Mined,
not minted.
Pixel flies that live inside one contract. No allowlist and no supply cap: your browser hunts for a hash below the network target, you pay the entry price of the current epoch, and the contract draws the fly from it — wings, eyes, the thing in its grip, forever.
SEED → FLYPre‑launch. Contracts are being written and a full public beta runs on Arc testnet (chain 5042002) before mainnet. Mining opens within 7 days of Arc public mainnet.
Nine slots picked from 150 traits by the hash that found the fly. Nobody chooses them — including us. Click any fly to open its traits.
Three steps, none of them ours
Nothing here waits on a server, a signature, or a list. The whole path from electricity to fly runs between your browser and one contract.
Your browser hashes four things: your address, a nonce, the work behind the last fly and a recent block. Nobody can steal the answer — your address is inside it; nobody can prepare one in advance — the previous fly is inside it too.
A hash below the target is a ticket. Send it, the contract checks it in one comparison, and the token is yours — first come, no auction.
The hash becomes the seed — hashed once more with the 5‑minute time bucket of the mint. Wings, eyes, antenna and the thing in the grip are all derived from it by the contract, identically, forever.
Nothing is drawn after the mint
The contract turns a 256‑bit number into a picture. The same seed always gives the same fly, and no one — including us — can change it afterwards.
0xe433353220985ffe18e4898d9e1ae7ac
20d39e00464c85c42a552ed7d82117fbThe names are not invented. w, se, cn, vg, Cy, ap, Antp — these are Drosophila melanogaster alleles with a century of published literature behind them.
Six rules, each closing a hole
Difficulty is not one number drifting upward. It is six independent rules, and each closes a different way of getting flies cheaply.
| Rule | Value | What it closes |
|---|---|---|
| Epoch floor | 26 bits + epoch | an idle network |
| Retarget | every 8 mints | a drifting pace — at most 4× harder or 2× easier in one step |
| Streak | ×2 per recent mint | a run of mints in a row. Twelve in a row cost 4 096× the work of one |
| Failsafe | 5 min → one epoch | a dead network, by exactly one epoch, never deeper |
| Block ceiling | 1 mint per block | a burst — about two flies a second, hard |
| The wall | (n − 7777)² / 45 | the end of the collection |
The streak does not stop a farm. Nothing here does — the algorithm is public and anyone can write a native miner. What the streak does is price the pace: taking the collection quickly costs far more than taking it slowly.
Nothing lives off chain
Sprites, palette, weight tables and the renderer all live in contract storage. tokenURI builds the picture on the fly and hands back a data URI — the collection keeps working even if this site disappears.
SSTORE2 pages
34 cost no bytes at all
after the weights, not 837M
each rerolls one slot
tokenURI(1337)
-> data:application/json;base64,...
{
"name": "HashFly #1337",
"image": "data:image/png;base64,...",
"attributes": [ nine slots ]
}
Arc's block gas limit is 30M and eth_call is capped at exactly 30M — measured, not assumed — so assembling the image is a read call nobody pays for.
Seven flies nobody can aim for
One Monarch is drawn in every window of 1 111 flies. Inside a window the chance grows — 1 in (1 112 − position) — so while the window’s Monarch has not dropped, its last fly is a guarantee; once it has, the rest of that window is ordinary.
0 of 7 drawn so far. Which one comes out of the pool next is decided at the mint that wins it, not by a list.
Tokens exist only when a fly stops existing
Burning a fly mints 1 000 $FLY in its own epoch, and the rate halves every epoch after. Holding pays rent from every later mint instead — the same fly cannot take both exits at full value, and that is what keeps the last epoch from paying for everybody.
Credited to every token that existed at the start of the epoch. A right, not a transfer — it travels with the token.
The hook buys $FLY back on the open market and burns it.
5% team & investors, 5% development, paid to two separate Safe 2‑of‑3 addresses fixed at deployment. No protocol fee on top of the entry price.
| Epoch | Starts at | Size | Entry | Floor | Lifetime rent | Return |
|---|---|---|---|---|---|---|
| 0 | 0 | 8 | $0.77 | 26 | $699.21 | 908× |
| 1 | 8 | 16 | $0.96 | 27 | $697.77 | 727× |
| 2 | 24 | 32 | $2.88 | 28 | $694.89 | 241× |
| 3 | 56 | 64 | $6.72 | 29 | $689.13 | 103× |
| 4 | 120 | 128 | $14.40 | 30 | $677.61 | 47.1× |
| 5 | 248 | 256 | $29.76 | 31 | $654.57 | 22.0× |
| 6 | 504 | 512 | $60.48 | 32 | $608.49 | 10.1× |
| 7 | 1 016 | 1 024 | $121.92 | 33 | $516.33 | 4.23× |
| 8 | 2 040 | 2 048 | $244.80 | 34 | $332.01 | 1.36× |
| 9 | 4 088 | 3 689 | $490.56 | 35 | $0.00 | 1.00× |
The honest part. A token minted in epoch 9 — 3 689 tokens, 47% of the collection — earns no rent before the wall, because there is no later epoch to be paid from. Burned inside its own epoch it returns 1 000 $FLY worth exactly what it cost. If you are mining late you are buying the picture, the Monarch draw and the burn — not the yield.
Is there a supply cap?
No. Past 7 777 the required work is multiplied by (n − 7777)² / 45. Simulation puts the stop at roughly 8 100–8 500.
Can I buy one instead of mining?
On secondary, yes, once flies exist. From us, never — there is no mint button that skips the work, and no allowlist.
Does more hashrate get me rarer traits?
No. The seed is the work hash rehashed with a five‑minute time bucket. Extra hashrate buys leading zero bits, and zero bits are already paid for.
What does a mint cost in gas?
About $0.002, fixed — Arc's base fee is a constant 20 gwei. Minting is also gasless via EIP‑7702 and Circle Paymaster.
Why Arc?
No observable mempool, deterministic finality, and PREVRANDAO returns 0 — there is no native randomness on this chain at all, so every trait comes from work somebody actually paid for in electricity.