Blake3 algorithm: the Alephium network, ASIC miners and specs
Mining algorithms · Blake3
Blake3: a tree instead of a chain, and a network that asked the ASICs in
6 ASIC models in the catalog, from the Antminer AL1 at 225 J/TH to the Goldshell AL-BOX at 500 J/TH. We break down the algorithm, the Alephium network, the hardware and the economics.
What Blake3 is
Blake3 is a cryptographic hash function published in January 2020. The authors, Jack O’Connor, Jean-Philippe Aumasson, Samuel Neves and Zooko Wilcox-O’Hearn, took the proven BLAKE2 as their base and added the Bao tree mode to it. Inside, nothing is computed as one long chain; it is a Merkle tree. The input is cut into 1024 byte chunks, every chunk is hashed independently, and the results are then folded upward in pairs to the root.
That tree makes Blake3 exceptionally fast and almost unlimited in parallelism. For cryptography that is a virtue, while for proof of work it would seem to be a flaw: PoW algorithms usually try to be expensive on memory or slow instead, in order to delay the arrival of dedicated chips. The Alephium network, the only one where Blake3 is mined on ASICs, did exactly the opposite and stated it in plain words: it does not resist ASICs, it is designed for them.
The asic.es catalog holds 6 Blake3 models from three manufacturers. The efficiency spread here is the narrowest of all our algorithm pages: from 225 J/TH on the Antminer AL1 to 500 J/TH on the Goldshell AL-BOX, a little more than twofold. The spread in market prices, on the other hand, is enormous, and that gets its own section below.
Key characteristics
| Parameter | Value |
|---|---|
| Algorithm | Blake3, a Merkle tree over the BLAKE2 core |
| Authors | O’Connor, Aumasson, Neves, Wilcox-O’Hearn, 2020 |
| Chunk size | 1024 bytes, every chunk computed independently |
| Rounds in the compression core | 7, BLAKE2s had 10 |
| Output length | 256 bits by default, a variable length mode exists |
| Use in the network | A double Blake3 over the block header |
| Hardware type | ASIC |
| GPU | Not profitable since mid 2024 |
| Main coin | Alephium, ticker ALPH |
| Network launch | 8 November 2021 |
| Network design | BlockFlow sharding, 4 groups and 16 chains |
| Block time | 8 seconds since the Danube upgrade, July 2025 |
| Issuance | The lower of two curves, by time and by hashrate |
| Efficiency unit | J/TH, compare only within the algorithm |
| Models in the catalog | 6 from three manufacturers |
How the algorithm works
The miner task is the usual one: pick a nonce so that the block header hash lands below the current target. What is unusual is the hash itself. Blake3 works as a tree: the data is cut into 1024 byte chunks, inside a chunk it runs in 64 byte blocks, and the compression core does seven rounds instead of the ten of its predecessor. The leaves of the tree are computed independently of each other and are then folded in pairs down to a single root value.
It is precisely the independence of the leaves that makes the function so fast. On an ordinary processor it beats BLAKE2 several times over thanks to vector instructions, and in silicon it becomes an ideal candidate: the circuit can be repeated hundreds of times on one die and run all at once. No memory, no random access, no branching to get in the way of packing them densely on the die. Hence the thousandfold gap between a graphics card and an ASIC.
In Alephium the header is passed through Blake3 twice, the way Bitcoin does it with SHA-256. There are two quirks. First: the nonce is 24 bytes long and sits before the header rather than after it. Second: the chain number is encoded into the block hash, so a solution that is found belongs to one specific shard and cannot be reused in another. The node hands the pool sixteen templates at once, one per chain.
On top of this the network has a Proof of Less Work mechanism built in. Once total hashrate reaches 1 EH/s, miners will start burning most of the reward above that threshold, meaning that growth in network power will run into economics rather than into hash difficulty. As of July 2026 hashrate holds in the single digit petahashes, the threshold is far away and the mechanism is not switched on.
