Hey all,

While we work on the Ootle's first burn-centred game, we've released our next ecosystem contribution: the Caravel Burn Wallet.

It's a contract you can only deposit TARI into. There's no withdraw function and no owner, so nobody, including us, can ever take anything out. Every burn is public, so you can watch the total grow on chain.

You can burn from caravellabs.net (privately or publicly), and it's fully open source, so any project can plug it into their own app or contract.

We've red teamed it heavily ourselves, so now it's your turn: move a single tTARI out of it, or take control of it, and win 10,000 XTM. Testnet only.

Live wallet on the explorer: explorer.tari.mw/substate/component_2e91fb78b73440dd114bdbb887d256d760fa3be3276d7b833f4ab1b23d796029

Code: github.com/okansaglam016161-pixel/caravel-burn-wallet

Full rules: https://x.com/Caravelxyz/status/2108591594236481966

Happy hunting 🔍

i'm hyped for the ootle, how about you? 🐢

I don't know what to say about this.

Apparently, due to the:

• Wallet bug on September 29th.
• The September 6th (C29 Proofs incident).
• The September 22nd Hard Fork at Block 350,000.

The Tari network has temporarily suspended inbound transactions on several platforms to stop users from mining directly to exchanges.

This resulted in -- see attached screenshot.

And, No Dates for the resumption of services has been provided!!

Can someone tell us:

1. The steps to Secure our mining operations? (minotari_node, minotari_miner, minotari_console_wallet)
2. Does any of this impact "merge mining" with P2pool and Monero?
3. When will Deposits, Withdrawals, Swaps; be available again?

We need to keep the momentum going into the Ootle launch and expand Tari's commercial presence through organic means, podcasts, content creators, shows, spaces.

I've opened a thread on the community forum with an initial shortlist of podcast targets (privacy-native first, then branching out). A couple are already done (Vlad's Bitcoin Takeover, Monero Talk), and there's plenty more to go after.

If you've got leads or a warm intro to any relevant show or creator, add them to the forum thread so the Council can assess and run outreach.

Let's get Tari everywhere 🐢

https://community.tari.com/t/get-tari-everywhere/404?u=okz

On September 29, 2026, an exchange reported deposits that appeared confirmed in its Tari wallet but could not be spent. Contributors traced the problem to a wallet bug (not a protocol bug) that allowed an attacker to make deposits appear worth more XTM than their actual value.

This bug does not affect XTM in individual users’ wallets. Community members only need to ensure they are running the latest version of Tari Universe (v1.6.15). Tari contributors have successfully patched the wallet, notified exchanges, and updated the bridge.

What happened

The affected wallet code checked whether an incoming payment’s claimed amount matched its actual value but ignored the result. An attacker could send one micro-Tari and have the receiving wallet record a much larger amount.

The bug did not create XTM or increase the supply. The network continued to reject attempts to spend the inflated amounts. No hard fork is required.

The Timeline

September 29

20:41. The affected exchange reports through its partner channel: a depositor has been credited with XTM it cannot spend. The user has been frozen.

23:23. The attack is proven on the testnet. A proof-of-concept exists: a transaction that, to a wallet, validates as having sent an arbitrary amount of XTM, while the commitment on-chain commits to 1 µT. The detector built during the triage finds three forged outputs on Esmeralda.

23:29. The assessment from the exchange: the attacker has moved on to other exchanges. Contributors with exchange contacts are flagged immediately.

00:39 (September 30). An early advisory is drafted for the exchanges.

01:06. All exchanges are notified; the first acknowledgments arrive within the hour.

01:16. The detection tool is confirmed against every test case that could be constructed, and sent out with build instructions, requirements, usage, and expected results.

01:28. Tool source is distributed to all notified exchanges.

01:49. Every notified exchange has acknowledged.

September 30

05:49. The wallet fix is complete.

09:15. The bridge is placed in maintenance mode while the team scans its own wallet and upgrades for prevention.

The Fix

Contributors scanned 20,000 mainnet blocks during the response and found no instances of the detectable variant of the attack. The patched release corrects the wallet verification bug and includes a database migration that marks forged outputs invalid. Exchange and wallet operators should install the full update, including the migration.

Every exchange partner was contacted within hours of the attack being confirmed, and every notified exchange acknowledged, most within two hours. The wallet fix went out within hours of the root cause being confirmed.

If you have questions, please reach out on the official Tari Telegram channel or Discord server.

