Blake2s algorithm: the Kadena network, ASIC miners and specs
Mining algorithms · Blake2s
Blake2s: a fast algorithm on a network left without the company behind it
4 ASIC models in the catalog, from the Antminer KA3 at 19 J/TH to the Goldshell KD-BOX at 128.12 J/TH. We break down the algorithm, the Kadena network, where it stands today and the economics without any gloss.
What Blake2s is
Blake2s is a cryptographic hash function from the BLAKE family, presented in December 2012. The authors, Jean-Philippe Aumasson, Samuel Neves, Zooko Wilcox-O’Hearn and Christian Winnerlein, took BLAKE, a finalist of the NIST competition for SHA-3, as their base and released two versions: Blake2b for 64 bit processors and Blake2s for everything else. The specification is set out in RFC 7693 of November 2015.
Of that pair the Kadena network chose the smaller one for its proof of work. Blake2s works in 32 bit words and 64 byte blocks and does ten rounds instead of twelve. For a processor that is a compromise, while for silicon it is closer to a gift: the adder comes out more compact, the pipeline is shorter, and the die area per hash is smaller. No resistance to dedicated chips was ever intended here, and the first ASIC for Blake2s appeared as early as November 2020.
Now comes the unpleasant part, the reason this page is worth reading to the end. The algorithm is alive and computes just fine, but the network all this hardware was built for is in a dire position. On 21 October 2025 the Kadena organization announced that it was ceasing all activity and active support of the blockchain. The network keeps producing blocks only because the community forked the node and maintains it with its own resources. We go through this in detail below, because it bears on a decision to buy hardware far more than any efficiency figure.
Key characteristics
| Parameter | Value |
|---|---|
| Algorithm | Blake2s-256, a single pass |
| Family | BLAKE, a finalist of the NIST competition for SHA-3 |
| Authors | Aumasson, Neves, Wilcox-O’Hearn, Winnerlein |
| Year of publication | December 2012, the RFC 7693 specification in 2015 |
| Word size | 32 bits against 64 in Blake2b |
| Block size | 64 bytes against 128 in Blake2b |
| Rounds | 10 against 12 in Blake2b |
| Output length | 32 bytes |
| What is hashed | 286 bytes of the Kadena block header |
| Nonce | 8 bytes, the last ones in the hashed data |
| Coin of the algorithm | Kadena, ticker KDA |
| Chains in the network | 20, linked by the Petersen graph |
| Block time | 30 seconds per chain, about 1.5 seconds across the whole network |
| Block reward | About 0.914 KDA, there are no halvings |
| Efficiency unit | J/TH, joules per terahash |
How the algorithm works
The miner task here is as simple as it gets, simpler than on most algorithms in this series. The block header is taken, the nonce field inside it is changed, the whole thing is run once through Blake2s-256, and the result is compared with the target. No large files in memory as on Etchash, no eleven functions in a row as on X11, no second pass as on Blake3. One call to the hash function per attempt.
The Kadena block header occupies 318 bytes, but not all of it is hashed: the last 32 bytes are the field of the hash itself, and they do not go into the work. That leaves 286 bytes. Inside sit the time, the link to the parent block, the target, the chain number, the height, the payload and, most interesting of all, 110 bytes of links to the neighbouring chains. The nonce takes 8 bytes and stands at the very end of the hashed data, at offsets 278 to 285.
This is worth dwelling on, because two algorithms are easy to mix up here. In Alephium, which has a page of its own on our site, the nonce takes 24 bytes and is placed before the header, and the hash is computed twice. In Kadena the nonce takes 8 bytes, stands after the header, and there is a single pass. These are directly opposite constructions, and hardware does not move between them, despite the similar names of the functions.
The finished 32 bytes are compared with the target as a single unsigned number written least significant byte first. Below the target and the block is found. Above it, the next nonce. One more detail that matters in practice: the miner does not choose the chain number, the node sets it and hands the miner a ready work package. There is simply no chain field in the miner settings.
- Block header318 bytes, of which the first 286 are hashed
- Links to neighbours110 bytes, three neighbouring chains along the Petersen graph
- An 8 byte nonceStands at the end of the hashed data, not in front of it
- A single Blake2s passTen rounds, 64 byte blocks, a 32 byte output
- Comparison with the targetAs an unsigned number, least significant byte first
History of the algorithm
- 2012In December Blake2b and Blake2s are presented. The base is taken from BLAKE, a finalist of the NIST competition for SHA-3.