- Block headerVersion, links to the parent blocks, roots, time, target
- A 24 byte noncePlaced before the header, whereas the usual practice is to put it after
- First Blake3The data is cut into 1024 byte chunks and the tree is folded to the root
- Second Blake3The result of the first pass is hashed once more
- Comparison with the targetBelow the target and the block is found. Above it, a new nonce and all over again
History of the algorithm
- 2020In January Blake3 is published at the Real World Crypto conference. The base is taken from BLAKE2, the tree mode from the Bao project.
- 2021On 8 November the Alephium mainnet launches. Blake3 is chosen deliberately as an ASIC friendly algorithm rather than an ASIC resistant one.
- 2024In February the ALPH rate hits its all time high. The network is considered entirely graphics card driven, there are no machines for it yet.
- 2024In May the Goldshell AL-BOX gets the ball rolling: the first production ASIC for Blake3.
- 2024In June the Rhône upgrade cuts block time from 64 to 16 seconds.
- 2024In July Bitmain ships the Antminer AL1, then the AL1 Pro. In September IceRiver answers with the AL line. The graphics card era ends within a few months.
- 2024In November the Goldshell AL-MAX closes the wave of releases. After it nobody has shown a new chip for the algorithm.
- 2025On 15 July comes the Danube upgrade: block time falls to 8 seconds, and the fixed supply cap is removed and replaced with an endless tail issuance. Reference sites still write about a billion coins.
Coins on this algorithm
| Coin | Ticker | Notes |
|---|---|---|
| Alephium | ALPH | The only network where Blake3 is mined on ASICs. All of the algorithm hashrate sits here |
ASIC miners for Blake3
All 6 Blake3 models in the catalog, sorted by efficiency with the best on top. Hashrate in TH/s, efficiency in joules per terahash. Click a name to open the profitability calculator for that model.
| Model | Hashrate | Power | Efficiency |
|---|---|---|---|
| Antminer AL1 | 15.6 TH/s | 3510 W | 225 J/TH |
| IceRiver AL3 | 15 TH/s | 3500 W | 233.33 J/TH |
| IceRiver AL0 | 0.4 TH/s | 100 W | 250 J/TH |
| Goldshell AL-BOX II Plus | 1 TH/s | 480 W | 480 J/TH |
| Goldshell AL-BOX II | 0.72 TH/s | 360 W | 500 J/TH |
| Goldshell AL-BOX | 0.36 TH/s | 180 W | 500 J/TH |
Hardware manufacturers
The catalog flagship on efficiency: 15.6 TH/s at 3510 watts, which is 225 J/TH. It came out in July 2024, followed by a Pro version at 16.6 TH/s with the same efficiency. It arrived at the peak of interest in the algorithm, and a sizeable share of purchases were made at prices that have not come back since.
Two models in the catalog and the two edges of the range. The AL3 of September 2024 gives 15 TH/s at 3500 watts, that is 233.33 J/TH, only four percent behind the Bitmain flagship. The AL0 of August 2024 is 400 GH/s at 100 watts and 250 J/TH: the smallest machine on the algorithm, and you can run it at home from an ordinary wall socket.
Three compact boxes from 180 to 480 watts, efficiency from 480 to 500 J/TH. Twice as bad as the flagships, but they ask almost nothing of the room. The company opened this market first, in May 2024, and later released the full size AL-MAX at 8.3 TH/s, which is not in our catalog.
Firmware for Blake3 miners
Blake3 is the only algorithm in this series where third party overclocking firmware exists for the catalog machines, but it is too early to celebrate. AsicBoost firmware is built for SHA-256 boards, on Scrypt it covers two models, and there are no Alephium machines on that list. Network installation through HashCore Toolkit belongs to those same supported lines.
What the market does have. For IceRiver machines an enthusiast has released an open firmware with overclocking: a frequency shift across a wide range, fine voltage tuning, applying changes without a reboot, a smooth frequency ramp in small steps. The hashrate gain is roughly proportional to the frequency gain. The developer fee is one percent, or 1.33 percent in the hosting build.
