Penumbra (UM)

Deprecated

Overview

Penumbra (UM) is a privacy-by-default layer‑1 built for the Cosmos ecosystem. The Penumbra blockchain combines end‑to‑end encryption, zero‑knowledge proofs, and the Inter‑Blockchain Communication (IBC) protocol so users can shield assets from other chains, trade on a native private DEX, stake, and participate in governance — all without exposing balances, counterparties, or strategies on a public ledger. Its native UM token powers fees, staking, and voting, and it anchors a design focused on efficient price discovery with strong privacy. In practice, that means you can move IBC assets into Penumbra’s multi‑asset shielded pool, swap using batch auctions that limit frontrunning, and disclose only what you choose via viewing keys. (penumbra.zone)

History & Team

Penumbra Labs began the project in 2021, led by founder and CEO Henry de Valence, a long‑time contributor to zero‑knowledge cryptography and privacy tech. The project raised a $4.75 million seed round on November 4, 2021, led by Dragonfly Capital with participation from Interchain Foundation, Lemniscap, Robot Ventures, Volt Capital, Figment, Strangelove Ventures, Informal Systems, and ZKValidator (nine investors in total). This early funding helped incubate the shielded pool, private staking, and the DEX. (coincarp.com)

Penumbra’s path to mainnet used a phased approach. In Phase 0 (July 2024), the network booted with governance and transfers, then moved to create IBC connections and enable full DEX and transfer functionality through subsequent governance votes. The Institute for Applied Numogrammatics (IAN), an independent Cayman foundation, was established to support ecosystem growth and decentralization. (forum.penumbra.zone)

Technology & How It Works

Shielded by default

All value on Penumbra lives in a single multi‑asset shielded pool. Transactions create and spend encrypted “notes” whose commitments are recorded on‑chain; nullifiers prevent double‑spends without revealing linkages. Thanks to client‑side proving, users submit encrypted updates with zero‑knowledge proofs that verify correctness while hiding amounts, asset types, and addresses. Penumbra also aligns its privacy boundary with IBC: transfers into Penumbra shield assets; transfers out unshield them. (protocol.penumbra.zone)

End‑to‑end encryption, local‑first

Penumbra emphasizes local, on‑device privacy. Wallets generate proofs and encrypt data before broadcasting, so only senders, recipients, and explicitly authorized viewers can decrypt. This architecture makes Penumbra one of the first fully end‑to‑end encrypted blockchains with practical UX. (penumbra.zone)

ZSwap and sealed‑bid batch execution

Penumbra’s native DEX, ZSwap, uses sealed‑bid batch auctions and concentrated liquidity. Rather than matching individual traders directly, the chain aggregates encrypted flows across a pair, computes a single clearing price per block, and reveals only net flow — reducing MEV and protecting strategies. Threshold encryption for “sealed bids” and related enhancements are part of the forward roadmap in the protocol spec. (protocol.penumbra.zone)

Private proof‑of‑stake

Staking is private by design. When you delegate UM to a validator, you receive a validator‑specific delegation token (delUM) representing a share of that validator’s pool. Rewards accrue to the pool and are realized when you undelegate, keeping individual delegations private while maintaining validator accountability. Governance follows the Cosmos model with a twist: validator votes are public; delegator votes are private and override validator defaults. (penumbra.zone)

Selective disclosure and viewing keys

Penumbra supports granular disclosure. Full viewing keys let you share read‑only access to your history with auditors or tax tools, while transaction “perspectives” let you reveal only parts of specific transactions. This gives users practical compliance options without sacrificing default privacy. (guide.penumbra.zone)

Tokenomics & Utility

Penumbra tokenomics are described publicly through the project’s forum and docs.