- 2016Kadena is founded. Will Martino and Stuart Popejoy came from the blockchain division of J.P. Morgan.
- 2019In November the mainnet opens for public mining, launching on ten parallel chains.
- 2020On 20 August comes the expansion to twenty chains. A throughput of 480,000 transactions per second is claimed.
- 2021In November the all time high of the KDA rate is set, about 27.6 dollars. A decline lasting years begins after that.
- 2024On 28 January the network reaches its peak hashrate, 666.88 PH/s. This is the last good news in this list.
- 2025On 21 October the Kadena company announces that it is ceasing all activity and active support of the blockchain. The rate falls by roughly half within a day.
- 2025On 8 November the community forks the node and continues the network with its own resources. Large pools suspend payouts, exchanges delist KDA.
Coins on this algorithm
| Coin | Ticker | Notes |
|---|---|---|
| Kadena | KDA | The only network where Blake2s is mined on ASICs. This hardware has no other use |
ASIC miners for Blake2s
All 4 Blake2s models in the catalog, sorted by efficiency with the best on top. Hashrate in TH/s, efficiency in joules per terahash. Click a name to open the profitability calculator for that model.
| Model | Hashrate | Power | Efficiency |
|---|---|---|---|
| Antminer KA3 | 166 TH/s | 3154 W | 19 J/TH |
| Goldshell KD6 | 29.2 TH/s | 2630 W | 90.07 J/TH |
| Goldshell KD5 | 18 TH/s | 2250 W | 125 J/TH |
| Goldshell KD-BOX | 1.6 TH/s | 205 W | 128.12 J/TH |
Hardware manufacturers
The only machine in the catalog built on a process that was modern for its time: 166 TH/s at 3154 watts, that is 19 J/TH. It came out in the autumn of 2022 and immediately left every competitor behind. Its lead over the Goldshell boxes runs from 4.7 to 6.7 times in efficiency.
Three machines of the 2021 and 2022 generation, all on technology that was already a compromise back then. The KD6 gives 29.2 TH/s at 2630 watts and 90.07 J/TH, the KD5 gives 18 TH/s at 2250 watts and 125 J/TH, the KD-BOX gives 1.6 TH/s at 205 watts and 128.12 J/TH. The KD-BOX is valuable not for its efficiency but for its size: 205 watts can go into an ordinary wall socket, and the loss on it is measured in tens of euro, not hundreds.
Firmware for Blake2s miners
There is no public custom firmware for this algorithm. AsicBoost firmware is built for SHA-256 boards, on Scrypt two models are supported separately, and there are no Kadena machines on that list. Network installation through HashCore Toolkit belongs to those same supported lines.
Third party projects do not change the picture. We went through the official supported model lists: the largest projects state openly that they work only with Bitmain machines on SHA-256, and the Antminer KA3 is not among them. Goldshell publishes firmware for the KD line itself, but puts out only compiled images with no source code, and the updates there are about stability rather than overclocking.
Goldshell has a story of its own. The stock web interface holds a hidden overclocking menu: press the caption of the miner settings section several times in a row and fields for frequency, voltage and fan speed open up. KD5 owners raised the frequency and got growth from roughly 17.8 to 18.6 TH/s, but the rate of hardware errors and rejected shares rose along with it, to two or three percent, so payouts did not increase. In firmware from version 2.1.6 onwards access to those fields was restricted.
The practical conclusion is simple. The factory efficiency figures are your figures for the whole time you own the machine. And a warning while we are at it: the KD MAX is a separate model with different chips, not a firmware for the KD6, although listings regularly confuse the two. Trying to load an image from one model into another ends with a machine that does not work.
What profitability depends on
Here we have to start not with the arithmetic but with the state of the network, because the arithmetic without it is meaningless. On 21 October 2025 Kadena announced that it was ceasing all activity and active support of the blockchain. The network produces blocks thanks to a fork that the community launched on 8 November 2025 and maintains with its own resources. Large pools suspended payouts at the same time for the duration of the transition, and F2Pool wrote plainly in its announcement that it does not guarantee the stability of this version, since it is not run by the original team. Binance, its American arm, OKX and Bybit delisted KDA in the autumn of 2025.
