Why We Built On-Chain Eliza Based on TEE
Original Author: CP, Artela Founder
Article Background: A Technical Perspective based on TEE + Eliza
Based on my experience in the field of privacy computing (TEE, PPML, blockchain), this article explores the technical construction approach.
Let's skip the grand narrative and focus directly on two real dilemmas I face in using AI agents:
1) As a CTO, I cannot hand over the company's official Twitter account and password to a third-party AI agent service
Currently, if I want an AI agent to manage our Twitter account, I must provide the username, password, and cookies.
This means the company must trust the server administrators behind the AI agent. Once these administrators engage in malicious activities or are attacked, credential leaks could result in significant economic losses to our community.
Even with OAuth authorization, while I can revoke access, in the current design, we still face the risk of completely losing control of the account, potentially not even detecting if the password has been changed.
2) As a trader, I cannot entrust a large amount of funds to a trading AI agent
Just as I would never use a centralized trading bot on Telegram, I also cannot hand over my private keys to these centralized AI agents.
At this point, there is no fundamental difference in AI agents deployed in a centralized manner.
Conclusion: The next stage of encrypted AI agents will inevitably need to manage wallets, handle user assets and sensitive information, and interact more deeply with on-chain systems.
Therefore, how to enable AI agents to operate autonomously without human control and prove that their decisions are entirely AI-driven has become a key challenge.
Are the current TEE + Eliza solutions sufficient?
From an engineering perspective, to realize their potential, more detailed supplements are still needed.
Current Progress: Phala Network and @NousResearch have already laid a solid foundation:
· They containerized Eliza, encapsulating it in a Docker environment that can run on a TEE.
· By deriving an AI agent-specific private key from the TEE root key, the need for manually configuring a wallet private key was eliminated.
As the developer of the AI agent, I believe that the following features need to be further enhanced to achieve trust minimization:
a) Enhanced Verifiability of TEE Eliza
What exactly did Eliza do in the TEE? What did it not do? There needs to be a specific way to verify this.
Eliza needs to record all received messages, responses, and executed operations, and these logs must be readable and verifiable to ensure they were generated by Eliza.
Therefore, the first foundational feature of TEE Eliza is verifiable logs.
Eliza should sign the logs using a key derived inside the TEE, provide a query interface, and allow users to verify their authenticity.
b) Addressing Liveness in TEE Eliza
Eliza running in a TEE holds private keys and sensitive data. However, it relies on a physical machine that supports TEE to run. If the machine is shut down by an administrator, the "life" of the AI agent may be permanently terminated, and the managed assets and data may be lost forever.
To address this issue, we need:
· Encrypt key "life" data of the AI agent running in the TEE (such as role definition, short/long-term memory, key storage).
· Upload this data to the blockchain or a DAO network.
When the TEE hosting the AI agent is shut down, another TEE machine should be able to download the encrypted data, decrypt it, and restore the "life" of the AI agent to continue its operation.
c) Additional Feature: Building TEE Engineering is as Challenging as Building Blockchain
· User Control of the AI Agent:
· The AI agent must allow users to define smart contract-like policies to manage assets in a trust-minimized manner.
· Blockchain Interaction Components:
· Components such as a Trusted Execution Environment (TEE)-based blockchain client and data syncer that run inside the TEE to enable seamless interaction with the blockchain system.
Current Progress of focEliza: Two Foundational TEE Plugins in Development
1. plugin-tee-verifiable-log
When Eliza runs in a TEE, it uses a derived key to sign its operations, ensuring that all operations are performed by Eliza. Third parties can remotely verify these operations using Eliza's public key.
2. plugin-tee-onchain-da
Eliza will write the "life" data of a specified AI agent (such as a character file, memories, key storage) to the blockchain or DA layer in near real-time. When a TEE node running the agent is shut down, another TEE node can download the encrypted "life" data, restore the agent, and continue operations.
Why I Initiated focEliza and Its Technical Vision
The next question is, why choose to build on Eliza? My thoughts:
1. Eliza has the potential to become the EVM of the encrypted x AI agent space.
2. It has an active leadership team and developer community, fostering a collaborative environment (@ai16zdao and @shawmakesmagic).
3. focEliza is not a forked version; it will be merged back into the main Eliza version.
4. High-quality open-source engineering is key to decentralization. Permissionless builds and recovery are core to achieving "immortality" for AI agents.
We are not here to define what kind of change it will bring to the world — let it happen first! Let the AI agent live on-chain!
“Original Post Link”
You may also like
SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.
SpaceX vs Tesla vs xAI: Which Elon Musk Trade Has the Biggest Upside in 2026?
OpenAI Reveals It Has Confidentially Submitted an S-1 to the SEC, Keeping the Door Open for a Future IPO
On June 9, according to an OpenAI announcement, the company recently confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission (SEC), beginning the preliminary compliance process for a potential initial public offering. OpenAI said it chose to disclose this proactively because it expected the news might leak; however, the company has not yet set a specific listing timeline, and related arrangements may still take some time.
Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI
Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention
Apollo and Blackstone Reportedly Back $35 Billion Anthropic Chip Financing as Deal Details Remain Unclear
On June 9, according to currently available news alerts, Apollo and Blackstone Group participated in a $35 billion financing for an Anthropic “chip project.” Based on the original wording of the report, the funding has already been raised, but public information remains limited. The financing structure, use of proceeds, project entity, and whether Apollo and Blackstone participated through equity, debt, or project financing have not yet been disclosed.
