Zelcore

Mini-Apps, Notcoin, and Telegram as a Distribution Channel

8 min read
Mini-Apps, Notcoin, and Telegram as a Distribution Channel

Thirty-five million people played a clicker game inside a messaging app, earned tokens for it, and then watched those tokens lose nearly everything they were ever worth. That sequence — viral reach, airdrop, collapse — is the defining story of Telegram mini apps in crypto so far. But the infrastructure those apps run on is more durable than any single token, and understanding how it works is essential before connecting a wallet to anything inside your chat window.

What Telegram Mini Apps Actually Are

A Telegram Mini App (TMA) is a JavaScript web application that runs inside Telegram's native WebView, launched through a bot — no separate app-store download required. From a technical standpoint, it uses the Mini App SDK, which exposes window.Telegram.WebApp: a browser-like environment with access to verified user identity, theme, viewport controls, and device capabilities.

The key mechanic that separates TMAs from ordinary web apps is session inheritance. Because the app runs inside Telegram's WebView, it automatically has access to your Telegram identity through a signed data bundle called initData, verified by HMAC-SHA256. There is no separate account creation, no email or password form. For millions of users who have never touched a crypto wallet, this frictionless entry point is the UX unlock that conventional dApps cannot match.

Payments inside TMAs flow through third-party providers such as Apple Pay and Google Pay, or natively through Telegram Stars — Telegram's in-app currency. Stars can be purchased with fiat via Apple or Google Pay, or with Toncoin through the Fragment exchange. Developers and creators earn Stars from users, then withdraw them by converting to Toncoin on Fragment, with a 1,000-Star minimum and a 21-day waiting period on newly earned Stars. The result is a closed loop: a non-crypto user pays in Stars with a credit card; the developer receives Toncoin. Stars abstract the chain away entirely for the end user.

TON as the Exclusive Chain in Your Chat App

In January 2025, the TON Foundation announced that TON is the exclusive blockchain infrastructure for Telegram's mini-app ecosystem, covering more than 950 million monthly active users at the time. TON Connect — a standardized protocol linking TON wallets to mini-apps and dApps — became the mandatory wallet-connection protocol, with migration required by February 21, 2025.

This exclusivity extends further than wallet connections. Toncoin is the only cryptocurrency accepted for Telegram Premium subscriptions, Telegram Stars, Telegram Ads, and developer payouts. TON's architecture — its workchains and sharded design — was built for high throughput, and the Telegram integration gives it a captive user base no other blockchain has approached. Telegram reached 1 billion monthly active users in March 2025.

Telegram has also announced plans to tokenize emojis, stickers, and limited NFT gifts on TON, minted as Jettons (TON's fungible token standard, broadly equivalent to ERC-20 on Ethereum) or as NFT-style assets on the chain. By the numbers, Telegram's H1 2025 revenue came in at approximately $870 million, with roughly a third tied to TON-related agreements — a figure that reflects how deeply the two entities' finances have become intertwined.

The Tap-to-Earn Wave: Notcoin and Hamster Kombat

The first mass demonstration of Telegram's distribution power in crypto was tap-to-earn — a genre of TMA games where players tap a screen to accumulate in-game points that would eventually convert to real tokens via an airdrop. The mechanic required no skill, no investment, and no prior crypto knowledge.

Notcoin launched as a TMA in January 2024. By the time of its airdrop, more than 35 million people had played it — roughly 0.4% of the global population. On May 16, 2024, 80 billion NOT tokens were distributed on TON at a 1,000:1 tap-to-token ratio. NOT debuted with a market cap above $900 million and reached an all-time high of $0.02836 on June 2, 2024.

Hamster Kombat, a CEO-simulator clicker, went even larger. By mid-2024 it had accumulated 300 million registered users. Its HMSTR token airdrop launched September 26, 2024, with 131 million wallets — 43% of registered users — deemed eligible. HMSTR peaked at approximately $0.011 on listing day.

