Verifiable AI on a sovereign Cosmos L1·open source·fixed-supply token
On-chain verifiable · Open source · Fixed-supply token

AI you can verify,
not just trust.

Every answer is economically verifiable on-chain — a cheating miner is slashed, automatically. Private inference on consumer GPUs, paid in a fixed-supply token. A sovereign Cosmos SDK L1.

Open models on community GPUs — with a guarantee no closed API offers: every answer is verifiable on-chain.
0
Fixed $DNDR supply — zero mint, ever
~1s
Block time on CometBFT BFT
~10%
Of jobs re-audited on-chain — wrong answers slashed
0%
Fee burn → soft, deliberate deflation
The idea

A blockchain whose work is worth doing.

Proof-of-Work burns gigawatts on meaningless hashes. Dendra secures a market for what people actually want from GPUs today: AI inference — done privately, verified statistically, and paid for under an honest-stake majority.

Useful work, not waste

Miners are GPU owners running a real LLM. The work the chain rewards is verified inference for paying clients — not hashing. A consumer GPU is enough to take part.

Confidential by design

Prompts are end-to-end encrypted client↔miner (X25519 + AES-256-GCM). The relay and the chain only ever see hashes, embeddings and metadata — never your content.

Verified, not trusted

Most jobs settle instantly. A random sample is re-checked by a fresh, VRF-selected committee that judges the answer with an LLM — and a wrong answer is slashed hard. Cheating is made loss-making, not merely discouraged.

How it works

From prompt to paid — one round trip.

Any OpenAI-compatible client points at the Dendra gateway and uses the network without even knowing it. The chain never sees your content.

A request's journey

From your question to the answer — without the chain ever seeing your content.
1 You your prompt 2 Gateway legal filter + escrow 3 GPU miner infers privately 4 Chain payment + proof promptencryptedproof decrypted answer, back to you Random audit ~1 job in 10 re-checked
→ The gateway blocks illegal content and escrows the fee. The prompt travels encrypted; the chain stores only hashes and metadata.
01

Encrypted request

The client encrypts the prompt to the miner's key and sends it via the OpenAI-compatible gateway. The chain sees only a fee and a job id.

02

Escrow & assignment

The fee is escrowed in a module account. An unpredictable on-chain VRF beacon (anti-grinding) assigns the job — the requester can't pick its friends.

03

Confidential inference

The assigned miner runs the model on its GPU and is paid optimistically. Plaintext exists only in RAM during compute, behind sealed-memory and egress guards.

04

Random audit & slashing

A random share of jobs is re-checked by a fresh, VRF-selected committee that judges the answer with an LLM. A wrong — or silent — miner is slashed hard.

The Proof

Don't trust us. Verify.

A slash is invisible inside a normal chat — so we put it on the table. The explorer below reads the chain and lists audited jobs and real slashes, live. It's the one thing no closed model can show you.

Why cheating doesn't pay SCHEMATIC

Pay fast, verify by sampling, punish hard. Security is a calculation, not a promise.
Miner paid optimistically Random draw ~1 job in 10 90% → final ✓ not audited, settled Committee of fresh judges LLM-as-judge: is it correct? Honest: paid ✓ vindicated Cheater stake slashed −80% Silence = admission: ignoring an audit counts as cheating.
→ Illustrative. The live feed below shows only real, on-chain events.
reading the chain…
jobs served
audited
cheaters slashed
honest vindicated
jobminerverdictstake before → afterblock
Live on-chain audit feed

Every record here is a real, replayable on-chain event, read live from the network — audited jobs and the slashes that back every answer.

Every record here is independently replayable: pull the chain, re-run the audit, get the same verdict.

Confidentiality

Confidential by design.

Standard default

End-to-end encrypted client↔miner (X25519 ECDH + AES-256-GCM) — nothing in clear at the relay or on-chain. On consumer GPUs the miner decrypts in RAM to compute, guarded by sealed memory, egress and disk guards, software attestation and slashing.

Datacenter tier opt-in

On datacenter GPUs (NVIDIA Hopper / Blackwell), inference can run inside a hardware secure enclave for cryptographic confidentiality — an opt-in tier for regulated workloads.

For business

Verifiable AI for teams that can't just trust a black box.

Regulated and high-stakes workflows can't take a vendor's word that the model wasn't swapped, throttled, or quietly degraded. Dendra makes every inference auditable and economically backed on-chain — proof, not a promise.

Auditable by design

Every answer carries an on-chain trail — which model, which node, audited or not. A record you can hand to compliance, not a screenshot you have to believe.

Privacy for regulated data

Prompts are end-to-end encrypted by default; an opt-in datacenter tier runs inference inside a hardware secure enclave for workloads that demand it.

Quality with skin in the game

Providers stake real value; wrong or lazy work is slashed on-chain, automatically. Correctness enforced by economics — not an SLA you hope holds.

Building something that needs provable AI? Let's talk.

We're onboarding a small group of early design partners while the network hardens. Enterprise SLAs and an external audit ship with the production network — and we'll be straight with you about what's ready today.

Tokenomics — v5

A fixed-supply utility token. No mint, ever.

