Jun 2026
We tried to break our own network
"We designed it to be safe" is what every project says right before it gets drained. So we went looking for the drain.
Verse has no ledger. No chain, no global VM, no coin you're forced to hold. Nice pitch. But a pitch isn't a proof, so we got paranoid and audited the thing properly.
We pointed about ninety adversarial agents at our own codebase. Design a better version, attack it, verify the attack, repeat. Every layer got the treatment: crypto, compute, storage, networking, the money, naming. Hundreds of passes against 87 tests that already had to stay green. Here's the honest readout.
What held
Mostly everything. But "held" meant different things in different places.
Determinism is the whole trick. We trust compute by re-running it, which only works if a program spits out the same bytes on every machine. WebAssembly guarantees that at the spec level. No fused multiply-add, no 80-bit float weirdness, NaNs canonicalized. We proved it instead of assuming it.
The heat field is real physics, not vibes. One number per file decides what gets cached and copied. We worried it was hand-wavy. It isn't. The update rule is a textbook stable system that can't oscillate or blow up. We have the proof now.
The bond math checks out. Cheating on a job is negative expected value as long as your stake beats your gain, and one caught lie burns your reputation forever. Honest is the dominant strategy, on paper and in the code.
The crypto is the strongest part. Signatures, hashes, the blind-signed money, the streaming proofs. Standard, sound, done.
What broke
This is the part that actually matters.
Our storage proof was lying a little. The comment claimed it proved your data was replicated. It doesn't. It proves one node still has a copy. Two fake nodes sharing one disk both pass. We fixed the claim and pointed replication at the thing that actually delivers it.
The mint key was forgeable. Seed it from a short string like "mint" and anyone who guesses the string can print money. Fine for a demo, fatal for real. Now it warns you loudly before you do something dumb.
A whole code path did nothing. An old inference route, firing requests that no handler answered. Dead weight pretending to be a feature. It's gone now — inference runs as an ordinary capsule instead.
One claim was half true. We said price follows heat. The live pricing actually runs on a separate controller. So we rewrote the docs to describe what the code does, not what we meant it to do.
The line
Here's the honest version. Part of Verse is math. Part of it is money. The math part is proven: integrity, identity, conservation. The money part is economic: durability and honesty, held up by stake and the fear of getting caught.
We drew that line exactly where the theorem puts it, and not an inch further. The entire point of auditing yourself this hard is to know which side of the line every promise sits on. Most teams never check. That's how you ship a lie you believed.
Verse is built. 87 tests green when this exercise ran — 137 today — clippy clean. We tried our best to break it before you do.