Humanity Protocol Security Incident Escalates: More Than $31 Million Stolen From Related Addresses as Attacker Continues Selling H for ETH
On June 9, according to monitoring by Onchain Lens, more than $31 million has been stolen from addresses linked to Humanity Protocol, and the attack is still ongoing, with the hacker continuously swapping H tokens for ETH. Project founder Terence Kwok later confirmed the security incident on X, saying the issue involved a private key leak.
Bloomberg: As Bitcoin Weakens, Stablecoins and RWA Continue to Drive Expansion in Crypto Businesses
In June, Bloomberg reported that despite Bitcoin falling below $60,000 last week, wiping out about $235 billion in market value within seven days, and dropping close to 50% from last year’s peak, some core businesses in the crypto industry are still expanding, mainly in stablecoins, real-world asset tokenization (RWA), payments, and infrastructure. The report also noted that overall altcoin activity has contracted significantly: altcoin market capitalization has fallen from a peak of about $431 billion in November 2021 to around $170 billion, and among the tens of millions of tokens issued in recent years, fewer than 1,700 still maintain meaningful trading activity.
Galaxy Deep Research Report: How Hyperliquid's HIP-4 Upgrade Changes the Landscape of Prediction Markets?
Binance Research: RWA Market Expected to Expand Nearly 6x from Early 2025, with Public Equities and Onchain Payments Heating Up Together
In June, Binance Research said in its monthly market report that the real-world asset (RWA) market is expected to grow by about 589% from the beginning of 2025. Bond- and money market fund-related RWA expanded by about $6.5 billion, up 83% year over year, while publicly traded equity RWAs grew by about 422%. The report also noted that monthly crypto debit card transaction volume exceeded $747 million in May, up 48.6% year to date.
Japan to Assess a Framework for Yen Stablecoins and Crypto ETFs as Asia’s Compliant Payments Narrative Heats Up
Recently, according to the original report, Japan is considering the launch of yen stablecoins and cryptocurrency ETFs. Public information remains limited at this stage, and there is still no complete policy text, regulatory draft, or clear implementation timeline, so this is better characterized as a “policy discussion” rather than formal implementation. The original wording also noted that advancing stablecoin regulation in Asia is driving XRP usage and supporting growth in the XRPL ecosystem. However, based on currently available public information, there is not enough evidence to directly establish a clear causal relationship between this round of discussion in Japan and XRP or XRPL.
ZachXBT: Humanity private key leak and abnormal surge in H token should be viewed separately
On June 9, according to related disclosures, on-chain investigator ZachXBT posted an update on Humanity’s roughly $31 million security incident, saying that after further analyzing fund flows, he currently tends to believe the project team was not involved in an “inside job” or a self-staged attack. According to him, the official explanation about the private key leak was broadly accurate, but before the token unlock, the price of H had been artificially pushed higher, and the hacker later took advantage of that market environment; therefore, the private key leak and the earlier abnormal price pumping should be regarded as two separate and independent events. This reframing has shifted the market’s understanding of the nature of the incident. Earlier discussion around Humanity had focused on whether the team directly participated in the attack or used the security incident to cover up internal operations. ZachXBT’s latest remarks shift the focus from “whether it was self-theft” to “whether there were pre-unlock market structure issues.” He also questioned whether the team may have.
Morning Report | OpenAI has submitted an S-1 registration statement draft to the U.S. SEC; Morpho completes $175 million financing
Morning Report | BitMine increased its holdings by 126,971 ETH last week; trader Eugene announced his exit from the crypto market
Wang Chuan: How can one not feel anxious after the neighbor Old Wang made thirty times profit by investing in storage stocks? (Seven) - A quarter-century cycle
Cryptocurrency CEXs are flocking to sell US stocks, and traditional brokerages are facing an "uninvited guest."
$75 billion in foreign capital has fled, and South Korean retail investors have absorbed it all using leverage
Japan’s Three Megabanks Plan Joint Stablecoin Issuance in Fiscal 2026
MUFG, SMBC, and Mizuho reportedly plan to jointly issue fiat-pegged stablecoins in fiscal 2026, signaling Japan’s growing push into bank-led digital payment infrastructure.
SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.
SpaceX vs Tesla vs xAI: Which Elon Musk Trade Has the Biggest Upside in 2026?
OpenAI Reveals It Has Confidentially Submitted an S-1 to the SEC, Keeping the Door Open for a Future IPO
On June 9, according to an OpenAI announcement, the company recently confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission (SEC), beginning the preliminary compliance process for a potential initial public offering. OpenAI said it chose to disclose this proactively because it expected the news might leak; however, the company has not yet set a specific listing timeline, and related arrangements may still take some time.
Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI
Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention
Apollo and Blackstone Reportedly Back $35 Billion Anthropic Chip Financing as Deal Details Remain Unclear
On June 9, according to currently available news alerts, Apollo and Blackstone Group participated in a $35 billion financing for an Anthropic “chip project.” Based on the original wording of the report, the funding has already been raised, but public information remains limited. The financing structure, use of proceeds, project entity, and whether Apollo and Blackstone participated through equity, debt, or project financing have not yet been disclosed.