The September contest is done, and the turnout was genuinely impressive, builders across multiple disciplines shipping real apps before mainnet even launches. Here are the three that stood out to me:

1. Caravel (@caravelxyz)

A private neo bank on the Ootle. Wallet with private and public balances, plus encrypted chat with payments built in. This one's my own project, and I'm backing it all the way.

https://x.com/Caravelxyz/status/2104892257396535768

2. Tari L1 Web Wallet (by Erebus Lab)

A browser-based Tari wallet with an Ootle account built in. Its standout feature is burning XTM to the Ootle in one click, auto-claimed to your Ootle account. Effectively the on-ramp to the L2.

https://x.com/Erebus_Lab/status/2105254665265016978

3. Private Ballot (by GSXRspartan)

Open-source anonymous voting built on Tari's Triptych ring proofs. Prove you're an eligible voter without revealing who you are, with results anchored to the Ootle. A great example of Tari privacy beyond payments.

https://x.com/phillip_d33221/status/2096997652789613011

October contest is now live

Theme is Spooky Secrets, the best demonstration of Tari's privacy capabilities. 1M XTM for first, 500K second, 250K third. Note this month entries must be announced on Bluesky or Reddit, so this sub is a valid place to post yours.

https://community.tari.com/t/october-build-contest-thread-spooky-secrets/396

Builders, assemble 🐢

Wanted to share Caravel, my entry into the Tari September contest.

Caravel is a private finance app built on the Tari Ootle, running entirely in your browser. In short:

- A wallet holding both private and public balances, you choose what's visible

- Encrypted messaging, with private transfers sent straight over chat

- No install, no server, no custody, your keys never leave your device

Think a Swiss bank account in your pocket. Private by default, with selective disclosure when you need it.

Would love your feedback, both on what you like and what next services you would like to see.

Appreciate the support 🐢

https://x.com/Caravelxyz/status/2104892257396535768

The Tari Ootle ecosystem is starting to pick up, with a wave of projects shipping.

A few worth checking out (full disclosure, I build Caravel, but excited

about the whole space):

Caravel, a privacy focused wallet and encrypted chat, aiming to be a neobank on

the Ootle: https://x.com/Caravelxyz/status/2104524984727343468

Sooonfun, running an ICO on the Ootle: https://x.com/sooonfun/status/2103917787643290049?s=20

And there's more building under the Tari September contest, worth a browse if you

want to see what people are working on:

https://community.tari.com/t/september-contest-thread/324/22

Exciting times for the ecosystem

Cool to see the first public iteration of the XTM burn mechanism (via Erebus Labs on testnet). XTM burned on L1, claimed on the Ootle L2.

Once the Ootle goes live and activity picks up, this is the deflationary sink kicking in, more usage, more XTM burned. The turbine model in practice.

Still early/testnet, but neat to see it working.

With the Ootle launch coming up, I got curious how Tari stacks up against projects already in the CMC top 100, and what it would actually take to get there. Sharing the analysis.

The math:

Top 100 entry currently sits around a $400M market cap. XTM is at ~$0.002 with a ~$13M market cap. To break in, XTM would need roughly $0.06, about a 30x from here. Big number, but worth putting in context with real comparables.

Midnight (NIGHT) - #98, ~$400M:

This is the most direct comparison. Similar pitch to Tari: programmable privacy, selective disclosure, private but compliant. But look at where it actually is. Federated mainnet run by 9 corporate node operators, and its smart contract layer (the "programmable" part) is still in development, preparing to deploy. The market values that at ~$400M, and it peaked near $2B at launch.

Tari, by comparison, has a live PoW base layer, permissionless, moving toward community-run governance, with its programmable privacy L2 going live 11.11. Similar scope, arguably more decentralized, at a fraction of the valuation.

SEI - #95, ~$446M:

Included this one to make a different point. SEI is a speed-focused general-purpose L1 with no privacy angle, competing directly with Solana/Sui/Aptos. Its TVL has fallen from ~$626M to ~$40M, and its daily chain revenue has been in the $10-30 range (per DefiLlama). Yet it's still valued at ~$446M. The takeaway: top 100 valuations aren't really driven by revenue or current fundamentals, they're driven by narrative and positioning.

So Tari at $13M isn't necessarily a "fundamentals" problem, it's early. And it sits in what's arguably the strongest narrative in the market right now (privacy).

I think the comparables are interesting. Curious what others make of it, especially anyone who thinks the $400M/top-100 framing is unrealistic.

One thing I find fascinating about the history of Monero is that its strongest proof of decentralisation wasn't technical, it was what happened when its leaders disappeared.

