How it works
One question, one GPU, one payment.
DarkTensor is a privacy-first compute protocol. Confidential inference runs through Bittensor’s decentralized intelligence and sealed hardware, and the money settles on Robinhood Chain. Bittensor is used for the payment path. The words never are.
You buy credits by sending USDG. Lenders are paid in USDG for the tokens their GPUs write, and they keep 70%. A personal Chutes key works too, and that request leaves from your browser.
Open models run on subnet 64, where miners work inside sealed hardware and cannot read your words. Or on a GPU someone lends, chosen by wallet. Or on your own, through WebGPU. You can also register a GPU to lend, and send sealed messages between wallets.
01 · You ask
Type in the console. In private mode the question stays on your device and runs through WebGPU.
02 · A GPU answers
A Bittensor miner on subnet 64, inside sealed hardware. A lender you pick by wallet. Or your own GPU.
03 · The chain pays
Payment per token, in USDG, settles on Robinhood Chain. The lender keeps 70%. Prompts stay off the chain.
- Subnet 64
- —
- Robinhood Chain
- —
- Sealed models
- —
Reading Finney
USDG · chain 4663
Saved catalog
DarkTensor buys credits with USDG and pays lenders in USDG for the tokens their GPUs write. You can also bring your own Chutes key. The words of a question are not the thing that gets written on-chain.
Questions
We give a FAQ.
The short version of how a question, a GPU, and a USDG payment fit together.
What is DarkTensor?+
A privacy-first compute protocol. You ask a model, a GPU writes the reply, and the payment settles in USDG on Robinhood Chain. Bittensor is how the network prices and pays that work. The question itself is not a chain transaction.
Do my prompts go on-chain?+
No. Only the payments do. You buy credits by sending USDG, and lenders are paid in USDG for the tokens their GPUs write. The words of the prompt and the reply stay off Robinhood Chain and off Bittensor.
Where does the answer come from?+
One of three places. A Bittensor miner on subnet 64, inside sealed hardware, so the miner cannot read your words. A GPU someone lends, picked by wallet address. Or your own GPU, through WebGPU in this browser.
What does sealed hardware mean?+
Subnet 64 miners run models that the live catalog marks as confidential compute. The machine that produces the tokens is not supposed to be able to read them. DarkTensor does not run its own attestation check in the browser. The catalog flag is what the console is showing you.
How do credits work?+
One credit is one USDG base unit, six decimals. You send USDG to the treasury on Robinhood Chain (chain id 4663). The server checks the transfer, then the console can spend that balance per token. Gas on the chain is ETH, separate from the USDG you spend.
What does the lender keep?+
70% of the USDG charged for the tokens their GPU writes. That share is planned in the protocol and recorded in the ledger when a credit-funded answer is settled. You can also pay a lender directly in USDG, wallet to wallet.
Can I skip credits and use a Chutes key?+
Yes. Paste your own key in the console. It stays in this browser session and the request goes from your browser to Chutes. The prompt does not pass through the DarkTensor server. A server-side key is only needed when the console spends credits on your behalf.
What does private mode do?+
It forces the question onto this device. The model is SmolLM2, loaded in the browser, with WebGPU and a WASM fallback. Nothing from that turn is sent to a miner, a lender, or the chain.
How do sealed messages work?+
You publish a public key after a wallet signature. A message is encrypted in the browser to the recipient’s key, and the server stores only the ciphertext. The recipient opens it locally. If they have not published a key yet, the send is refused.
What does Mine actually do?+
It reads subnet 64 on Finney — neuron count, tempo, and a hotkey lookup — and lets you register a lender wallet. It does not mine TAO inside the browser. Lending here means your GPU’s wallet can be chosen, and paid, for tokens it writes.