VEIL VPN
Verifiable Encrypted Internet Layer, is the pay as you go VPN protocol that proves no logs are kept.
VEIL VPN
Created At
Winner of
World - Best use of World ID 4.0 1st place
Arc - Best Agentic Economy with Nanopayments 1st place
ENS - Most Creative Use of ENS 1st place
Project Description
Problem Statement:
Every VPN claims that they don't take logs but, no VPN proves it. The server side is a black box. Even open source VPNs cannot prove they are actually running the published code. This makes the entire privacy ecosystem fragile, because every privacy tool built on top of a logging tunnel.
Solution:
VEIL solves this with TEE attestation through Oasis ROFL. Our VPN code is fully open source and runs inside a hardware sealed TEE. The TEE measures the exact code in the enclave, signs it, and publishes the attestation on chain. One line changes, the attestation breaks. Open source lets you read the code. Attestation proves it's running. The protocol is permissionless. Any operator can deploy a node, pass attestation, and register an ENS subdomain under veil.eth. Only attested nodes get listed. With World id verification, we have human only serves without rate limits. Payments through Circle Nanopayments, pay per use, no subscription.
How it's Made
Trustless VPN with TEE: We forked WireGuard and extended it to be crypto native. The server runs in Rust inside Oasis ROFL's TEE, holding zero state, no logs, no IPs, nothing on disk. The TEE produces a deterministic hash of the running code and ROFL publishes the attestation on chain through a Solidity contract on Sapphire. One line changes, the hash breaks. Permissionless Discovery with ENS: Attested VPN nodes register under veil.eth with endpoint, WireGuard public key, and payment address packed into ENS text records. The client resolves the subdomain and connects. No centralized server list, fully on chain discovery. Pay Per Use with Circle Nanopayments: Users sign off chain payment authorizations via x402, no transaction per session, no subscription, no account. The VPN server verifies the signature before opening the tunnel. Zero friction, zero identity. Human Only Servers with World ID: Dedicated IPs where every connected user is verified as human through zero knowledge proof of personhood. Services whitelist these IPs, eliminating captchas and rate limits.
