Atho wallet security uses encrypted-at-rest lockbox controls with Argon2id, AES-256-GCM payload encryption, and mandatory Kyber DEK wrap. Wallet staking remains deterministic and auditable: payouts are weighted by each address share of total active stake in the settled epoch.
default (password path) and advanced (password + Kyber unlock file import).
stake_payout_i = stake_pool_epoch * (active_stake_i / total_active_stake_epoch).
720-block epoch plus 3600-block finalization buffer.
Wallet addresses are generated from Falcon public-key material through deterministic SHA3-384 pathways, then
encoded in Base56 for human use. Fee policy is calculated by vsize with a floor of
500 atoms/vB and minimum transaction fee 200,000 atoms.
One key source, multiple role-safe addresses. Domain-separated hashes prevent regular, bond, and stake destination mix-ups.
ATHO_ADDR_V1, ATHO_BOND_V1, ATHO_STAKE_V1.
Base56 avoids ambiguous symbols to reduce copy/read mistakes in wallets, terminals, and printed records.
Role-Separated Base56 UX
Wallet send estimation uses virtual size (vsize) policy. Current floor is
500 atoms/vB with minimum tx fee 200,000 atoms and dust limit
20,000 atoms.
required_fee_atoms = max(500 * vsize, 200000)Role addresses are deterministic and domain-separated from the same Falcon pubkey source bytes, so regular, bond, and stake pathways cannot be confused or replayed across roles.
ATHO_ADDR_V1, ATHO_BOND_V1, and ATHO_STAKE_V1 each hash to separate addresses.
Kyber does not replace AES; it wraps the same DEK used by AES payload encryption. This keeps fast encrypted payload handling plus a post-quantum recovery/control plane.
1) Generate random DEK
2) Encrypt wallet payload with AES-256-GCM(DEK)
3) Wrap DEK with Argon2id-derived KEK
4) Wrap same DEK with Kyber metadata/ciphertext
5) Persist lockbox metadata + encrypted payloadWallet nodes orchestrate private transaction assembly: sender authentication, note selection, deterministic witness context, recipient bundle parsing, and payload encryption before any transaction reaches mempool.
Wallet staking is separate from mining rights. Rewards are settled from the stake-side bucket and distributed by proportional active share in each settled epoch.
Stake transitions follow deterministic state rules: pending -> active -> exiting -> unlockable -> withdrawn.
720-block epoch with 3600-block finalization buffer.
Example from reward docs: if epoch stake pool is 900 ATHO, payout follows each staker's active share.
stake_payout_i_epoch
= stake_pool_epoch * (active_stake_i / total_active_stake_epoch)20 ATHO minimum, 500 ATHO max per address, 25,000 ATHO max new stake per rolling 30 days, and 25,000,000 ATHO max total staked network-wide.
Wallet creation defaults to mnemonic-backed deterministic keys with 24 words. Creation flow
supports 12, 24, or 48 words, and recovery can import the same
mnemonic path later.
After import or recovery, lockbox controls apply the same encrypted-at-rest policy and unlock controls used for daily wallet operations.
Mobile clients are being prepared with the same custody posture: encrypted lockbox pathways, deterministic role-address handling, and transparent staking controls. Release will prioritize security review, predictable backup flows, and clear recovery UX before public launch.
iOS and Android releases are planned after wallet security QA, recovery-flow testing, and operator rollout validation.