Three reasons to weigh it all up twice. First: the author himself warns that there are no software limits on frequency and voltage, so it is easy to bring the machine down or to overheat the power stage. Second: the last version came out in October 2024 and there have been no updates since. Third: the warranty ends after such a flash. If you decide to go ahead, start with small steps and watch the temperatures of the power stages, not only of the chips.
For the Antminer AL1 and the Goldshell boxes we did not find a single custom firmware. For those machines the factory efficiency numbers are your numbers for the whole time you own them.
What profitability depends on
Let us start with the unpleasant part, because that is the honest way. By July 2026 the ALPH exchange rate sits at roughly one percent of the February 2024 all time high. At the electricity prices normal for Spain and the EU, not one machine on this algorithm comes out in the black. Buying Blake3 hardware today makes sense in two cases only: your electricity is very cheap or your own, or you are deliberately betting on the project and are ready for payback never to arrive at all.
Formally income is set by three quantities: network difficulty, the ALPH exchange rate and your efficiency in J/TH. But Alephium has a feature that none of the other algorithms in this series has. The block reward is taken as the lower of two curves: one depends on time, the other on network hashrate. There is no classic halving, the decline is continuous and is recomputed every block. All transaction fees are burned in full.
A separate word about the price of the hardware itself. The IceRiver AL3 gives practically the same hashrate as the Bitmain flagship and costs several times less on the secondary market. If you do go into this algorithm, compare not only J/TH but also the price per terahash: the gap there is bigger than the gap in efficiency.
Popular pools
| Pool | Region | Notes |
|---|---|---|
| HeroMiners | Global | PPS+ and a proportional scheme, servers worldwide, one of the largest on the algorithm |
| Kryptex Pool | Europe, CIS, Asia, the Americas | A proportional scheme and SOLO, a 1 percent fee, a payout threshold from 0.5 ALPH |
| K1Pool | Europe, USA, Asia | PPLNS, payouts every four hours, a 50 ALPH threshold |
| WoolyPooly | USA, Europe, Asia, Australia | PPLNS and SOLO, payout threshold from 1 ALPH |
| F2Pool | Asia, global | PPLNS, one of the oldest pools on the market, ALPH added in the summer of 2024 |
| ViaBTC | Global | PPLNS and SOLO, settlement and payouts once a day |
Strengths and weaknesses
- The network has honestly declared itself ASIC friendly, so no algorithm change is to be expected from it
- Sharding into sixteen chains and an eight second block time keep pool payouts coming in evenly
- Network hashrate is small, so a single machine holds a noticeably higher share of total power than usual
- There is a ready home model at 100 watts that can be plugged into an ordinary socket
- Hardware on the secondary market has come down several times over, the entry cost is low right now
- The whole block reward goes to the miner, this network simply has no transaction fee share
- One coin for the whole algorithm, and even Decred on the same hash function cannot be mined with this hardware
- The ALPH rate is down about ninety nine percent from the February 2024 high
- At electricity prices normal for the EU the machines currently do not even cover the power bill
- No new models since November 2024, there is nothing to refresh the fleet with
- Firmware exists only for IceRiver, third party, with no limits and no updates since 2024
- The network market cap is very small, any piece of news moves the rate harder than usual
Energy efficiency and J/TH
Efficiency here is measured in joules per terahash, J/TH. The notation matches SHA-256, Eaglesong and kHeavyHash, but that is a coincidence of notation, not of units. A Blake3 terahash and a SHA-256 terahash are different work, so putting 225 J/TH on Alephium next to the single digit figures of Bitcoin machines is meaningless. The comparison only makes sense within the algorithm.
Inside it the spread is small by the standards of other pages. The Antminer AL1 needs 225 J/TH, the IceRiver AL3 needs 233.33, the IceRiver AL0 needs 250, and the three Goldshell boxes hold at 480 and 500. Between the leader and the bottom row it is a little more than twofold. That means the difference in the electricity bill on Blake3 is not as dramatic as on other algorithms, and the price of the machine itself comes to the front.
