DeVpn Whitepaper

1. Executive Summary

DeVpn is the world's first truly decentralized VPN with a working iOS app, a Windows desktop client, plug-and-play hardware nodes, and a token rewards system built on Solana. Unlike every other VPN on the market, DeVpn users connect directly to community-run provider nodes with zero intermediaries touching their traffic.

Traditional VPNs funnel your encrypted traffic through corporate-owned servers, requiring you to trust the company won't log, inspect, or sell your data. DeVpn eliminates that trust requirement entirely: the control plane coordinates sessions but never touches, relays, or inspects user traffic. Privacy is guaranteed by architecture, not by policy.

Community members who run provider nodes earn DVPN tokens for sharing bandwidth. Staking DVPN tokens unlocks VPN discounts up to 100% (free), governance voting power, and priority server access. The result is a self-sustaining ecosystem where providers are rewarded, users save money, and the community governs the network's future.

2. The Problem

The global VPN market is projected to reach $75 billion by 2027, yet every major provider shares the same fundamental flaw: centralization.

• Single point of failure. NordVPN, ExpressVPN, Surfshark — all operate corporate-owned server fleets. A subpoena, hack, or policy change affects every user simultaneously.
• "No logs" is unverifiable. Users must trust the company's word. Multiple "no-log" VPNs have been caught logging user data (IPVanish 2018, PureVPN 2017, HideMyAss 2011).
• Expensive. NordVPN charges $12.99/mo, ExpressVPN $12.95/mo, Surfshark $12.95/mo. Users pay premium prices for a commodity service.
• Corporate-owned infrastructure. Servers can be seized, monitored, or compromised without users' knowledge. Government requests are handled behind closed doors.
• No user governance. Users have zero say in pricing, server locations, features, or how their data is handled. The company decides everything.

Previous attempts at decentralized VPNs (Mysterium, Orchid, Sentinel) have fallen short: no iOS app, complex setup, minimal earnings for providers, and incomplete decentralization where relay servers still touch user traffic.

3. The Solution — Decentralized VPN

DeVpn solves these problems with a fundamentally different architecture:

• Direct connections. User traffic routes directly to provider nodes via WireGuard tunnels. No relay, no middleman, no corporate server between you and the internet.
• No-logs by architecture. The control plane (CP1) handles only coordination — registration, session matching, and rewards tracking. It literally cannot log your traffic because it never sees it.
• Community-owned infrastructure. Providers are independent node operators — individuals running nodes on Raspberry Pis, home servers, or cloud VMs. No single entity controls the network.
• Token-aligned incentives. Providers earn DVPN tokens proportional to bandwidth shared. More uptime and more bandwidth equals more tokens. Bad behavior gets slashed. Incentives are aligned.
• Community governance. Stakers vote on proposals — new server locations, feature priorities, bounty rewards, community events. Your stake is your voice.
• 77% cheaper. $3/month for unlimited VPN vs $12.99/month at NordVPN. Early adopters lock in $1/year for life.

4. Architecture

4.1 Network Topology

This is the core principle. Every VPN session is a direct WireGuard tunnel between the user's device and the provider node. The control plane exists solely to coordinate — matching users with providers, tracking sessions for rewards, and managing the token economy.

4.2 Control Plane (CP1)

The control plane is a FastAPI application running on a hardened Linux server behind Cloudflare DDoS protection.

• Responsibilities: User registration, provider registration, session coordination, heartbeat monitoring, reward calculation, staking, governance, and payments.
• NOT responsible for: Routing, relaying, forwarding, inspecting, or storing any user VPN traffic. Zero.
• Security: CORS restricted to devpn.org domains, all admin endpoints authenticated, rate limiting on all public endpoints (login: 10/min/IP, register: 5/min/IP), JWT tokens with 30-day expiry, Stripe webhook signature verification, PostgreSQL restricted to localhost.