The figures follow from that. The KDA rate is currently below one cent against an all time high of about 27.6 dollars in November 2021, and the sources disagree: exchange aggregators give about half a cent, mining calculators roughly four tenths. Daily turnover of the token across every venue in the world is measured in a few thousand dollars, so even what you mine has nowhere to go without a noticeable loss on slippage. Network hashrate has fallen from 666.88 PH/s in January 2024 to roughly 15, that is minus ninety eight percent. Kadena has no halvings, the reward simply melts away smoothly on an exponential curve and currently stands at about 0.914 KDA per block.
At the Spanish tariff of about 0.15 euro per kilowatt hour the monthly loss works out like this: the Antminer KA3 from 250 to 280 euro, the Goldshell KD6 about 270, the KD5 about 235, the KD-BOX about 21. The spread in the first line comes precisely from the uncertainty in the rate, but the sign does not depend on it. Look at the first two machines: the KA3 is almost five times more efficient than the KD6 and loses roughly the same amount. That happens when income is so small next to the electricity bill that the advantage in efficiency simply drowns. The KA3 earns back from seventeen to twenty six percent of its bill, the Goldshell machines about four.
Popular pools
| Pool | Region | Notes |
|---|---|---|
| F2Pool | Global | PPS, a 3 percent fee, a payout threshold of 2 KDA, settlement once a day |
| AntPool | Global | PPS, a 3 percent fee, payouts once a day |
| DxPool | Asia, USA, Europe | PPS, a 1 percent fee, the lowest payout threshold, automatic settlement |
| Poolflare | Not disclosed | PPS, PPLNS and SOLO to choose from, a 2 percent fee |
| HashPool | Not disclosed | PPLNS, a fee of about 1 percent |
| Icemining | Not disclosed | PPLNS with a delay, and also SOLO and group mining |
Strengths and weaknesses
- The Antminer KA3 was made honestly: 19 J/TH is a strong figure, the machine was ruined by the coin, not by the engineers
- There is no algorithm change to expect, for a sad reason: there is nobody left to change it
- Hardware on the secondhand market has come down by an order of magnitude, the entry cost is nominal
- The Goldshell KD-BOX draws 205 watts: the loss on it is measured in tens of euro, not hundreds
- The developer company ceased operations in October 2025, the network is held up by a community fork
- Large exchanges have delisted KDA, daily turnover is measured in thousands of dollars
- The rate is down about 99.98 percent from the high of November 2021
- Network hashrate has fallen from 666.88 PH/s to roughly 15, that is minus ninety eight percent
- Moving the hardware to another coin is physically impossible, Blake2s on ASICs means only Kadena
- All four models in the catalog run at a loss at any grid tariff for electricity
- There is no custom firmware, and the hidden stock overclocking on Goldshell does not increase payouts
- The last genuinely new model came out in January 2023, after that only reissues on the same chips
Energy efficiency and J/TH
Efficiency here is measured in joules per terahash, J/TH. The notation matches SHA-256, kHeavyHash, Eaglesong and Blake3, but that is a coincidence of notation, not of units. A Blake2s terahash over 286 bytes and a SHA-256 terahash over 80 bytes are different work, so putting 19 J/TH on Kadena next to the single digit figures of Bitcoin machines is meaningless. Inside this page the comparison is valid: all four machines do exactly the same thing.
The spread within the catalog is almost sevenfold. The Antminer KA3 needs 19 J/TH, the Goldshell KD6 needs 90.07, the KD5 needs 125, the KD-BOX needs 128.12. Between the leader and the bottom row it is almost sevenfold. In money at the Spanish tariff the bill works out like this: the KA3 about 341 euro a month, the KD6 about 284, the KD5 about 243, the KD-BOX about 22.
The arithmetic goes as usual: multiply efficiency by hashrate in terahashes to get draw in watts, divide by 1000 to get kilowatts, multiply by your tariff and by 720 hours a month. Compare the sum you get with the mining forecast in the calculator. The break even threshold on electricity lies between 0.026 and 0.038 euro per kilowatt hour for the KA3, and for the Goldshell machines it is below one euro cent. That second figure means the electricity would have to be not merely free but come with a payment on top.
