The latest in TEE drama: I’ve known about WireTap for a while; paired with Battering RAM, it reinforces a point many of us have lived with for years: TEEs were a breakthrough, but can no longer serve as a single trust anchor.
Quick context on where I’m coming from. I was the first to bring encrypted computation into blockchains: MPC with the Enigma whitepaper (2015), then TEEs with
@SecretNetwork (2020), and today FHE with
@fhenix. Each was right at the time; each has a place going forward. But only FHE can credibly be considered the end-game.
Why FHE? Because it’s the only cryptographic solution that’s simple to build on. Pure MPC is a Rube Goldberg machine — communication-bound and fundamentally limited. I wrote both my Master’s and PhD dissertation on MPC. If anyone has sunk costs in MPC, it’s me. And yet I’ll say it: it can’t take us further.
On the flipside, TEEs struggle under an expanding physical and micro-architectural attack surface. Still, projects employing TEEs like
@SecretNetwork are the only real test cases we have for privacy at scale. Credit to them for building in public, patching, and reinforcing what will remain a key ingredient in privacy tech. It just can’t be the only (or main) line of defense. That must come from cryptography.
So are TEEs dead? No. That’s a lazy take. TEEs still deliver solid defense-in-depth and cheap privacy in high-trust environments. And for huge LLMs that need GPUs and low latency, GPU-TEEs may remain a pragmatic bridge (see
@SecretNetwork AI Cloud).
With that said, all the anti-TEE privacy projects celebrating this “victory” should be more humble. How many of you are actually in production? That includes Fhenix, which I’m building right now. We all have a long way to go — and most of the posts I’ve seen from MPC/FHE/ZK projects are being disingenuous about their own privacy pitfalls.
Where we’re failing, as a community, is vocabulary. We need clear privacy levels — something as legible as
@l2beat’s rollup stages, but for privacy: what’s protected, against which adversary, with which residual risks. I’m drafting a framework; if you want to pressure-test it or contribute, DM me.
The takeaway: treat TEEs as a component, not the foundation. Build toward FHE-first systems with MPC-hardened keying — and be explicit about the privacy level you’re actually delivering. That’s how we make programmable privacy for chains real.