4.3 Provider Nodes

Provider nodes are WireGuard servers operated by community members. They can run on:

• DeVpn Node Pro ($199) — Raspberry Pi 5 with 3.5" touchscreen dashboard, red aluminum case, branded power adapter. Plug and play: connect ethernet + power, it auto-registers, sets up UPnP port forwarding, and starts earning.
• DeVpn Node ($149) — Same as Pro without the touchscreen. Headless operation.
• DeVpn SD Card ($25) — Pre-flashed microSD for existing Raspberry Pi 4/5 owners.
• DIY (free) — Any Linux machine. One-liner install script from Provider Dashboard generates a personalized command with JWT baked in. Auto-registers AND auto-links to user's account — no claim code needed. Node appears on dashboard within 60 seconds.

All nodes use WireGuard (kernel-level, fastest VPN protocol), support UPnP auto port forwarding for zero-config deployment behind NAT routers, and send heartbeats every 30 seconds to prove uptime. Speed tests run on first boot and daily for accurate tier classification. Pre-flashed SD cards and hardware nodes are available at devpn.org/store.

Provider agent version v4.3.8 with OTA auto-update — all nodes update automatically without user intervention.

4.4 Session Flow

1. User requests a connection via the app (iOS, Android, Windows, or WireGuard client).
2. CP1 selects the best provider based on speed tier, location, staking priority, load, and connectivity status.
3. CP1 generates a WireGuard keypair for the session.
4. User receives configuration: provider IP, port, public key, DNS servers, and session ID.
5. User connects directly to the provider via WireGuard tunnel.
6. All traffic is encrypted end-to-end using ChaCha20-Poly1305.
7. Provider routes traffic to the internet.
8. Session bandwidth is tracked for reward calculation.
9. Sessions last 24 hours by default, extended by heartbeats. Smart reconnect handles failover.

4.5 Security Model

DeVpn's security is layered and hardened:

• WireGuard protocol: Noise protocol framework, ChaCha20 symmetric encryption, Poly1305 MAC, Curve25519 key exchange, BLAKE2s hashing. Perfect forward secrecy. Formally verified.
• Provider cannot read user traffic: All data inside the WireGuard tunnel is encrypted. The provider routes packets but cannot inspect content.
• CP1 cannot read user traffic: It never touches the data stream. Architecturally impossible to log.
• Agent token authentication: Every provider heartbeat requires a valid agent token to prevent node impersonation.
• Subscription validation: Session creation verifies active subscription before allowing connection.
• Comprehensive security audit: 7 critical and 6 high severity issues identified and fixed (March 2026). See our security blog posts for details.
• Security agent: Runs every 10 minutes — monitors login brute force, claim attempts, API anomalies, DB integrity, SSL cert expiry, disk space. Auto-restarts API if down.
• Health agent: Runs every 15 minutes — monitors API uptime, provider fleet health, reward pipeline, sessions, system resources. Auto-cleans stale providers and sessions.
• Login attempt tracking: IP logging on all login attempts. Claim code anti-brute-force: 3 failures in 15 min triggers rate limit.
• Email alert deduplication: Max 1 email per alert type per day (down from ~1,700 to max 14/day).

4.6 IP Detection & Privacy

• Multi-service fallback: IP detection uses 4 geo services (ip-api.com → ipapi.co → ipwhois.app → freeipapi.com) with 3 pure-IP fallbacks (ipify, icanhazip, ifconfig.me).
• IPv6 protection: All connections are IPv4 only. Agent v4.3.8 fully strips IPv6 addresses — _get_ipv4() rejects any IP containing ':'.
• Cloudflare integration: CF-Connecting-IP header forwarding for accurate real IP detection behind CDN.
• Server-side geo lookup: If provider sends IP without location data, server performs geo lookup automatically.

5. DVPN Token

DVPN is an SPL utility token on the Solana blockchain. Solana was chosen for its high throughput (65,000+ TPS), low transaction fees ($0.00025 average), and 400ms finality — ideal for daily reward distributions to thousands of providers.

