iExec, a company known for building confidential computing infrastructure for Web3, has integrated dstack to strengthen the security of its Nox protocol. Dstack is developed by Phala Network and offers trusted execution environment (TEE) technology. This allows applications to prove they are running in a secure and verified environment.
The Nox protocol is designed for DeFi and real-world asset (RWA) applications that handle sensitive financial information. Instead of exposing data on a public blockchain, smart contracts use encrypted handles. The actual calculations happen off-chain, inside protected execution environments.
How dstack Strengthens Nox’s Security
To support this setup, iExec deploys the Nox runner alongside dstack’s quote service inside a confidential virtual machine. When the system starts up, dstack measures the environment and generates hardware-backed attestation data based on Intel TDX. This evidence lets the protocol verify that the expected software is running before any confidential data, cryptographic keys, or computation results are trusted.
It is important to note that the attestation process can also be linked to a specific request. It can include information like a deployment ID, workload version, or transaction hash. This adds an extra layer of verification.
What Happens After Verification?
Once the verification is successful, Nox performs the confidential calculations. It temporarily decrypts data only in memory, processes it, then encrypts the results again. Finally, it sends the encrypted outputs back to the blockchain. This approach ensures sensitive data never stays exposed. It only exists in plain text inside the secure environment for the brief moment it is being processed.
The integration of dstack is a technical move that, I think, could make Nox more appealing to institutions or developers who are cautious about data privacy in DeFi. It is not a flashy announcement, but it addresses a real pain point: how to handle sensitive financial data without fully trusting the public chain or the application operator.
For now, iExec is focusing on making sure that the actual execution environment is trustworthy. By tapping into hardware-level attestation, they can provide stronger guarantees than software-only solutions. This might not excite retail traders, but for anyone building RWA or institutional-grade DeFi products, it is a meaningful step forward.