How to choose an ASIC for Blake2s
Settle the question about the network first, the hardware second. Efficiency, price and noise are secondary here. The first question to answer honestly to yourself: are you ready to put money into a network whose developer company has ceased operations and whose support is carried by the community. If the answer is no, there is no need to read further.
Do not count on a fallback coin. Blake2s on ASICs means Kadena and nothing else. Verge on the same function is computed on graphics cards and has a header of a different length, Handshake is Blake2b and SHA-3, Alephium is Blake3. Not one of those options fits physically.
Compare against the market, not against a shop price list. Some sites still hold listings from 2022 with four figure and even five figure prices. Real deals on the secondhand market go for several times and even tens of times less. Before you pay, look at live listings.
Count the electricity, not the purchase price. A Goldshell KD5 or KD6 costing a hundred and fifty dollars burns between 240 and 285 euro of electricity a month: the purchase price is matched by the bill in about two weeks, and after that it is pure loss. The small KD-BOX has a bill of about 22 euro, and it is the only machine in the catalog where the loss is measured in tens rather than hundreds.
Check where you are going to sell what you mine. Several large exchanges have delisted KDA, and daily turnover across all the remaining venues runs to thousands of dollars. That is a separate risk which the other algorithms in this series do not have.
Do not mix up the Goldshell models. The KD-BOX, KD-BOX II, KD2, KD5, KD5 Pro, KD6, KD6 SE, KD LITE and KD MAX are different machines with different chips and different firmware. Ask for the exact model name and a photograph of the label before paying.
Common mistakes
Looking at 19 J/TH and deciding that the KA3 pays off. Efficiency only makes sense together with the rate of the coin. At a rate below one cent an excellent J/TH figure does not save anything: the loss runs from 250 to 280 euro a month at the Spanish tariff.
Believing that the hardware can be moved to another coin. It cannot. Blake2b has a different machine word, a different block size and a different number of rounds, these are different chips. Verge has a different header and graphics card mining. Alephium has Blake3 with a double pass and the nonce in front.
Mixing up Blake2s, Blake2b and Blake3. Three different algorithms, three different fleets of hardware, zero compatibility. Buyers regularly pick up a Kadena machine after hearing the word Blake and count on moving to Alephium or Handshake later.
Not knowing that the developer company is closed. On 21 October 2025 Kadena announced that it was ceasing all activity and support of the blockchain. The network is held up by a community fork. Many reference sites and product listings still do not reflect this.
Waiting for a halving and a rise in the reward by the cycle. Kadena has no halvings. The reward melts away smoothly on an exponential curve, and no event after which things get better is built into the issuance schedule.
Buying the machine as a heater. The Antminer KA3 is 3154 watts and noticeable noise. The electricity bill works out at about 341 euro a month at the Spanish tariff, and even after subtracting what you mine the heating comes to more than two hundred and fifty euro, which is more expensive than any heat pump. The noise on top of that makes installation in a living room impossible.
Frequently asked questions
What is Blake2s in simple terms?
It is a fast cryptographic hash function of 2012 from the BLAKE family. The smaller of the two Blake2 versions: it works in 32 bit words and 64 byte blocks, does ten rounds and produces 32 bytes.
How does Blake2s differ from Blake2b?
In word size, block size and the number of rounds. Blake2s has a 32 bit word, a 64 byte block and ten rounds. Blake2b has a 64 bit word, a 128 byte block and twelve rounds. For a processor that is a choice to match the register width, for an ASIC these are different chips.
How does Blake2s differ from Blake3?
Blake3 came out in 2020 and computes not as a chain but as a tree, and it has seven rounds. On top of that, Alephium on Blake3 has a double pass and a 24 byte nonce standing before the header, while Kadena has a single pass and an 8 byte nonce standing after it. All they have in common is the origin of the name.
Can a Kadena machine mine anything else?
No. Blake2s on dedicated hardware means only Kadena. Verge uses Blake2s among its five algorithms, but mining there is on graphics cards, and the block header is 80 bytes long instead of 286.
What exactly is hashed in Kadena?
The first 286 bytes of the block header. The full header takes 318 bytes, but the last 32 are the field of the hash itself, and they do not go into the work.
