Justin Drake

GenesisCoin: a token backed by a catalog of one million recovery phrases

Ticker GEN. Not one seed. A public registry of 1,048,576 recovery phrases, and your wallet is the specific subset you drew at genesis.

44

GenesisCoin (GEN). The logo is deliberately retro. The recovery model is deliberately weird.

GenesisCoin trades as GEN.

I will be publishing spec drafts on GitHub: https://github.com/justindrake. This is my only GitHub. If it is not on that account, it is not from me.

In this post:


One seed phrase was always a single point of failure - 2026-10-13

Every wallet tutorial ends the same way: copy these twelve words, hide them, never screenshot them, pray your cloud backup is lying. One string. One leak. One phishing page that looks almost right. The coin does not care that you were tired.

GenesisCoin is the token experiment I have been sketching that refuses the single-string model. At launch the protocol publishes a fixed catalog of exactly 1,048,576 recovery phrases (220 entries, indexed 0…1048575). Each phrase is a standard-length BIP39-style line, but none of them alone is your wallet. Your wallet is a genesis draw: twenty-four phrase IDs chosen deterministically from block hash entropy at the moment you create the account, plus an optional user passphrase.

The private key is not any one phrase. It is derived only when you supply the full tuple:

GENESIS = SHA-256( phrase[id_1] || phrase[id_2] || ... || phrase[id_24] || passphrase )
k       = BIP32_master(GENESIS)
address = Hash160(k * G)

Read that twice. The million phrases are public. They ship in the genesis block as a Merkle root. Anyone can mirror the list. What they cannot guess is which twenty-four slots belong to you unless they know your draw—or brute-force a space that is intentionally obnoxious.

Why publish a million phrases if they are public anyway? - 2026-10-13

Because the attack surface moves. A malware dump that grabs “wallet backups” no longer finds one line labeled seed.txt. It finds index files, partial checkpoints, maybe a passphrase hint. An attacker with your laptop still has to identify which twenty-four of a million published lines you used, in order, then grind the KDF. A phishing site that asks you to “confirm your recovery phrase” cannot succeed with one paste—it would need your entire index vector, which honest UIs never show as a single blob.

ArtifactWhat it is
Registry rootIn the chain. 1,048,576 phrases committed at genesis. Same for everyone.
Draw vectorTwenty-four integers in [0, 1048575]. This is what you backup (encoded, not plaintext phrases).
PassphraseOptional second factor. Hashed into GENESIS before BIP32.
Private key kEphemeral. Wallets derive, sign, zero. Never written to disk.

Recovery is ritual, not poetry. You open a Genesis wallet, it walks you through re-entering the draw (or scanning an encoded backup QR), pulls the twenty-four public phrases by ID, mixes them, and only then shows a balance. Lose the draw vector and the million phrases are a library with no card catalog.

What GEN actually is on-chain - 2026-10-13

GenesisCoin is not pretending to be a new monetary policy lecture. Supply is capped, blocks are boring, fees are fees. The novelty is custody metadata: addresses carry a flag that they were created under the genesis registry, and spends must include a zero-knowledge proof that the signer finished the phrase combination without revealing which IDs were used. (Implementation detail for the curious: think Pedersen commitments over the index vector plus a SNARK that the derived pubkey matches the commitment. This post is not the spec.)

Trading ticker: GEN. Logo above. Meme surface area: high. Under the meme is a serious question: can we make “recovery” a combinatorial object instead of a single secret sentence?

What this will not save you from - 2026-10-13

If you photograph your draw vector and post it to Instagram, GenesisCoin cannot help you. If someone holds a gun and you read all twenty-four indices aloud, same story. The million phrases are not magic; they are a different shape of lock. Combinatorial custody raises the cost of bulk leaks and lazy phishing. It does not repeal social engineering.

Also: 1,048,576 phrases at genesis is a large but finite download. Light clients fetch proofs, not the whole book. Do not interpret “million recovery phrases” as “store a million backups.” You store one vector. The chain stores the library once.

Why I would ship this - 2026-10-13

Because the industry keeps treating seed phrases like love letters—one intimate block of text—when most failures look like logistics. GenesisCoin separates public vocabulary from private selection. The vocabulary is the million lines. The selection is yours. The key is the ceremony that combines them.

If I were writing the wallet box copy, it would fit on a sticker:

  1. One million recovery phrases ship with the chain. They are not secrets.
  2. Your wallet is twenty-four IDs into that catalog, plus an optional passphrase.
  3. Never backup the derived key. Backup the draw.
  4. GEN is a token. The registry is the product.

Links

Notes

TIL: 220 = 1,048,576. I picked a power of two so index vectors pack cleanly into 20-bit fields.

Quote: “You do not memorize a million phrases. You memorize which shelf numbers you checked out.” — me, on a scrap of paper.

ShareRestack

Ready for more?

Subscribe for free to receive new posts and support my work.

44 comments

SK
seed_skeptic 5h

So the million phrases are public but the 24 indices are secret. That is just a bigger BIP39 with extra steps unless the index space is actually hard to search.

Justin Drake 4h

The hardness is combinatorial: C(1e6,24) is not “try every phrase once.” Bulk malware that expects one string per file also has to reconstruct ordered tuples. Not impossible—just a different failure mode than today.

QR
qr_backup 3h

Encoded draw vector as QR is clean. Please never show all twenty-four phrase texts on one screen. That is how users screenshot themselves into trouble.

LM
light_merkle 2h

How big is the genesis download if you want to verify locally? Asking for my phone’s storage and my patience.

GC
genesis_curator 1h

Light clients verify against the root and fetch phrase lines by index on demand. You are not keeping a million lines in Notes.app. You are keeping twenty-four numbers.