$DNDR is what you pay for inference and what miners earn. A hard 10M cap, with every reward released from a pre-allocated Reserve — never minted into existence.

10M
$DNDR cap
Community35% · 3,500,000
Reserve33% · 3,300,000
Treasury27% · 2,700,000
Team5% · 500,000
  • EMITDecreasing emission — 22%/yr of the remaining Reserve is released (never minted), split across work (per-job, demand-gated 1.5×), availability (random 4h slashable challenge) and security.
  • BURNSoft deflation — 5% of fees are burned, so supply trends toward ~8.1M over 10 years. Deliberately not aggressive: $DNDR is a payment token, meant to stay liquid.
  • FEEPay-per-token — fee = base + per-token × (in + out). The protocol takes 15% of a job; the rest pays miners. Miner rewards are funded by real, paid demand — keeping the fixed supply sound.
  • ANTIAnti-Sybil — the work subsidy is bounded by real, non-recoverable demand, so you can't pay yourself into emission. Miners post bonded stake; slashing moves real coins.

Base unit udndr · 1 DNDR = 1,000,000 udndr. A 4,000-run Monte-Carlo of the model keeps supply ≤ 10M in 100% of runs.

What's built

Built, running, and verifiable.

A real network with the full inference economy on-chain — every layer below is live and open source.

LIVE Working today

  • The full inference round trip runs end to end: encrypted prompt → gateway → escrow → VRF assignment → GPU inference → on-chain settlement.
  • Hard slashing, proven live on-chain: a cheating miner loses up to ~99% of its stake automatically, a silent one ~80% — with zero honest miners penalized.
  • A real on-chain economy in real coins: Reserve emission, miner bonds & slashing, fee burn, and work / availability reward pools.
  • End-to-end encryption, an anti-grinding VRF beacon, replay-safe settlement, least-privilege permissions — no module can mint.
  • Multi-validator BFT consensus with decentralized VRF randomness (ABCI++ vote-extensions, block-hash-bound) over a real network.

NEXT Shipping next

  • Optimistic verification with an LLM-as-judge — sampled audits that fund a high-quality judge while cutting cost.
  • Provisional payment, clawback, and permissionless appeal.
  • A public, multi-operator network anyone can join.
  • A datacenter hardware-isolated privacy tier for regulated workloads.
Roadmap

Build first. Show the proof. Then grow.

Phase 0 · done

Protocol & security ✓ proven live

On-chain escrow, VRF assignment, optimistic verification with an LLM judge, replay-safe settlement, real-coin emission, bonds, slashing and burn — with hard slashing proven live on-chain, zero honest miners penalized.

Phase 1 · in progress

Public app & testnet ● now

Illegal-content filtering at the gateway, a replayable on-chain slash activation that powers “The Proof”, a public incentivized testnet, an OpenAI-compatible chat app, and monetization with buy & burn on real revenue.

Phase 2

Community GPUs & scale

One-click miners for community GPU owners, throughput measured on a real multi-validator network, and a broad, cross-hardware operator set.

Phase 3

Verifiable inference for business

A hardware-isolated privacy tier and verifiable, slashable inference for demanding use cases. Image generation is on the roadmap, behind a verification design built to the same standard.

Later

Mainnet

The full network, secured by everything above.

Run a node. Read the code. Break it.

Dendra is open source. Spin up a node on a consumer GPU, send a real prompt through the network, and watch it settle on-chain. You're paid from real job fees — honest work is rewarded, lazy or wrong work is slashed.

# spin up a miner on a consumer GPU · code & docs: dendranetwork.com
curl -fsSL https://dendranetwork.com/miner | sh
FAQ

Straight answers.

Is there a token sale, ICO, or presale?
No. There is no sale and no fundraising. $DNDR is a utility token for paying for inference inside the protocol — it is not an investment product and nothing here is financial advice.
Is the chat free?
A subsidized free tier covers usage while the network grows, and miner rewards are funded by real, paid demand — which keeps the fixed supply sound. Open the chat →
Can I run a miner on my gaming GPU?
Yes — that's the point. Mode A targets consumer hardware (e.g. an RTX-class GPU) running a local ~8B LLM through Ollama. A one-command launcher brings up a miner.
Is my prompt actually private?
In the default mode your prompt is end-to-end encrypted and never appears in clear at the relay or on-chain. The miner decrypts it in memory to run the model, guarded by sealed memory, egress guards, attestation and slashing. For hardware-isolated confidentiality, an opt-in datacenter tier is available.
How do you know a miner's answer is correct?
Most jobs settle instantly (optimistic). A random share is then re-checked by a fresh, VRF-selected committee whose members judge the answer with an LLM — not a brittle similarity score. A wrong answer is slashed hard (−80% of stake), and a miner that simply stays silent can't escape either (anti-evasion). Cheating is engineered to be loss-making.
How is supply fixed if there are rewards?
Rewards are released from a pre-allocated Reserve (33% of genesis), decreasing at 22%/yr of what remains — the chain never mints new tokens. Custom modules hold no mint permission, and the standard mint module is neutralised by zero inflation. A 5% fee burn makes it mildly deflationary.