Pay, chat, and settle
in rooms that self-destruct
AES-GCM 256. The key is forged in your browser, never uploaded, and dies with the room.
Tip, paid DM, subscription, or invoice — every Sui transfer is bundled atomically with its encrypted message.
Closing the room emits an on-chain event. Every client wipes its key. Only undecryptable bytes remain.
How It Works
Stripe meets Signal, on Sui. Tip, subscribe, negotiate, or invoice inside an encrypted room — every Sui transfer is PTB-atomic with its encrypted message. Close the room and the key is gone forever. Even if the ciphertext survives on IPFS, no one can decrypt it. No decrypt.
Sui just clicked the missing pieces into place. Seal shipped to mainnet — native onchain encryption. Paired with USDsui, the consumer surface is finally here.
Seal — encryption native to Sui
Identity-based encryption with threshold cryptography. Define a policy on-chain; ciphertext only opens when the policy passes. SoSui sits at the intersection — Seal upgrades the invite envelope into a consumer-facing surface.
USDsui — gasless stablecoin
Stripe-issued stablecoin with protocol-level gas abstraction. Tip, subscribe, and settle in dollars without ever holding SUI. Phase 3 makes this the default settlement rail in SoSui.

SOSUI:ENCRYPTED.EPHEMERAL.IMMUTABLE.
Scroll to follow a payment room from creation to self-destruct.
Key Generation
Zoom into the browser's cryptographic library. Forges a 256-bit AES key.
Immutable Audit
Sui transaction hash is immutable.
A room is born on Sui. Encrypted from the first byte.
Encrypted Index
Pay the SUI fee. A shared object materializes on-chain — a room ready to hold secrets it can never read.
Your browser forges a key no one else holds.
A 256-bit AES key is generated inside your tab. Never uploaded, never logged, never persisted to disk. Sovereignty you control — and only you.
Tip — drag across the key
Messages travel as ciphertext. The network sees noise.
Ciphertext Noise
Every line is sealed with AES-GCM in the browser, pushed to PTB, and anchored on Sui by content hash. Servers carry bytes they can't decode.
Close the room. The key dies. The bytes stay locked.
Room Closed
key wiped
local storage cleared
A close-event broadcasts. Every client wipes its copy of the key. The ciphertext lingers forever as PFS — and forever undecryptable.