Where does the nonce sit?
At the end of the hashed data, at offsets 278 to 285, that is the last eight bytes out of 286. That is exactly the opposite of how Alephium is arranged.
What is Chainweb?
A scheme of twenty parallel chains in which each chain references three neighbours. The links are set by the Petersen graph, which is why the whole network is connected in two steps. The links to neighbours take 110 bytes right inside the hashed header.
What is the block time?
Thirty seconds on each chain. Since there are twenty chains, across the network as a whole a block comes out roughly once every one and a half seconds.
Do I have to choose a chain when setting up the miner?
No. The node sets the chain number and hands the miner a ready work package. There is simply no chain field in the miner settings.
What is the block reward?
About 0.914 KDA. Kadena has no halvings, the reward falls smoothly on an exponential curve, and that decline is stretched over decades ahead.
How many KDA will there be in total?
The cap is one billion. A little more than seventy percent is set aside for mining, the rest for the platform and early participants. About a third of the cap is in circulation now.
Is it true that Kadena shut down?
The company ceased operations and active support of the blockchain on 21 October 2025. The network itself did not stop: on 8 November 2025 the community forked the node and it keeps producing blocks. Both extreme claims, that everything halted and that nothing happened, are wrong.
What became of the pools and the exchanges after that?
Large pools suspended payouts in November 2025 for the duration of the transition, and F2Pool wrote in its announcement that it does not guarantee the stability of a version that is not run by the original team. After the switch to the fork the payouts resumed. Binance, its American arm, OKX and Bybit delisted KDA in the autumn of 2025.
What is the network hashrate now?
On the order of 15 PH/s. The peak was 666.88 PH/s on 28 January 2024, that is a fall of roughly ninety eight percent.
How far has the rate fallen?
By roughly 99.98 percent from the all time high of about 27.6 dollars in November 2021. Daily turnover of the token across every venue in the world is now measured in a few thousand dollars.
Is there any custom firmware?
None in public. The Antminer KA3 is not declared in any known list of supported models. Goldshell puts out its firmware only compiled, with no source code.
Does the hidden Goldshell overclocking work?
The menu really is there in the stock interface, but there is little use in it. KD5 owners raised hashrate from roughly 17.8 to 18.6 TH/s, while the rate of hardware errors and rejected shares grew to two or three percent, and payouts did not increase. In firmware from version 2.1.6 onwards access was restricted.
Does even one model come out in the black?
At the Spanish tariff of about 0.15 euro per kilowatt hour, no, not one. The break even threshold for the Antminer KA3 lies between 0.026 and 0.038 euro per kilowatt hour, and for the Goldshell machines it is below one euro cent, that is for them electricity would have to be not merely free but come with a payment on top.
Why does the KA3 lose as much as the KD6 if it is almost five times more efficient?
Because income is far too small next to the electricity bill. The KA3 earns back from seventeen to twenty six percent of its bill, the KD6 about four. In percentage terms the difference is enormous, while in euro both go more than two hundred and fifty into the red per month, with the KA3 simply consuming more along the way.
Is it worth buying Kadena hardware right now?
We honestly believe that as an investment with a calculated payback it does not work: all four models run at a loss at any grid tariff, the network is held up by the community, and there is almost nowhere to sell what you mine. It can only make sense for someone who buys the hardware deliberately and very cheaply, has practically free electricity and treats this as a bet rather than a calculation.
Technical specification of the algorithm
| Parameter | Value |
|---|---|
| Full name | Blake2s-256 |
| Family | BLAKE, a finalist of the NIST competition for SHA-3 |
| Authors | Aumasson, Neves, Wilcox-O’Hearn, Winnerlein |
| Year | 2012, the RFC 7693 specification in November 2015 |
| Word size | 32 bits |
| Block size | 64 bytes |
| Compression rounds | 10 |
| Output length | 32 bytes |
| Passes in mining | One |
| Hashed data | 286 bytes |
| Nonce offset | Bytes 278 to 285 |
| Comparison order | Unsigned number, least significant byte first |
| Chains in the network | 20, the Petersen graph |
| Links to neighbours | Three per chain, 110 bytes in the header |
| Efficiency unit | J/TH |