5.1 Token Distribution

Total supply: 1,000,000,000 (1 billion) DVPN

5.2 Token Utility

• Provider rewards: Daily pool distribution + per-GB bonus for bandwidth routed.
• Staking: Lock DVPN to unlock VPN discounts (10% to 100% free), governance voting power (1x to 10x), priority server access, and 10% APY rewards.
• Governance: Stakers vote on proposals — new features, exit locations, bounty amounts, community events. Voting power scales with stake amount and tier multiplier.
• Bounty rewards: Contributors earn DVPN for bug reports, feature suggestions, tutorials, and translations.
• Future: VPN payments. Pay for VPN subscriptions directly in DVPN tokens at a discount.

6. Provider Rewards

6.1 Dual Earning Model

Providers earn DVPN tokens through two mechanisms:

1. Daily availability pool: 10,000 DVPN distributed daily to all online providers, weighted by speed tier and staking tier. Simply being online and available earns tokens.
2. Per-GB bonus: Additional DVPN for every gigabyte of user traffic routed. More traffic = more tokens.

Monthly earnings estimates:

Earnings estimates are based on the formula: $56 base + (speed_mbps × $1.4). Actual earnings vary by network conditions, traffic demand, and token price.

6.2 Speed Tiers

Minimum speed to earn: 10 Mbps. Speed tiers are based on a 7-day rolling average (not a single measurement) to prevent gaming. Speed tests run on first boot and daily.

6.3 Reward Multipliers

6.4 Payout System

• Payout threshold: 500 DVPN (lowered from 5,000 for faster provider payouts)
• Automated on-chain Solana payouts via hot wallet at 00:05 UTC daily
• SOL transaction fees: ~$0.0004 per transaction (negligible)
• Providers typically receive payouts daily to weekly (vs monthly with old 5,000 threshold)

6.5 Dedicated IP Premium

Providers can opt in to offer dedicated IP assignments per node:

• 5x per-GB earnings for dedicated traffic (vs 1x for shared).
• 2x daily pool weight boost for nodes accepting dedicated assignments.
• Configurable slots (1–10 per node).
• Users pay $10/mo for a dedicated IP — assigned to a specific provider for consistent IP address.

7. Staking

DVPN staking creates a virtuous cycle: staking tokens locks supply (reducing sell pressure), gives users discounts and governance power, gives providers traffic priority, and earns 10% APY for all stakers.

7.1 User Staking Tiers

7.2 Provider Staking Tiers

7.3 Staking Mechanics

• 10% APY: Staked tokens earn 10% annual yield, auto-compounded daily (1 AM UTC cron). No action required — rewards are added to your stake automatically.
• 7-day unstake cooldown: When you request to unstake, tokens remain locked for 7 days before they can be withdrawn. This prevents stake-and-dump attacks around governance votes.
• Slashing: Provider stakes can be slashed for misbehavior: 5% for 24+ hours of downtime, up to 100% for malicious activity (traffic manipulation, false reporting). Slashing is admin-initiated with on-chain transparency planned for Phase 3.
• Staking escrow: All staked tokens are tracked in a dedicated escrow wallet (H3CRA9ZfFP8QoGCRCW5xio9WRGm1eT2eSZzs2QvaTNeC). On-chain staking is live via a Solana Anchor program (EDf3q38bECL2V2xhyMKkercwgg3U4tXe79LajYiFccR2). On-chain staking is separate from token vesting.

7.4 On-Chain Staking (Live on Solana Mainnet)

On-chain staking is live on Solana mainnet as of March 2026.

• Program ID: EDf3q38bECL2V2xhyMKkercwgg3U4tXe79LajYiFccR2
• Staking Vault: HiJ4zqPrbvhzXp2xSLaThyZojcjSShbKgJiHS2ZhAjqL
• Rewards Vault: 8g2mnMiBrqSm79tqJE4FYE3TdB2HxvxFNH3aVUfqFPHJ
• 101,900+ DVPN staked by 6 unique wallets
• Phantom wallet connect on devpn.org/staking for browser-based staking
• RPC proxy through CP1 for browser compatibility (avoids CORS issues with public RPC nodes)
• DVPN token uses 6 decimals (SPL token standard)

8. Governance

DeVpn governance gives the community direct control over the network's direction. This is not advisory — approved proposals are implemented.