• Genesis supply: 100,000,000 UM. The distribution includes 16% airdrop (8% to active Cosmos DeFi users and 8% to developers), 25% community pool (earmarked for future community use and distribution via governance), 20% to IAN, 12.5% to contributors, 12.1% to seed investors, 5.1% to strategic investors, 4.5% to Radiant Commons, and 3.65% to Penumbra Labs. Investor and team allocations follow time‑bound lockups and cliffs for transparency and alignment. (forum.penumbra.zone)

• Fees and burning: Penumbra prices four resources (block space, compact block space, verification, execution) and burns the base fee of every transaction. Initially, the proposer tip is also burned for implementation simplicity. This design makes UM structurally deflationary relative to on‑chain activity. (forum.penumbra.zone)

• Multi‑asset gas: To streamline onboarding, users can pay fees in certain non‑UM assets (e.g., USDC, ATOM, OSMO — and through governance, TIA), which are swapped into UM and then burned, keeping UM at the center of the economy. UM remains the most cost‑efficient fee token, encouraging users to hold it. (penumbra.zone)

• Staking issuance: Staking issuance is intentionally modest and set by governance (initially around 2% per year) to avoid outsized rewards to locked holders, with rewards accruing to delegation pools and realized at undelegation. (forum.penumbra.zone)

• Governance and incentives: UM holders vote on proposals, including parameter changes and upgrades. In 2025, Penumbra introduced a Liquidity Tournament (LQT) that directs DEX incentives based on community voting, rewarding both delegators and liquidity providers according to real trade execution. (vote.penumbra.zone)

In short, Penumbra tokenomics favor sustainable utility: UM anchors fees (and burns), staking, governance, and liquidity incentives — the core drivers behind long‑term network usage and, by extension, the UM price narrative. (forum.penumbra.zone)

Ecosystem & Use Cases

Penumbra’s first wave centers on DeFi: private transfers, private swaps, and private liquidity provision. Traders can protect alpha, and LPs can build concentrated positions without broadcasting strategy. Because Penumbra connects over IBC, users can shield assets like USDC, ATOM, OSMO, TIA and transact inside Penumbra; when ready to interact on other chains, they can unshield via IBC withdrawal. (penumbra.zone)

Selective disclosure unlocks practical workflows. For example, a fund can privately trade, then provide a viewing key to an auditor for end‑of‑period reports. Builders can also imagine private coordination games or sealed‑bid auctions where hidden information is a feature, not a flaw. While today’s focus is Penumbra DeFi, NFTs, gaming, and other app categories can leverage the same primitives over time — especially as more programmability and threshold‑encrypted flows come online. (protocol.penumbra.zone)

A growing set of tools supports the ecosystem: Prax (local‑first wallet), Veil (DEX front end and explorer), Noctis (block explorer), Insights (live chain metrics), and command‑line tooling (pcli). Grants and tournaments funded by IAN and community governance continue to bootstrap development and liquidity. (penumbra.zone)

Advantages & Challenges

Penumbra brings several advantages:

• Privacy by default with end‑to‑end encryption and zero‑knowledge proofs, so everyday activity stays confidential while remaining verifiable. (penumbra.zone)
• A DEX that batches trades and reveals only net flow for each pair per block, reducing frontrunning and leaking of strategies. (protocol.penumbra.zone)
• Private staking and governance, where delegations and delegator votes are hidden, but validator accountability remains. (guide.penumbra.zone)
• Interchain reach via IBC, allowing users to shield assets from many Cosmos chains into a single multi‑asset pool. (protocol.penumbra.zone)
• Practical compliance features through viewing keys and selective disclosure. (guide.penumbra.zone)

There are also challenges to watch:

• The protocol prioritizes fixed functionality and high performance first; broader programmability is a longer‑term goal, so developers currently work within a focused feature set. (protocol.penumbra.zone)
• Advanced cryptography and a new UX model can carry a learning curve for users and integrators.
• Privacy tech continues to attract regulatory attention globally; Penumbra’s approach seeks to balance privacy with optional transparency for those who need it. (eba.europa.eu)

Where to Buy & Wallets

If you’re exploring where to buy UM, you have two common paths:

• Inside Penumbra: Use the Prax wallet to connect to the Penumbra DEX. Shield IBC assets (for example via the Skip integration) from a connected Cosmos chain into the Penumbra shielded pool, then swap privately for the UM token. This route keeps activity inside the private pool. (guide.penumbra.zone)

• External markets: UM trades on interchain venues like Osmosis via IBC pairs and is listed on select centralized exchanges. For example, MEXC maintains a UM market. Availability varies by region and venue. (coinmarketcap.com)

For wallets, Prax is the native, local‑first browser extension purpose‑built for the Penumbra blockchain. Power users can also operate with the pcli command‑line tool and related services. The Noctis explorer and Veil front ends help you inspect public metadata while keeping private details shielded. (chromewebstore.google.com)

Note: UM price, volume, and other real‑time metrics update dynamically in the market section of this page.

