Prove you’re a person once with World ID. Attestcoin carries that proof to Creditcoin, where the chain checks it for itself. No bridge, no oracle, no admin key. And the credit line belongs to you, not to whichever wallet you happened to be holding.
Ethereum mainnet and Sepolia
World ID commitments in the relayed roots
One nullifier bound to one wallet
hUSD, uncollateralised
We never ask Creditcoin to take a messenger's word for it. Attestcoin proves the real Ethereum transaction, and the 0x0FD2 precompile checks that proof inside the same call.
Nobody can pause it, upgrade it, or decide who gets to relay. Every constant is immutable, and the next root can come from anyone. Including you.
The Semaphore Groth16 proof runs over Creditcoin's own bn128 precompiles, against a World ID root that arrived through Attestcoin. Nothing is settled off-chain.
Your account is your World ID nullifier. A fresh wallet is not a fresh borrower, and a default is not something you get to leave behind.
Every credit passport built on wallets can be forged in about a minute. Open ten wallets, repay yourself ten times, mint ten spotless scores, then default on the eleventh loan. We counted roughly thirty projects in this hackathon with that exact hole. Humanline exists to close it.
Four wallets, four spotless repayment histories, one person. The fifth wallet walks off with the money and the score stays clean, because that score was never attached to anybody.
One Orb-verified human is one leaf in World’s tree and one nullifier on Creditcoin. Bind a new wallet and your history moves with you. So does the default that froze it.
Every arrow below is a verification, not a handoff. Nowhere in this path do we ask you to trust an operator. That includes us.
World's sequencer publishes a new identity tree root roughly every hour.
registerIdentities on the Orb identity manager emits TreeChanged(preRoot, kind, postRoot). That transaction is the only thing Humanline trusts, and only because it can prove it happened.
A permissionless worker submits an inclusion and continuity proof.
The 0x0FD2 precompile verifies the proof inside the same call. 0x0FD3 enforces a finality depth and 0x0FD4 a quorum of attestors. No bridge signed it, no oracle reported it, no multisig approved it.
World App, or the staging simulator if you'd rather kick the tyres first, produces a Semaphore proof bound to your wallet.
HumanRegistry checks the Groth16 proof on Creditcoin against an Attestcoin-anchored root and binds your nullifier to your address. Your identity never leaves your phone.
Borrow, repay on time, and your limit grows 25%.
Miss a deadline and the line freezes on every wallet you ever bind. Move to a new wallet and the history follows you there, because the nullifier is the account.
Nobody can lend against on-chain history until that history belongs to someone who can't walk away from it by generating a new key. That is the whole difference, and it is the only one that matters.
This is Creditcoin's founding mission. We're adding the one primitive it was missing: proof that the borrower is a person.
Orb-verified through World App in 2025. Sells phone accessories, gets paid in M-Pesa and USDC. No bank anywhere has a file on her.
She wants a 50 USD working-capital line she can grow by paying it back on time. No collateral, no oracle operator to trust, and no sybil farm able to borrow in her name.
World ID has 13M+ Orb-verified humans, concentrated in Kenya, Argentina, Indonesia, the Philippines, Brazil and Malaysia. Those happen to be Creditcoin's markets too.
Runs BNPL for a million Nigerians and already records loans on Creditcoin through Credal.
Wants a trustless answer to “is this borrower a unique human, and how have they behaved on Humanline?” before extending anything uncollateralised.
Two view calls answer it: isHuman(address) and lineOf(humanOf(address)). No API key, no sales call, no trust in us required.
Every claim here resolves to a value you can read off the chain, a command you can run, or a transaction you can open in a block explorer. We would honestly rather you checked than believed us.
No pause, no upgradeability, no privileged relayer. Every constant is an immutable or a constructor argument, fixed the day we deployed and visible on Blockscout.
WrongSourceChain, SourceTxReverted, NotIdentityManager, UnknownPreRoot, NotFinal, ThinQuorum, OverLimit. Each one has a test that fires it on purpose.
Ethereum mainnet World ID roots, published hourly by World's sequencer and verified by the 0x0FD2 precompile in every single relay transaction.
hUSD is a test stablecoin, lender deposits are testnet funds, and demo loan terms are minutes long so a full cycle fits in a video. We say so on every page where it matters.
Verify once with World ID, open a line, and carry it with you for good. It takes about a minute on the staging tree. And if you’d rather not connect a wallet at all, you can still check every claim on this site.