CoinYQ Dossier

Oasis put privacy in a separate room—and inherited the room’s locks

Dawn Song’s research career revolved around a stubborn question: can a computer use sensitive data without exposing it to whoever runs the machine? Oasis turned that question into a blockchain design. Consensus would remain shared; applications could move into separate ParaTimes, and Sapphire would hide selected computation inside secure hardware. That choice made confidentiality practical for Solidity developers, but it also made the locks—enclaves, keys, RPC paths and application code—part of the story.

Dawn Song takes a Berkeley research problem outside the lab

In 2018, UC Berkeley professor Dawn Song co-founded Oasis Labs. Berkeley’s account connects the company directly to her privacy-preserving computation research and names Raymond Cheng and Noah Johnson among the early team. The project began with a computer-security problem before it became a token network: infrastructure operators should not automatically see the data they process.

The proposed answer did not ask one blockchain virtual machine to serve every workload. Oasis separated proof-of-stake consensus from ParaTimes, replicated execution environments with their own rules and ledgers. That division let transparent and confidential computation share settlement without pretending they had identical trust requirements.

Two 2020 launches turn the design into oasis-1

Oasis announced Mainnet Beta on October 1, 2020. It was a live network, but the later upgrade was the sharper economic boundary. On November 18 at 16:00 UTC, community node operators moved to chain oasis-1, enabled ROSE transfers and activated the reward schedule. The two dates describe successive states, not competing launch claims.

ROSE entered with a fixed 10 billion cap and about 1.5 billion circulating. The full approximate allocation put 23.5% into staking rewards, 23% with backers, 20% with core contributors, 18.5% into community and ecosystem programs, 10% in the Foundation endowment and 5% with strategic partners and reserve. Those buckets explain who could finance security and development, while the official page warns that allocations were approximate and subject to change.

Sapphire makes confidentiality callable from Solidity

Sapphire’s chronology has three distinct steps. Testnet opened on 21 July 2022; Sapphire 0.3.0 reached mainnet on 16 December. At the Oasis Rendezvous on 19 July 2023, the Foundation launched Oasis Privacy Layer as a bridge-and-relayer framework through which applications on other EVM chains could call Sapphire.

Sapphire offers encrypted state, calls and confidential randomness, but only inside that ParaTime and only when applications use the features correctly. Testnet data should be treated as public. A public RPC can censor or intercept requests; contracts cannot know whether calldata arrived encrypted; and timing, gas, storage size or access patterns can leak clues.

The enclave protects a computation, while key custody keeps it alive

Inside Sapphire, trusted execution hardware isolates contract work from the host. Remote attestation lets participants check which runtime is in the enclave. Yet the platform paper leaves residual trust visible: the key manager has an enclave component and an external component, and the latter is trusted not to perform rollback or side-channel attacks. Hardware flaws, unsafe upgrades or unavailable key-manager nodes are operational assumptions, not details erased by encryption.

ROFL extended the pattern beyond contracts and officially reached mainnet on 2 July 2025. A registered bundle runs in a node-hosted enclave, obtains an attested identity and application-scoped secrets, and can send transactions that Sapphire recognizes. This proves which registered code environment handled a result. HTTPS can authenticate a remote server, but neither attestation nor TLS proves that a price feed, sensor, model output or human statement is true, fresh or available.

ROSE governance ends with validators choosing software

ROSE pays consensus gas and supports staking, delegation and rewards. Governance is more layered than the label suggests. Proposals and architecture decisions can begin in public issues and ADRs; unresolved design work can be decided by project committers. Network votes are conducted by eligible stake-backed entities or validators, not by every passive balance clicking a ballot.

Even an approved upgrade becomes real only when node operators install the software and the network reaches the required support. The Foundation also directs its own delegations under a published policy. ROSE therefore coordinates security and decisions, but control is distributed across delegated stake, validator votes, maintainers, Foundation resources and the operators who run each runtime.

How the project changed

  1. 2018
    Dawn Song co-founds Oasis Labs

    Berkeley privacy-computing research becomes the basis for a startup and, later, the network.

  2. 2020-10-01
    Mainnet Beta goes live

    Validators begin operating the beta network before transfers and the full reward schedule are enabled.

  3. 2020-11-18
    The oasis-1 upgrade activates

    At 16:00 UTC the community-approved upgrade enables ROSE transfers and staking rewards.

  4. 2022-07-21
    Sapphire opens on testnet

    The first confidential EVM-compatible ParaTime becomes available for application testing.

  5. 2022-12-16
    Sapphire 0.3.0 reaches mainnet

    The confidential EVM ParaTime is deployed before public gateway and explorer services are completed.

  6. 2023-07-19
    Oasis Privacy Layer is presented at Rendezvous

    OPL gives applications on other EVM chains a bridge-and-relayer route to Sapphire confidentiality; it is not a new ParaTime.