The arithmetic goes as usual: multiply efficiency by hashrate to get draw in watts, divide by 1000 to get kilowatts, multiply by your tariff and by 720 hours a month. Compare the sum you get with the mining forecast in the calculator. At the current rate the result will most likely not please you, and it is better to see that before the purchase.
How to choose an ASIC for Blake3
Do the numbers first, decide afterwards. This is the only algorithm in our series where we say outright: start with the calculator and your real tariff. At an ordinary electricity price the answer will be negative, and that is a normal result of the calculation, not an error.
Compare the price per terahash, not just J/TH. The efficiency difference between the flagships is under five percent, while the price difference on the market is a multiple. Here the hardware is picked with money, not with watts.
Settle the coin question in advance. A Blake3 machine has no fallback network. Decred on the same hash function runs under a different scheme and is not mined with this hardware. You are buying a bet on one project.
Keep the home scenario separate from the rack one. The IceRiver AL0 at 100 watts and the Goldshell boxes at 180 to 480 watts live in a flat. The Antminer AL1 and the IceRiver AL3 need about 3.5 kilowatts, their own breaker and an exhaust setup.
Do not rush into firmware. Overclocking is available only for IceRiver, from a third party developer, with no software limits and no updates since the autumn of 2024. It voids the warranty. On a new machine it is better to work through the stock mode first.
Do not build a rate recovery into the calculation. Forecasts of ALPH climbing back to its former levels are hope, not arithmetic. Run the numbers as they stand today, and let growth, if it comes, be a pleasant surprise.
Common mistakes
Assuming a Blake3 machine will take Decred. The same hash function does not mean the same proof of work. Decred has a single Blake3 over a header of a different length, Alephium a double one with the nonce in front and the chain number inside. The hardware is not interchangeable.
Taking supply figures from old reference sites. The cap of one billion ALPH was removed by the Danube upgrade in July 2025 and replaced with an endless tail issuance. Many sites still have not reflected that.
Comparing J/TH with Bitcoin machines. The same unit notation does not make the work the same. Putting 225 J/TH on Alephium next to the single digit figures on Bitcoin is not valid.
Buying on profitability numbers from 2024 advertising. Promises of hundreds of dollars a day belonged to the period before mass hardware arrived. The picture today differs by orders of magnitude, and it takes a minute to check in the calculator.
Flashing firmware straight out of the box. Third party overclocking with no limits on a machine that has not been run in is the fastest way to a dead board and a voided warranty. Stock mode and measurements first.
Chasing hashrate and forgetting the price. On this algorithm two machines four percent apart in efficiency can differ several times over in price. Work out the cost per terahash.
Frequently asked questions
What is Blake3 in simple terms?
It is a fast cryptographic hash function from 2020. Inside it computes not one long chain but a tree: the data is cut into 1024 byte chunks, the chunks are hashed independently and are then folded to a single value.
Who invented Blake3?
Jack O’Connor, Jean-Philippe Aumasson, Samuel Neves and Zooko Wilcox-O’Hearn. The function was published in January 2020, the base is taken from BLAKE2 and the tree mode from the Bao project.
Why was a fast function chosen for mining at all?
Because Alephium does not try to resist dedicated chips and says so openly. The usual arguments for this choice: ASIC resistance is unreachable in the long run anyway, dedicated hardware cannot be rented quickly for an attack, and the network does not have to change its algorithm through hard forks time after time. The team itself explains the choice this way: dedicated hardware is tied to its own network and has an interest in that network living long.
Which coins are mined on Blake3?
On ASICs, only Alephium. All of the algorithm hashrate sits on that network.
Will a Blake3 miner work for Decred?
No. Decred also moved to Blake3 in August 2023, but it uses a different scheme: a single pass over a 180 byte header. Alephium has a double pass, a 24 byte nonce before the header and the chain number inside the hash. The machines are not interchangeable.
Can Alephium be mined on a graphics card?
Technically yes, economically no. Since mid 2024, when ASIC shipments started, graphics cards on this algorithm lost their point: one machine of the Antminer AL1 class replaces several thousand top end cards.