Regulatory & Compliance

Penumbra’s design recognizes global compliance needs while preserving personal privacy. The protocol supports selective disclosure with full viewing keys and per‑transaction “perspectives,” so users can share records with auditors, tax tools, or service providers without giving up spending control. That design aligns with emerging expectations in the EU and elsewhere that service providers trace transfers while letting end users control who can see what. (guide.penumbra.zone)

In the European Union, the “travel rule” for crypto transfers now applies to crypto‑asset service providers (CASPs), with EBA guidelines taking effect from December 30, 2024. These rules require originator/beneficiary information to “travel” with transfers handled by CASPs. Penumbra itself is a decentralized network, but its optional viewing keys and disclosure features can help CASPs and users share data when needed. (eba.europa.eu)

Different jurisdictions treat privacy‑enhancing technologies differently. For example, South Korea has directed exchanges to avoid listing privacy coins, reflecting AML/CFT concerns at the exchange level. The U.S. and EU have focused on applying existing AML rules to intermediaries rather than banning privacy tech outright. Penumbra’s approach — private by default with user‑controlled transparency — gives market participants tools to meet local rules while protecting user data. (cointelegraph.com)

Halal/Shariah considerations

Is Penumbra halal? Many analysts say yes, Penumbra can be viewed as halal in principle because the network itself does not embed interest (riba), gambling (maysir), or prohibited business models. It is a proof‑of‑stake chain with private transfers and governance; whether the UM token and related activities are UM shariah compliant depends on user intent and specific scholarly interpretations. Some scholars are cautious about cryptocurrencies in general (volatility, speculation, or misuse). In practice, the Penumbra halal view often centers on ethical use and the absence of riba in base protocol design, along with the ability to selectively disclose for accountability.

“Penumbra regulatory status” in brief

• Architecture: Open‑source, non‑custodial layer‑1 with optional transparency. (penumbra.zone)
• Compliance hooks: Viewing keys and transaction perspectives support audits and reporting. (guide.penumbra.zone)
• Exchange policies: Listing decisions vary by venue and jurisdiction, especially for privacy‑focused assets. (cointelegraph.com)

Future Outlook

Penumbra’s roadmap is about deepening privacy and liquidity while keeping UX simple:

• More fee tokens and governance‑driven parameter tuning, including gas pricing and accepted alternatives. (vote.penumbra.zone)
• Threshold encryption to further strengthen sealed‑bid batch swaps and broaden DEX mechanics. (protocol.penumbra.zone)
• Continued Liquidity Tournament epochs to guide incentives toward the most useful pairs, rewarding both delegators and LPs based on real execution. (penumbra.zone)
• Expanded interchain connectivity and tooling (wallets, explorers, insights) to bring more IBC users into the shielded pool. (penumbra.zone)
• Gradual expansion from “fixed functionality first” toward broader programmability, opening doors to more complex Penumbra DeFi, NFTs, and gaming use cases that rely on hidden information or private state. (protocol.penumbra.zone)

As the network matures, these features can reinforce UM’s role across fees, staking, governance, and incentives — the fundamentals that typically shape long‑term UM price drivers.

Summary

Penumbra is a privacy‑first blockchain for the interchain era. With end‑to‑end encryption, a multi‑asset shielded pool, sealed‑bid batch swaps, and private staking and voting, it gives users strong privacy without giving up usability or liquidity. The UM token sits at the heart of “Penumbra tokenomics,” anchoring multi‑asset fees that are burned, low‑drift staking issuance, and community‑directed liquidity incentives. Ecosystem tools like the Prax wallet, Veil, and Noctis make it practical to shield, trade, and account for activity — and optional viewing keys keep Penumbra usable in a world of travel‑rule compliance. If you’re researching Penumbra DeFi, NFTs, and gaming potential, the through‑line is clear: private by default, transparent by choice, and built to connect the wider IBC economy. (penumbra.zone)