  7. 2025-07-02
    ROFL mainnet officially launches

    Registered off-chain applications can run in node-hosted TEEs with attested identities and application-scoped keys.

Evidence and primary sources

Last evidence review: 2026-09-05

What is Oasis?

Oasis Network is a proof-of-stake Layer 1 that separates shared consensus from application runtimes called ParaTimes. Dawn Song co-founded Oasis Labs in 2018 from privacy-computing work at UC Berkeley. Mainnet followed in two stages in 2020. Sapphire, its EVM-compatible confidential ParaTime, entered testnet on 2022-07-21 and mainnet on 2022-12-16. Oasis Privacy Layer was launched at the July 19, 2023 Rendezvous as a framework for reaching Sapphire from other EVM chains. ROFL mainnet followed on 2025-07-02 for attested off-chain applications. ROSE pays fees and backs consensus, delegation and network governance.

What problem does Oasis solve?

A public blockchain makes verification easy by exposing execution and state, but that visibility blocks applications handling confidential business, identity or financial data. Sending heavy or private work off-chain solves cost and secrecy only by adding another operator to trust. Oasis’s answer was architectural: keep stake-backed ordering and settlement in one layer, then let separate runtimes choose their execution and confidentiality model. The result narrows exposure; it does not remove the hardware, key-management and application-design assumptions beneath privacy.

How does Oasis work?

Validators order consensus transactions and secure the chain with staked or delegated ROSE. ParaTimes execute applications in parallel and keep separate ledgers; deposits and withdrawals cross the boundary, so a consensus balance and a Sapphire balance are not the same account state. Sapphire runs Solidity contracts in trusted execution environments and can encrypt calls and contract state. Its own documentation warns that public RPC endpoints can censor or intercept traffic and that gas, timing, data size and access patterns may reveal information. ROFL registers an application on-chain, starts it inside a node-hosted enclave and gives the attested instance an identity and application-scoped secrets. That attestation checks the declared code environment, not whether an outside data source told the truth.

Key facts

  • Dawn Song co-founded Oasis Labs in 2018 to commercialize privacy-preserving computation research developed at UC Berkeley.
  • Mainnet Beta went live on 2020-10-01; the oasis-1 mainnet upgrade began on 2020-11-18 at 16:00 UTC and enabled transfers and rewards.
  • ROSE has a fixed 10 billion cap; approximately 1.5 billion circulated at mainnet launch.
  • Allocation: staking rewards 23.5%, backers 23%, core contributors 20%, community and ecosystem 18.5%, Foundation endowment 10%, strategic partners and reserve 5%.
  • Consensus and each ParaTime maintain separate ledgers, connected by deposits and withdrawals.
  • Sapphire entered testnet on 2022-07-21 and mainnet on 2022-12-16; OPL launched at the 2023-07-19 Rendezvous as a cross-chain route into Sapphire, not as another ParaTime.
  • Sapphire production confidentiality depends on encrypted calls, enclave execution and careful application design; testnet data should be treated as public.
  • Public Sapphire RPC endpoints are a trust point that can censor or mount a man-in-the-middle attack.
  • Governance combines off-chain design discussion with stake-backed validator/entity voting and voluntary adoption of network upgrades.
  • ROFL mainnet launched on 2025-07-02. It attests a registered application environment and manages per-application keys, but does not certify the truth, freshness or availability of external inputs.

Official links

Categories

Related coins

Frequently asked questions

Who started Oasis Network?

UC Berkeley professor Dawn Song co-founded Oasis Labs in 2018 from privacy-preserving computing research. Berkeley also identifies Raymond Cheng and Noah Johnson among the early research team.

What is the difference between Oasis consensus and a ParaTime?

Consensus orders and settles network operations. A ParaTime executes a particular application environment with its own state and ledger. ROSE crosses between them through deposits and withdrawals.

Is every Oasis transaction private?

No. Sapphire offers confidential EVM execution when an application uses encrypted calls and privacy-aware contract design. Other ParaTimes can be transparent, and metadata or access patterns can still leak.

What backs Sapphire confidentiality?

Trusted execution hardware, remote attestation, runtime code and key management form the trust boundary. Users must also avoid untrusted RPC paths and application logic that reveals outputs or secret-dependent patterns.

How was ROSE distributed?

The approximate split is 23.5% staking rewards, 23% backers, 20% core contributors, 18.5% community and ecosystem, 10% Foundation endowment and 5% strategic partners and reserve.

Does holding ROSE directly control the protocol?

ROSE can be staked or delegated, and governance decisions are made by eligible stake-backed entities or validators under network rules. Off-chain design work, project committers and node operators’ choice to install upgrades remain separate parts of control.

External trackers

Choose a tracking site for Oasis: