A Chromium-based browser that resolves Bitcoin Cash names on the device
itself. The Ariadne resolver is built in, so the app is both browser and
resolver: no daemon, no DNS shim, no root certificate. Type
silentmode.bch, get the on-chain answer, and see which
registry and which storage served it.
Theseus.X is the browser's sovereign site, served from its own on-chain name.
Mirror: silentmode.st/theseus-x/ ·
gateway: navigate.st/bns/theseus.x/ ·
native with a resolver: https://theseus.x/
Theseus is built on one assumption: names should be resolved by the person using them, not by an intermediary. Every page carries a badge showing which registry produced the record (BCNR or ICANN) and which backend served the bytes (on-chain, Sia, direct IP, or a plain HTTPS fallback).
Every dotted host is asked of BCNR before anything else. If the chain answers, that answer wins, whatever any DNS operator says. If BCNR has no record, Theseus falls through to the clearnet.
The app is the trust boundary. No daemon, no root certificate, no proxy in the middle. Uninstall it and BCNR is gone from that machine; nothing lingers in the OS.
A bundled beacon snapshot loads before the first navigation can fire. A background refresh keeps the index current every 30 seconds, and a Sia snapshot pull on boot catches a long-idle install up in one request.
Everything a mainstream browser has, plus what the chain enables.
Type a name, get the on-chain record. h serves from the chain, s3 from Sia, ip connects directly with TLS pinned to the on-chain fingerprint, u redirects.
Pages can call resolveName, isRegistered, getBcnrTlds and getRecordVersion. dApps need not ship their own resolver.
Local vault with deterministic derivation from a BIP-39 seed. The same seed on another device produces the same passwords. Autofill on demand only.
One click routes everything through a bundled Tor client, pluggable transports included. Off by default; nothing is proxied without your say-so.
Timezone, locale, language and geolocation can each be shown, hidden, spoofed with a plausible decoy, or set by hand. Media-device labels are blanked by default.
Cookies, cache, storage and history clear on quit unless you opt in. Camera and microphone denied by default. WebRTC limited to public addresses.
Bundled add-ons such as Aegis, plus community extensions anyone can publish under a BCNR name. Catalog at theseus.x/extensions.
Electron plus a few kilobytes of BCNR glue. Reproducible builds with SOURCE_DATE_EPOCH. Source on Hephaestus.
One brand, two platforms. Both builds are alpha software on a test network. Check the SHA-256 before you install; that check is the real one.
Full-window desktop browser with Tor toggle, search bar, password vault and add-ons. macOS and Linux not yet packaged.
44610849112d838001247da21865df63f4f27a35024572e460f87ed135ab818fba82455d2ad66239bc26241fc64f9975fa1a84e403c7a62f622a8000a20e83d6Phone-sized browser with tap-to-verify provenance: the block and
transaction behind each name are one tap away. Still packaged as
ariadne-v0.19.apk; same app, same signing key.
d2f4ad359e7ac36c1d0729100aef613be968cd17b153e94e124f8500fcbfc71146ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548cdl.silentmode.st/latest/…
links redirect to the newest build. Version history and every hash:
releases · machine-readable
releases-manifest.json.Compute the SHA-256 and compare it to the value above:
certutil -hashfile <file> SHA256. Builds carry
no code-signing certificate, so Windows will warn about an unrecognized app.
That warning is expected; the hash is the check.
Hash the .apk on a computer before moving it to the
phone, or use any file-hashing app. The signing-certificate fingerprint matters
most: every future update is signed with the same key, and Android refuses an
update signed by anyone else.
The canonical checksum list is pinned by the name
releases.silentmode.bch, so a tampered mirror cannot
change what you check against. Human-readable page:
silentmode.st/releases.