Which model is the most efficient in the catalog?
The Antminer AL1: 15.6 TH/s at 3510 watts, which gives 225 J/TH. The IceRiver AL3 is less than five percent behind and costs noticeably less.
How many Blake3 models are in the asic.es catalog?
Six, from three manufacturers: one Bitmain machine, two IceRiver and three Goldshell.
Is there custom firmware for Blake3?
Only for IceRiver machines, and it is an open project by a third party developer with overclocking and a one percent fee. For the Antminer AL1 and the Goldshell boxes there is no firmware. Keep in mind that this firmware has no software limits and has not been updated since the autumn of 2024.
What does J/TH mean on this page?
Joules per terahash, that is how much energy the machine spends per unit of work. The lower the number, the cheaper the mining. This figure can only be compared with other Blake3 machines.
What is Alephium in a nutshell?
A network with sharding into sixteen chains, a stateful UTXO model and its own smart contract language. It positions itself as a scalable Bitcoin with full contracts. The mainnet has run since 8 November 2021.
Does ALPH have a halving?
Not a classic one. The block reward is taken as the lower of two curves, by time and by network hashrate, and is recomputed every block. The decline is continuous, with no steps landing on a single day.
How many ALPH coins will there be in total?
There is no fixed cap any more. The former limit of one billion was removed by the Danube upgrade in July 2025 and replaced with an endless tail issuance modelled on Monero. The schedule of the first eighty years did not change with it.
What is Proof of Less Work?
A mechanism that switches on when network hashrate reaches 1 EH/s: miners will start burning most of the reward above that threshold. The idea is to limit energy use through economics rather than through hash difficulty. Right now the network runs in the single digit petahashes and the mechanism is not active.
Why is the Alephium block time eight seconds?
That is how it became after the Danube upgrade in July 2025. At launch the interval was 64 seconds, the Rhône upgrade in June 2024 cut it to 16 seconds, and Danube brought it down to eight.
Which pools can I point the machines at?
Among the active ones: HeroMiners, Kryptex, K1Pool, WoolyPooly, F2Pool, ViaBTC. There are more than a dozen pools on the algorithm, but aggregators see only part of the network, so check the live chart on the pool site itself.
Are new Blake3 ASICs coming out?
No. The whole lineup came out between May and November 2024, and after that no new chip for the algorithm has been shown publicly.
Is Blake3 suitable for home mining?
In terms of what the room has to provide, yes. The IceRiver AL0 draws 100 watts, the Goldshell boxes from 180 to 480 watts, and all of it runs from an ordinary socket. The question is not the siting, it is the current economics of the network.
Does mining Alephium pay off today?
At the electricity prices normal for Spain and the EU, no. The ALPH rate holds at roughly one percent of the February 2024 high. Buying only starts to make sense with very cheap or your own electricity, or as a deliberate bet on the project.
What happened to the Alephium bridge in the summer of 2026?
At the end of May 2026 an attacker forged bridge messages and issued unbacked tokens on other networks. Most of them were burned within a few days. The base layer of the network and mining were not affected, only the bridge was.
Technical specification of the algorithm
| Parameter | Value |
|---|---|
| Full name | Blake3, a cryptographic hash function |
| Authors and year | O’Connor, Aumasson, Neves, Wilcox-O’Hearn, 2020 |
| Base | The BLAKE2 core plus the Bao tree mode |
| Structure | A binary Merkle tree over chunks of the input data |
| Chunk size | 1024 bytes |
| Block size inside a chunk | 64 bytes |
| Compression rounds | 7 |
| Output length | 256 bits by default, variable length supported |
| Modes | Hashing, keyed hashing, key derivation |
| Specification | The C2SP project, an IETF draft, reference code in Rust |
| Use in Alephium | Double Blake3, a 24 byte nonce before the header |
| Main network | Alephium, launched on 8 November 2021 |
| Sharding | BlockFlow, 4 groups and 16 chains |
| Block time | 8 seconds since July 2025 |
| Units | Hashrate in TH/s, efficiency in J/TH |