• Voting power: Staked DVPN × tier vote multiplier. An Architect with 5,000 DVPN staked has 50,000 effective votes (5,000 × 10x).
• Proposal creation: Sentinel tier or higher (1,250+ DVPN staked) required to submit proposals.
• Voting: Explorer tier or higher (125+ DVPN staked) required to vote.
• Voting periods: 14 days per proposal.
• Scope: Community events, bounty reward amounts, new exit node locations, feature prioritization, network parameter changes, and treasury allocations.

Token Vesting Schedules

All insider allocations (founders, investors, advisors) follow milestone-based vesting tied directly to network growth. This aligns all stakeholders — founders, investors, and advisors are rewarded when the network succeeds, not simply when time passes. The only time-based fallback is March 2031, ensuring all tokens eventually unlock regardless of growth pace.

TGE (Token Generation Event): January 26, 2026

Founder Vesting — 120M DVPN (12%)

Investor Vesting — 120M DVPN (12%)

Advisor Vesting — 30M DVPN (3%)

Vesting Summary

During the vesting period, vested tokens participate in governance voting to ensure stable platform direction. As the provider network grows and community staking increases, governance power naturally shifts to the community.

Vested Token Rules

• Voting: All 120M vested tokens count toward governance voting power at full weight (stake × tier multiplier)
• APY: Vested tokens do NOT earn staking APY rewards — only community-staked tokens earn yield
• Locked tranches: Cannot be unstaked, sold, or withdrawn until their milestone is reached or date passes
• Unlocked tranches: Can be moved to regular staking (earning APY) or withdrawn
• Transparency: All votes from vested holders are flagged with an is_vested marker visible to the community
• Public API: Vesting schedules and unlock status available at /api/vesting/public for full transparency
• Public transparency page: devpn.org/vesting — visual milestone timeline, breakdown cards, cumulative release chart, live provider count
• Private vesting portal: devpn.org/vesting-portal — authenticated page for vested parties with withdrawal request system and admin approval workflow
• All milestones verified against live provider count from /api/network/stats

Community Governance Safeguards

• Community Veto: If 80%+ of non-vested stakers oppose the winning option, a mandatory 30-day review period is triggered
• Emergency Proposals: Sentinel+ stakers can create emergency proposals with 48-hour response windows
• Proposal Limit: Maximum 3 active proposals per user to prevent governance spam
• All votes public: Every vote is transparent, with vested vs. community breakdown visible on each proposal

Governance Decentralization Timeline

9. Bounty Program

DeVpn rewards community contributions with DVPN tokens, credited directly to the contributor's staking balance:

Bounties are submitted by users, reviewed by admins, and approved or rejected with feedback. Approved bounty rewards are credited to the user's staking balance, immediately counting toward tier benefits.

10. Pricing

VPN Subscriptions

Early Adopter Special

Hardware Nodes

Add-Ons

11. Treasury Transparency

All DVPN token wallets are public Solana addresses. Anyone can verify balances and transactions on-chain at any time. No hidden wallets, no off-book holdings.

11 treasury wallets, all publicly verifiable on-chain. The hot wallet is replenished manually from the Node Rewards cold wallet to minimize exposure. Daily payouts are processed automatically at 00:05 UTC. Live treasury balances are visible at devpn.org/treasury. Wallet balance monitor sends email alerts every 6 hours when balances drop below thresholds.

