Alongside client work, we build our own products for the long term and publish the research behind them. Two are in development with design partners. One is still research, and we say so.
Issue and administer tokenized real-world assets with compliance inside the token and balances that stay confidential, built on ERC-3643 and ERC-7984.
Asset managers, funds, private credit desks and real-estate issuers.
Scans the packages and build pipeline behind a Web3 project for malware before it ships, then monitors the live contracts for invariant breaks and anomalies once they are deployed.
Web3 teams, from the first package install to the live contract.
Pay a team in any token without publishing every salary. Amounts stay encrypted, and idle funds earn yield until they are withdrawn.
Companies and DAOs paying contributors on-chain.
A product company earns its place by removing a cost everybody else has quietly accepted. These are the three we think are worth removing.
Tokenizing an asset is easy. Proving every transfer was permitted, without publishing every holder's position, is the part that stops deals. Rails handles both.
Attackers poison the packages a team installs, or wait for a live contract to misbehave. Sentinel watches the build before release and the contracts after it.
Paying a team on-chain today publishes every salary and the company's balance. Xora Pay keeps the amounts private.
Not everything upstream becomes a product, and we would rather say so than list research as a roadmap.
Every contract using ecrecover rests on ECDSA, which does not survive a cryptographically relevant quantum computer. We are mapping what a migration actually looks like for live protocols, and being honest that the timeline is a decade, not a quarter.
If transfer-restriction logic is valuable inside Rails, it is more valuable as something any protocol can call. We are testing whether that becomes a network primitive rather than a feature.
FHE hides balances and amounts, not addresses or timing, and unwrapping reveals what was hidden. We are mapping what confidential tokens actually protect in lending, vaults and payments.
Rails and Sentinel are in development with design partners. If either solves a problem you have today, we want to hear how you would use it.
hello@xoralabs.io