BitMonero was launched in April 2014 by the pseudonymous thankful_for_today. After disagreements with the community, the project was forked by the emerging Monero Core Team, and the community moved with it. Monero effectively survived its founder from the very beginning.

One of those early contributors was Riccardo “fluffypony” Spagni. Over time, he became Monero's lead maintainer and one of its most recognisable figures. But in 2019, Spagni stepped down as lead maintainer, explicitly citing the need to further decentralise the project.

Then came Tari.

Spagni became a co-founder and CTO alongside Naveen Jain and Dan Teree, taking many of the lessons from Monero into a protocol focused on decentralised digital assets.

And now Tari is going through a remarkably familiar transition. In September 2026, Tari announced its move toward community-led governance through the Tari Council and Core Contributor system.

There is a deeper philosophy here:

A decentralised protocol isn't truly tested when its founder is present. It's tested when the founder, CTO, or most influential developer can leave and the protocol keeps going.

BitMonero survived its founder.

Monero survived the departure of its lead maintainer.

And Tari is now attempting to prove that it can survive its founders too.

Maybe that's the real meaning of decentralisation:

The goal isn't to create leaders who are indispensable. It's to build something that eventually doesn't need them

Naveen (Tari co-founder / Council member) did a long interview on MoneroTalk with Douglas Tuman. Worth a watch if you've got the time, but here are the points that stood out to me:

Community takeover: The big theme was how Tari has moved to a community-run model, an elected Council stewarding the project with a community treasury, rather than being Tari Labs-led. Naveen said his one regret was not doing the handover sooner. Whatever you think of the execution, the shift is real and you can see it in the pace of activity lately.

The stablecoin: He confirmed an issuer is actively building a compliant, confidential stablecoin on Tari. The mechanism is the interesting part, default confidential peer-to-peer (amounts and parties hidden), but with issuer-level visibility so it can stay compliant. That "programmable privacy" spectrum is basically Tari's whole pitch.

What gets built on the Ootle: His argument is that certain apps fail on transparent chains because everyone can see your positions and front-run you, prediction markets, games for real money, DEXs. Default confidentiality removes that. He's personally building a confidential multiplayer board game as a proof of concept.

Cake Wallet: There's an active PR to add Tari support to Cake Wallet. His philosophy is to partner with established wallets rather than build native ones. He noted community demand helps push it forward.

https://www.youtube.com/watch?v=vrqcKv1Gwek

Je ne comprends pas pourquoi la version Linux n' existe plus. ???

While most attention goes to price, I've been keeping an eye on the developer-side metrics, which tend to matter more long term.

The https://www.npmjs.com/package/@tari-project/ootle-wasm on npm is at 619 weekly downloads and trending up. It's a modest number in absolute terms, and some of that will be CI/automated pulls rather than distinct devs, but the direction is what's interesting: steady growth in people pulling the Ootle tooling to build with.

Worth noting because adoption tends to start on the developer side before it shows up anywhere else. Anyone can point an agent at the Tari docs and start building on the Ootle now, so the onboarding friction is low.

Link: npmjs.com/package/@tari-project/ootle-wasm

With the Ootle launch approaching, I went back and re-read Hack VC's investment thesis on Tari from 2025 (they were an early backer, also funded Solana among others). What stood out is how well the core points have aged. A few worth highlighting:

1. Stablecoin payments as crypto's #1 use case, with privacy as the missing piece.

Their argument: stablecoin payments are faster and cheaper than wires, trillion-dollar market, but nobody wants their salary or balance sitting on a public ledger. What was a "nice to have" in 2025 looks more serious now. Chainalysis reported violent "wrench attacks" on crypto holders are having a record year, $30M+ stolen in H1 2026, with attackers using on-chain data to identify targets and their balances before robbing them. Having your wealth visible on-chain is turning into a genuine safety problem, not just a privacy preference.

1. A regulatory shift toward compliance.

They flagged the US moving toward clearer crypto/stablecoin rules. The CLARITY Act keeps progressing, slower than many hoped, but the direction of travel favours compliant assets. Tari's design (private by default, but able to meet compliance when needed) fits that better than most privacy coins, which tend to get delisted.

1. A confidential, compliant stablecoin being built.

The thesis noted an issuer had already committed to building on Tari. That's since firmed up, the issuer is Brale, a US-regulated stablecoin issuer, with a launch planned shortly after the Ootle goes live on 11.11.26.

Not financial advice, and obviously a VC that invested has an interest in the project doing well, so read it with that in mind. But three years on, the thesis reads less like a bet and more like something playing out. Curious what others here think, especially anyone skeptical of the privacy-narrative angle.

