Token-gated content

Beyond public on-chain files, XChain can publish encrypted content that only holders of a specific token can read, enforced by cryptography rather than by trusting a server.

🔒 Encrypted file published on-chain

↓

Token holder decrypts on their own device

↓ on sale / transfer

🔑 Key re-wraps to the new holder automatically

How it works

Encrypt a file (or a whole pack of files) and publish the encrypted bytes on the blockchain. Anyone can see the ciphertext exists, but only holders of the gating token can decrypt it.

The key follows the token

The decryption key is delivered to each holder in an encrypted message that travels alongside the token. When the token is transferred or sold, the key is automatically re-encrypted to the new holder in the same transaction. Unlocking happens entirely on the holder's device, with no key server and no download host.

What it enables

• Sealed drops: the content bytes stay unreadable until a holder unlocks them. The fact that a drop exists, its size, and the gating token are all public on-chain; only the content itself is encrypted.
• Paid downloads: sell the token via a dispenser or order; the buyer receives the key in the same trade.
• Whole archives: combined with ownership trading, sell an entire gated catalog to a single buyer.

An honest trust model

This is a first-access lock, not DRM: a holder who decrypts the content keeps those bytes forever. And because access is tied to your address key, losing that key means losing access.

See this in practice →