12. Competitive Analysis

13. Roadmap

Phase 1 — Foundation (Complete)

• Core VPN platform with direct WireGuard connections
• Provider reward system with daily pool + per-GB bonus
• Hardware nodes: DeVpn Node Pro, Node, SD Card
• iOS app with working WireGuard tunnel
• Windows desktop client with system tray, protocol handler, auto-start
• Stripe + crypto payments (SOL, BTC, ETH) with auto claim code generation
• Blog, referral system, email drip campaigns
• Comprehensive security audit (7 critical + 6 high issues fixed)
• UPnP auto port forwarding for plug-and-play deployment
• Multi-node support (multiple nodes per account)
• Add-on marketplace (Family Filter, Ad Blocker, Multi-Hop, Kill Switch, Dedicated IP)

Phase 2 — Community Growth (Current)

• Staking system with tiered benefits (DB-tracked) — Complete
• Governance voting (weighted by stake) — Complete
• Bounty program for community contributions — Complete
• Dedicated IP system with 5x provider earnings — Complete
• Speed tier averaging (7-day rolling) — Complete
• AI-powered email support — Complete
• Social media automation (Discord + Telegram bots) — Complete
• On-chain staking (Solana mainnet) — Complete
• Phantom wallet connect for staking — Complete
• Public vesting transparency page — Complete
• Treasury with live on-chain balances — Complete
• Twitter/YouTube automation — Complete
• Security and health monitoring agents — Complete
• DIY provider one-liner install — Complete
• IPv6 protection — Complete
• OTA auto-update (agent v4.3.8) — Complete
• Smart reconnect with automatic failover — Complete
• CGNAT relay system — automatic detection, relay assignment, tunnel establishment, and transparent client routing (patent pending, filed April 2026) — Complete
• 5 new global exit nodes (Amsterdam, Singapore, Bangalore, Sydney, Toronto) — Complete
• SD card image v2.1 — universal CGNAT-compatible image for Headless and Headless Plus — Complete
• Legacy agent fleet migration — all VPS nodes unified on v4.3.8 — Complete
• iOS app submitted to App Store — Complete
• Bug bounty program live at devpn.org/security — Complete
• Community growth target: 100 active providers
• Beta marketing launch (Reddit, Solana communities)

Phase 3 — Scale & Exchange (Upcoming)

• DEX liquidity pool (Raydium / Orca)
• macOS native app
• 2FA authentication for all accounts
• Reddit/Facebook automation
• Token burn mechanism (portion of subscription fees burned)
• Multi-language support
• On-chain governance voting

Phase 4 — Scale (Future)

• Full DAO governance with treasury management
• Revenue sharing for Architect-tier stakers
• Enterprise VPN product for businesses
• Exchange listings (CEX + DEX)
• Mobile provider nodes (Android)
• VPN subscription payments in DVPN tokens
• 1,000+ provider target

14. Team

DeVpn is built by DVPN LLC, based in New York. The team brings together expertise in networking, cryptography, distributed systems, and token economics.

Contact: support@devpn.org

Follow us:

• Twitter/X: @DeVpnsocial (automated daily content + stats every 6 hours)
• Reddit: r/DeVpn
• Discord: discord.gg/GwNxjwVrR (21 channels, automated daily content + stats)
• Telegram: t.me/DeVpn (automated daily content + stats)
• YouTube: Devpn Networks (automated upload queue — Shorts daily, Videos Tue/Fri)
• GitHub: DeVpn-social

15. Legal Disclaimer

DVPN tokens are utility tokens designed to facilitate the DeVpn network ecosystem. They are not securities, investment contracts, or financial instruments.

• There is no guarantee of token value appreciation or provider earnings.
• Earnings estimates are based on current network conditions and may change.
• Past performance does not guarantee future results.
• Token distribution allocations are subject to change based on network needs.
• Users should conduct their own research (DYOR) before participating.
• Consult a qualified financial advisor before making investment decisions.
• Service availability is provided on a best-effort basis and is not guaranteed.
• DeVpn does not provide investment, legal, or tax advice.
• By using the platform, you agree to the Terms of Service and Privacy Policy Security.

© 2026 DVPN LLC. All rights reserved. This document may be shared freely. Do not modify without permission.