These two projects defined the play-to-airdrop blueprint: low-skill engagement mechanic → viral growth via Telegram's social graph → token airdrop → exchange listing → sell pressure. Dozens of copycat projects followed in 2024, each competing for the same pool of airdrop farmers.

The play-to-airdrop model carried a structural problem from the start: the people most motivated to participate were there for the airdrop, not the product.

The Honest Aftermath

As of June 2026, NOT trades around $0.00047 — a decline of approximately 98.4% from its June 2024 all-time high, with a market cap near $46 million against a peak of roughly $2.8 billion. HMSTR sits at approximately $0.00016, down about 98.5% from its September 2024 high.

The structural cause was not hard to diagnose. Tokens were distributed broadly to millions of users who had never formed any conviction about the product — they were there for the airdrop, not to hold. Listing day created immediate sell pressure from a very large number of small holders. There was no sticky use case to create demand on the other side.

Hamster Kombat's situation was particularly illustrative: active users dropped 44% before the airdrop even launched, when the token was delayed in August 2024. Engagement was contingent entirely on the airdrop, not on anything the product itself offered. The drop in users before a single token changed hands confirmed the thesis — scale and conviction are not the same thing.

What the tap-to-earn wave did accomplish, in retrospect, was onboarding. Notcoin in particular introduced tens of millions of users to TON wallets and on-chain transactions for the first time. The lasting legacy of these projects is likely as an onboarding engine — not as stores of value. The tokens collapsed; the wallets those players created remained.

Connecting Wallets and Staying Safe

TON Connect is the standard that powers wallet connections across Telegram mini-apps and TON dApps. It uses encrypted bridges; private keys never leave the wallet, and every transaction requires explicit confirmation. More than 30 wallets support the protocol. The connection process works similarly to WalletConnect on EVM chains — if you have connected Zelcore to a dApp before, the mechanics will feel familiar.

The critical detail is that TON Connect creates a persistent session. Connecting to an app once does not enable a single transaction — it establishes an ongoing approved connection until you manually revoke it. This is structurally the same as approving an ERC-20 contract on Ethereum, and it carries the same hygiene requirement. Auditing and revoking unused approvals is as relevant inside Telegram as anywhere in DeFi.

In May 2026, the threat intelligence firm CTM360 exposed FEMITBOT — a large fraud network that cloned the names and interfaces of legitimate services including Bitget, OKX, Binance, Apple, and Disney, operating as fake Telegram mini-apps. The pattern was an advance-fee trap: show fake balances, demand a deposit to "unlock" withdrawals, take the deposit. Several fake apps also distributed Android malware.

FEMITBOT highlighted a risk that is unique to the Telegram environment: there is no URL bar to inspect. The bot name and mini-app UI render identically to legitimate services, and everything inherits Telegram's trusted visual chrome. TON Connect is well-designed — it protects your private keys by architecture. What it cannot do is prevent you from willingly connecting to a malicious app. Understanding your full attack surface matters here: the same distribution channel that makes TMAs powerful is the one scammers exploit at scale.

Key Takeaways


Further Reading

The Telegram Wallet and USDT-on-TON: Self-Custody Inside a Chat App

The Telegram Wallet and USDT-on-TON: Self-Custody Inside a Chat App

Telegram's Wallet hides two services with opposite trust models. Learn which one you're really in, how native USDT on TON works, and how to self-custody it.

9 min read
TON's Risks: Platform Dependency and Validator Centralisation

TON's Risks: Platform Dependency and Validator Centralisation

TON's code is open-source and its validator set is growing — but its economy orbits one private company. How to price that risk before you self-custody.

10 min read
The setApprovalForAll Debt: Auditing and Revoking NFT Approvals

The setApprovalForAll Debt: Auditing and Revoking NFT Approvals

Every marketplace listing silently grants unlimited transfer authority over entire collections. Learn how to audit and revoke NFT approvals before an attacker uses them against you.

9 min read

Join Our Newsletter

Get a friendly update from us once a month. No spam, just the latest from Zelcore.

Join Our Newsletter
    Telegram Mini Apps TON: Notcoin, Stars & Safety | Zelcore