depth). POKE lands in your wallet.
Premium multiplies your share.
Engagement weight is tiered. Free accounts get a base multiplier. Premium boosts it. Premium+ boosts it more. The contract enforces this.
How the fee splits.
Fee collectorPost without identity.
Prove without exposing.
Pipoke ships native anonymous posting, anonymous voice rooms, and anonymous auctions. All three use the same primitive: a Groth16 zero-knowledge proof over a Poseidon Merkle root of commitments. You prove you are a member of the set without revealing which member.
For when speech needs to be louder than a wallet handle.
For whistleblowers
Publish without naming yourself. The proof says you exist in the commitment set; it does not say which member you are. The platform cannot subpoena what it does not have.
For dissidents + journalists
Co-sign sensitive posts anonymously. Speak in a Backroom with a masked identity. Bid on a sealed auction with a separate anon credential. Your wallet stays clean.
For everyone who values privacy
Most users will never write a leak. They still get the option to switch off identity for a single thread, a single room, a single vote, without having to leave Pipoke.
Four surfaces. The same cryptography.
Anonymity in Pipoke is the same primitive across the feed, voice rooms, auctions, and (next) DMs.
Anon posts
Each anon post submits a snarkjs proof + a nullifier. The contract calls groth16_verify_bn254 and admits the post into the anon feed.
Backrooms
The room opener proves anon-set membership in zero knowledge before the contract opens the room. Listeners join under masked call-signs derived from the nullifier.
Anon auctions
A separate anon-bidder credential commits, reveals, claims payout, and claims refunds. The seller never sees a wallet handle.
Anon DMs
Direct messages routed through a relayer with sender-side blinding. Coming in the next release.
Try it in the app.
Generate an anon identity, register the commitment, and post into the feed without ever touching your wallet handle.
Launch a coin in 10 seconds.
One wizard. Bonding curve from the first buy. Graduate to a sealed OCT pool. Per-coin chat, holder bubbles, live trade feed, all native to the Pipoke feed, all settled on Octra.
Provably fair. Sealed cards.
Pipoke ships native games that you can audit. Every hand, every multiplier, every duel publishes its seed after the fact. The math is open.
Poker
Cash + multi-table tournamentsSealed hole cards via NaCl box. Server seed revealed post-hand. 6-max cash, single-table SnGs, and 180-player MTTs.
Crash
House + 1v1 PvPMultiplier climbs, you cash out. Seed commit-reveal makes the crash point unforgeable. PvP duels for higher stakes.
Duels
1v1 competitiveA codified 1v1 layer for short-form games. Same fairness guarantees, lower latency, settle within an epoch.
More provably-fair on-chain games are on the way, chess, dice, mini-PvP modes, and tournament layers across all of them. Every new game ships with the same commit-reveal + open-seed posture.
Voice rooms,
recorded on-chain.
Drops broadcast a single host to anyone who shows up. Community Rooms host a five-speaker conversation with an open audience. Backrooms hide the host's wallet behind a nullifier so you can show up, speak, and vanish.
Govern together. On-chain.
Pipoke communities are multi-admin and member-vetoable from day one, audited against the standard governance failures (single-admin compromise, immortal creator, single-sig treasury). Every membership, every proposal, every vote, every treasury cent, every mod call, all signed transactions on Octra. No Discord backend. No off-chain mod log.
Sealed bids. Honest reveals.
Pipoke auctions are sealed-bid second-price via the commit-reveal auction contract, commit a hash, reveal a salt, settle on the second-highest bid. Bid identity can be your wallet or a separate anon-bidder credential.
Commit
Bidder posts hash(bid + salt) + a deposit. Nobody can see the bid, not even the seller.
Reveal
Within the reveal window, you publish the salt + amount. The contract checks the hash matches.
Settle
Winner pays the second-highest revealed bid (second-price). Losers get their deposits back automatically.
Anything an OCS01 token can hold.
The router dispatches your auction to one of 32 shards, 16 public, 16 anon, based on the kind. Bidding happens on the shard; settlement is atomic with the asset escrow on the same contract.
Digital files
Any file you can upload. Zip, jpg, png, mp3, mp4, pdf, txt, art, docs. Sealed into your Circle, handed to the winner at settle.
Biont NFTs
Auction your bonded souls. Transfer-into-escrow at create, payout-or-return at settle.