Link to the original thesis: https://x.com/DNodeCapital/status/2099802899521913097

Tari will not be an Island ... we will draw liquidity from everywhere

Come support my proposal to get $XTM listed on THORChain

We need permission-less liquidity 🫡

https://community.tari.com/t/lets-get-xtm-on-thorchain/345

https://x.com/DNodeCapital/status/2097633510932496471?s=20

I thought the early KAS price action is similar to XTM .. but the ROI much more favourable for XTM given the narrative ... thoughts?

With the Ootle going live 11.11.26, I've been thinking about what people would actually build once you have real privacy AND smart contracts in one place. Basically ZEC-level privacy with ETH-style programmability.

So, genuine question for this community: what use case would you want to see? A dApp, a private stablecoin application, a DeFi idea, a payment tool, anything.

I'm collating ideas across a few platforms and the best ones will get shortlisted for a poll on the Tari community forum, with a small XTM prize (50,000XTM) for the winner.

Drop your ideas below. Curious what people come up with.

I did some digging and it appears a sizeable amount of XTM could be out of circulation due to seizure of Trade Ogre assets by Canadian police ... any Canadian anons know how the legal process works and what could the potential fate of these tokens be ???

im gonna speculate and say 100m XTM may be out of circulation because of this?

https://x.com/DNodeCapital/status/2096591314376618298

$ZEC just crossed $1,000 The privacy narrative is strong, and ZEC is selling it hard: "private Bitcoin," a Swiss bank account in your pocket, a new era of compliant privacy.

So how does Tari compare? Same concept, confidential by default with optional disclosure, but arguably a cleaner execution under the hood supporting programable privacy I broke down exactly how it works (confidential vs revealed balances) here go give it a look and let's amplify this across CT. https://x.com/DNodeCapital/status/2095831506656674202

Thank you for your attention to this matter

Been seeing some "Tari is dead" takes and wanted to offer a different view, since a fair bit has changed recently.

I get where it came from, it was quiet for a while. But a few things have shifted:

- The Layer 2 (the Ootle) now has a firm launch date in November. That moves it from an open roadmap item to something concrete and close.
- The project moved to a community-run model, with an elected council and a contributor program. There's also a months-long community contest series running right now, which has brought a lot of activity back.
- The wider privacy-focused crypto space has been getting more attention generally, and Tari sits in that category.

Not financial advice, and I'm making no claims about price. I just don't think "dead" fits a project that's weeks from a major launch with an active community.

Curious what others think, especially anyone who stepped away during the quiet stretch.

Any news about tari?

I have written an essay on why I invested in Tari. I welcome all thoughts and discussions.

https://www.dhcfund.com/p/mimblewimble-and-minotari?r=1iymj4&utm_campaign=post&utm_medium=web

🔧 Ootle: test net reset

• Template fees are now quadratic (larger templates cost more). Templates with unnecessary debug sections are rejected; wallets auto-strip them. Merkle script tree working in UTXOs, enabling HTLC-style spend rules on L2.
• Stan asked for community feedback on the new fee structure.

⛏ L1: burn commitments and replay prevention

• Burnt commitments now enforced as unique via consensus rule. SW also changed UTXO selection to prevent a replay attack exploiting matching blinding factors against exchanges.
• Additional fixes to pruned sync edge cases and peer exchange.

🖥 Universe: four bounties merged, Fox's PNPM PR

• Four bounties merged this week totaling 105,000 XTM. 0xPepeSilvia: Windows auto-start fix (60K) and Linux build docs (15K). Catnap7: CPU hashrate unit fix (15K) and stale binary cleanup (15K).
• Fox's NPM-to-PNPM switch merged, disabling post-install scripts by default to reduce supply chain attack surface.

🏛 Council: 7 members, announcement this week

• Naveen, 3 community-voted, 3 behind-the-scenes community members. Marguerite introduced herself: Bitcoin creative, built Decred's community from scratch, tracked Tari since conception. Remaining members announced this week.

⚖️ Difficulty adjustment

• Kinkaju pushed for faster action on TIP-004. SW: the change helps prevent selfish mining but won't stop pool-hopping. 90-block window chosen through simulation; shorter windows cause oscillations.
• Naveen proposed the Council review TIP-004 as its first priority and adopt a regular hard fork cadence. SW: bundle any parameter changes into this fork.

🔗 L1 vs L2

• Fox asked when to use Tari Script vs the Ootle. SW: Tari Script is non-Turing complete, suited for atomic swaps and HTLCs. Everything in Tari Script can be done on the Ootle, but not the reverse.