TEE & Verifiable Compute: The Complete Guide for 2026

Flashbots' TEE-based block builder running inside Intel SGX enclaves. Sirrah handles transaction ordering and MEV optimization inside encrypted enclaves where builders cannot see the full orderbook, preventing MEV extraction. This is critical infrastructure for Ethereum validators trying to achieve MEV-neutral block building.

How It Works: Transactions enter Sirrah encrypted. The enclave orders them optimally, builds a block, and outputs the result—all without exposing transaction details to the builder or other observers. Remote attestation proves to validators that the enclave is running authentic, unmodified code.

2026 Status: Operating on mainnet with multiple Ethereum validators. Adoption growing as MEV-aware infrastructure becomes standard.

The largest TEE-based AI compute network. Phala migrated from its own blockchain to operating as an Ethereum L2 (on Arbitrum), processing confidential AI inference. In 2025-2026, Phala processed 3.73 billion LLM tokens while keeping model inputs and outputs encrypted.

Key Innovation: Attestation-based proof. Users can verify that their AI requests were processed in genuine SGX enclaves, proving confidentiality without blockchain overhead. This is essential for private enterprise AI.

Scale: Operating at thousands of transactions per second for inference, with encrypted model weights and user data. Major enterprise customers (confidential) using Phala for private ML.

A confidential computing platform that doesn't rely solely on TEEs. This is crucial. Oasis combines TEE execution with ZKP verification and cryptographic techniques so that even if TEE hardware is compromised, the system remains secure.

Architecture: TEEs (AMD SEV-SNP) handle execution, while ZKPs verify computation independently. If an SGX vulnerability emerges, Oasis can still provide privacy guarantees through its ZKP layer. This defense-in-depth approach became critical after Battering RAM and Wiretap attacks in 2025.

Use Cases: Confidential DeFi (private lending, encrypted governance), AI inference, and healthcare data processing where regulatory compliance demands both privacy and verifiability.

The first public blockchain with smart contract privacy built-in. Secret Network's validators run code inside Intel SGX enclaves, keeping contract state and user data encrypted from the network.

How It Works: Smart contracts compile to Enclave code (Rust running in SGX). All inputs and outputs are encrypted. Validators cannot see transaction details. Contract developers can implement private governance, encrypted lending, and blind auctions natively.

Impact of 2025 Attacks: Battering RAM and Wiretap attacks affected Secret Network's threat model. The network is implementing additional cryptographic layers and exploring migration to more resilient TEE technologies (AMD SEV or ARM).

Building TEE coprocessors that any blockchain can integrate. Marlin provides infrastructure for off-chain private computation that feeds results back to chains via attestation.

Value Proposition: Chains don't need native TEE support. Marlin's coprocessors handle encrypted execution, and attestation proves results to the chain. This makes TEE privacy accessible to any L1 or L2.

2026 Growth: Expanding to Ethereum, Solana, and other chains as a middleware privacy layer.

Decentralized storage network using TEEs to provide encrypted file storage. Users upload files encrypted, and Crust nodes store them in SGX enclaves, proving storage via attestation without ever decrypting user data.

Impacted by 2025 Attacks: Like Secret Network, Crust faces questions about TEE resilience after Battering RAM and Wiretap. Actively exploring mitigation strategies and hardware diversification.

Is my laptop's TPM chip a TEE?

No. TPM (Trusted Platform Module) is a security chip that stores cryptographic keys and performs limited operations. It's not a full TEE. A real TEE (Intel SGX, AMD SEV, ARM TrustZone) runs arbitrary code in isolation. TPMs are useful for hardware security but cannot run smart contracts or complex computation.

Why haven't more blockchains adopted TEEs if they're so fast?

TEEs require trusting hardware vendors, which is philosophically at odds with blockchain decentralization. Also, 2025's Battering RAM and Wiretap attacks exposed real vulnerabilities. Projects are cautious about betting the entire security model on TEEs alone. This is why multi-layered approaches (TEE + ZKP) are preferred. True decentralization remains the ideal, even if it's slower.

Can governments force backdoors into Intel/AMD TEEs?

Potentially, though it's unlikely to be publicly revealed. Intel and AMD are US companies subject to government requests. Theoretically, national security agencies could demand TEE backdoors. This existential threat cannot be disproven and is why decentralized systems should never rely solely on TEEs. The assumption that hardware is trustworthy is just an assumption.

Is Phala Network's 3.73B LLM token processing secure?

Yes, in practice. The enclave proofs that computation happened inside genuine SGX hardware. However, with Battering RAM and Wiretap attacks known in 2025, there's theoretical risk that access patterns could leak information. Phala has acknowledged this and is implementing mitigations. The practical security is high, but perfect security is impossible. Users should assume some research-grade attack might compromise TEEs in the future.

How does Flashbots Sirrah prevent MEV?

Sirrah runs inside SGX enclaves. Transactions enter encrypted, the enclave orders them (maximizing MEV while being fair to users), and outputs a block. The builder cannot see individual transactions, only the final block. This prevents sandwich attacks and front-running. Validators attest to the enclave's authenticity. It's not perfect (sophisticated attackers might bypass it), but it's significantly better than plaintext ordering.

Should I trust Secret Network or Oasis more?

Oasis is more robust post-2025 attacks. Secret Network relies more heavily on SGX, which is now known to be vulnerable. Oasis combines TEEs with ZKP verification, so even if the TEE is compromised, cryptographic verification still holds. For highest security guarantees, choose Oasis. For convenience and simplicity, Secret Network is fine—just assume that future TEE exploits could emerge and plan accordingly.