Win the board.
Seal the time.

Overview

One wallet, one board, one seal, one NFT.

1. EnterA free public spot in Epoch 0; from Epoch 1 the mint is public, open to every wallet.
2. PlayClear a Minesweeper board the server seeds and keeps secret.
3. SealRun millions of sequential squarings bound to your wallet.
4. MintThe contract checks the game signature, the seal and the price.

The game proves a board was cleared; the seal proves time was spent; the contract refuses anything that does not carry both for the same wallet. After the mint, a keeper reveals the art from a block nobody could know in advance, and from then on everything a TIMEFACE earns, burns and wears lives on chain.

Access

Epoch 0 was 300 free spots, first come first served. From Epoch 1 the mint is public: any wallet can play and mint at the epoch price, with no invite, spot or Discord login.

Invites

Retired: from Epoch 1 the mint is public, so no invite is needed. This is how invites worked during Epoch 0.

• The inviter must have minted, and signs every invite with that wallet.
• A wallet can be invited once, by one inviter.
• Minted wallets and wallets holding a public spot cannot be invited.
• An invite works in whichever epoch is open, Epoch 0 included. In Epoch 0 it mints free and takes one of the 300 places, so it needs a free one.

The waitlist

When the 300-place public pool closes, a waitlist opens by itself. Log in with Discord and submit one signed wallet. Every 5 minutes the protocol invites the next 10 waiting wallets, first in, first served. If a public hold expires and a spot reopens, the waitlist pauses until the pool is full again. A waitlisted account cannot also take a public spot, and a public claimant cannot join the waitlist.

Proof of Game

The board is not trusted because the browser says it was solved.

• The server creates a random challenge and keeps the board seed private.
• Every reveal and flag is replayed against versioned server state.
• The browser only ever receives values of cells it legitimately revealed.
• Mine hits, stale versions, replays and unfinished boards are refused.
• Clear time is measured on the server clock, not the browser's.
• A cleared board earns an EIP-712 GameProof signed by the attester.

Speed tiers

Limits against bots

Proof of Time

A seal is millions of squarings that cannot be split across cores.

The seal is a Wesolowski VDF over a 2048-bit RSA modulus: y = x^(2^T). Each squaring needs the one before it, so one seal cannot be sped up with more cores, and the contract checks it with a short proof instead of redoing the work. The wallet is part of the input, so a seal computed for one wallet is worthless for any other.

Beacons

A beacon is an L2 block hash the NFT records. It is recorded in two steps: first a future block is armed, then its hash is written once that block exists. Nobody can see a beacon's value when it is chosen, so no one can retry a transaction until a convenient beacon appears. The puzzle length depends on the wallet and the beacon, never on the board, so a board cannot be picked for a short puzzle, and only the latest two beacons are accepted.

Reveal

The art is decided by a block that did not exist when you minted.

At the mint the contract fixes a commitment to everything about the token: the board, the seal, the wallet, the epoch, the beacon and the token id. The art seed is keccak(commitment, hash of the L2 block 2 after the mint). Nobody, including the minter, knows that hash when the mint is sent, so traits cannot be picked by choosing when to mint.

Until it is revealed a token reads "Revealing" in its metadata; after that the picture is final.

Epochs and price

Nine epochs, opened in order. Each opens inside the mint that fills the one before it.

Where one paid mint goes

Rent

Every TIMEFACE earns from the ones that come after it.

• Rent belongs to the NFT: unclaimed rent goes to the next owner when it is sold.
• A sale or transfer restarts the 2-hour claim timer for the new holder.
• Rent is a claim, not a transfer: a mint moves nothing to holders, so its cost does not grow with them.
• A staked NFT keeps earning rent for its holder.

Burn vault

10% of every paid mint collects in the burn vault. Burning a TIMEFACE pays out the vault's balance divided by the number of TIMEFACEs alive, together with the NFT's unclaimed rent and its $ONTM.

$ONTM

What a TIMEFACE can be turned back into.

Only the burner contract can mint $ONTM, and only for a burned TIMEFACE. Holding a TIMEFACE pays rent; burning it cashes out. The two are deliberately in tension: while you wait for rent, the burn rate melts.

Burn rate

Burns open in Epoch 3. A TIMEFACE can be burned once it is 10 minutes old and at least one later TIMEFACE exists. Age is counted in epochs of the collection, not in days.

Ceiling

While 1,000 $ONTM is worth more than entry to the current epoch, minting and burning is cheaper than buying. That arbitrage pins $ONTM near the mint price ÷ 1,000, a ceiling that doubles with every epoch: from 0.00000032 ETH in Epoch 1 to 0.00004092 ETH in Epoch 8. The pool opens at the Epoch 7 ceiling, 0.00002046 ETH.

The hook

Every fee lands in one Uniswap v4 hook, and it spends it buying $ONTM back.

The hook buys inside somebody else's swap and never spends more than it has collected. Before trading opens, $ONTM moves only between wallets and the protocol contracts, so no pool can trade it early. Donations to the pool are refused.

Flywheel

No part of this works alone.

Status

$ONTM has one use besides selling it: spending it into a TIMEFACE.

Everything spent into an NFT lands in one counter that never goes down. That counter sets its tier, and the tier unlocks the effect it may wear. Anyone may spend into any NFT (at least 100 $ONTM) as a gift; naming and effects stay with the owner.

Staking

Lock a TIMEFACE in your wallet, and it earns while it is locked.

• Rewards: 30% of every royalty (ETH) and 30% of every $ONTM spend, shared by weight among everyone staked.
• Non-custodial: the NFT stays in your wallet, locked against sale, transfer and burn. No approval.
• No early exit, not for a fee and not for the owner. Rewards can be claimed any time, in full.
• Nothing is minted for staking: it only shares revenue that actually arrived.
• Rewards a contract wallet cannot receive yet are credited and withdrawn later, never blocking an unstake.
• Rewards that arrive while nobody is staked can be swept by anyone: ETH to the hook, $ONTM burned.

Royalties

5% on every resale, and the collection enforces it.

TIMEFACE is ERC-721-C. Every transfer between wallets asks the Limit Break validator whether the operator moving it is allowed. Moving your own NFT between your wallets is always allowed. Marketplace sales go through only when the marketplace authorizes them, which OpenSea does for each sale on Robinhood Chain. The 5% royalty is paid to the royalty router and split on the spot.

Art and traits

Every proof leaves a face, drawn by the contract.

• Fully on-chain pixel SVG and Base64 JSON: no IPFS, no image server.
• Skin, Shades, Face Mark, Headwear and Mouth, each from an exact 10,000-slot distribution.
• Game Mode, Speed Tier, Clear Time and Mint Epoch from the proof.
• Status tier, name and effect from $ONTM spent into it.
• The same token URI for everyone who asks.

Browse the collection

On chain

If this website disappears, the collection does not change.

The token page reads ownership, proof fields, art and metadata straight from the contracts. Transfers change the owner, never the proof record. Rent, stakes, burns and every fee split are contract state, readable by anyone.

Contracts

Everything that matters, by address, on Robinhood Chain mainnet (chain 4663). Every address opens on the block explorer.

What the Safe can still do

Only these addresses are official. The earlier v3 collection (NFT 0x10D4…31dC) is superseded and closed to new mints. Treat any address not published here as unverified.

Questions

Things people ask first.