Other NFTs + OCS tokens
Any XNS-1 or OCS-01 NFT / token id. Coin allocations, drop NFTs, badges, vouchers, anything approved into the shard.
RFPs
Sealed-bid contest on a topic. No item, no escrow. Highest revealed bid wins, opener picks the operator who settles.
Bid without revealing who you are.
Each user has a separate anon-bidder credential in Settings. Sign with it to commit, reveal, claim payouts, claim refunds, and trigger the no-delivery refund, all without ever touching your main wallet handle on-chain.
- Per-anon bid nonce so a seller cannot link multiple bids on the same auction back to you.
- Sealed-deposit release lets you lose silently, never reveal a losing bid.
- Anon claim payout / anon claim refund are signed with the anon-bidder key, not your wallet.
End-to-end private.
NaCl X25519 keypairs derived from your wallet signature. Sealed-key exchange per follower channel. Media stored in your Octra Circle as encrypted blobs, the platform never sees your photos.
- Per-pair box keys via Ed25519 → X25519 conversion
- Follower-only posts seal a per-follower symmetric key
- Voice notes use a per-message Circle passphrase
- Group rekey + deniable messages on the next roadmap
we still on for the drop tonight?
yeah, sending the link
opening a backroom right after, want a co-host slot?
hell yes
Every Pipoke action
is an on-chain transaction.
There is no Pipoke database that holds the "real" state and a chain that holds a copy. There is no off-chain orderbook. There is no "we'll batch this and post a Merkle root next week." Every social signal, post, reply, like, follow, tip, bid, vote, is a transaction signed by your session key and finalized by Octra in about half a second.
What is "a transaction" in Pipoke?
You can replay every Pipoke account from genesis by reading the chain. No backend recovery process. If our indexer disappeared tomorrow, your data does not.
Your private data lives in a Circle.
On-chain transactions hold receipts. The actual bytes, voice notes, story video, DM photos, follower-only attachments, coin images, drop VOD chunks, live in Octra Circles: encrypted blobs you write through your session key. The chain references them via oct:// URIs; the platform never sees the plaintext.
On-chain receipts. Encrypted private data. No platform custody.
Octra holds the audit trail. Your Circle holds the secrets. Your wallet holds the keys. Pipoke is the interface, you can swap it out tomorrow and your social graph, your coins, your communities, your DMs still exist.
Built on Octra.
Pipoke runs on Octra. Formal verification, fast finality, native ZK primitives, and an encrypted data layer mean every feature on the previous sections is settled on-chain instead of behind a backend wrapper.
Epoch finality timeline
Live · devnetEach dot is a validator slot drifting across epochs. The violet sweep is a Groth16 BN254 proof being verified by the network, on-chain, in a single epoch.
The mobile app you
actually live in.
The Pipoke PWA is already production-quality on iOS Safari and Android Chrome, try it now at dev.pipoke.chat. Native iOS and Android wrappers are the next ship: TestFlight first, Play later.
- Native push for DMs, drops, and live trades
- Lock-screen voice notes
- Deep links into 0xio wallet for one-tap session signing
- In-app browser polished for Octra session keys
Now. Next. Later.
No quarter labels. Pipoke ships when it ships. Here's where everything stands.
- Coin Launcher: bonding curve + post-grad AMM
- Communities: multi-admin, treasury, mod queue, appeals
- Drops: single-host broadcasts with on-chain VOD
- Backrooms: anonymous voice rooms
- Poker: cash + multi-table tournaments
- Crash: house + 1v1 PvP
- iOS app: TestFlight
- Scheduled posts
- Group rekey + invite management
- Anon DM allowlist
- Crash 1v1 polish + tournaments
- Deeper Octra wallet integrations
- Android app
- Encrypted POKE: part of the 1B supply, held under an upcoming Octra token standard
- Biont breeding gameplay
- Decoy posts (cover-traffic)
- Deniable messages
- Anon DMs end-to-end
Join the conversation.
Hop into the Pipoke Discord. Talk to the team, follow shipping in real time, get help with the app, and grab early access to TestFlight + new mechanics.
Your feed, your keys.
Text, voice, video, images, GIFs, audio, every media type Pipoke supports is published on-chain. Reply with a voice note, comment with a clip, post a story in video. Every signal lives under your wallet. Privacy tiers let you publish public, follower-only, or mutuals-only.