A decentralized threat intelligence marketplace.
Crowdsourced analysts and automated engines compete to verify malware and phishing threats — backed by staked, on-chain incentives.
Traditional threat detection relies on single-vendor engines, which creates blind spots, slow zero-day response, and no accountability for bad calls. Verdyx replaces that with an open marketplace:
- A file, URL, or hash is submitted with a bounty.
- Human analysts and automated engines stake tokens on a verdict (malicious / benign).
- Verdicts are aggregated by a consensus service into a confidence score.
- Accurate submitters earn the bounty and reputation; inaccurate ones lose their stake.
The result is a threat feed where every verdict has skin in the game, priced and settled on-chain.
Rust workspace, one crate per domain:
| Service | Responsibility |
|---|---|
api-gateway |
Auth (JWT), request routing, rate limiting, public API surface |
user-service |
Identity, profiles, auth workflows |
submission-service |
Threat submissions, analyst votes/verification |
bounty-manager |
Bounty lifecycle, on-chain escrow integration |
consensus-service |
Verdict aggregation and confidence scoring |
reputation-service |
Analyst/engine scoring and leaderboards |
payment-service |
Payouts and treasury transactions |
analysis-engine |
Automated scanning and enrichment pipeline |
notification-service |
Outbound notifications (email/webhook) |
shared |
Common types, config, and utilities |
Solidity contracts (Hardhat), audited with Slither/Mythril configs included:
ThreatToken— the ERC-20 staking/reward tokenBountyManager— escrow, staking, and bounty settlementReputationSystem— on-chain analyst/engine reputationGovernance— protocol parameter governance
React + TypeScript + Vite, Tailwind + shadcn/ui, using the Aurora design system (dark violet/indigo with an indigo→magenta brand gradient).
Terraform (AWS), Kubernetes manifests per service, Ansible playbooks, and Docker configs for local/dev/production deployment.
- Node.js 18+
- Rust (stable toolchain)
- Docker + Docker Compose
- An Ethereum wallet (e.g. MetaMask) for on-chain interactions
git clone https://github.com/deep60/Verdyx.git
cd Verdyx
# Full stack (Postgres, Redis, all services, frontend)
docker compose up -d
# Or run pieces individually:
# Backend services
cd backend
cargo run --bin api-gateway
# Frontend
cd frontend
npm install
npm run dev
# Smart contracts (local Hardhat node)
cd blockchain
npm install
npx hardhat node
npx hardhat run scripts/deploy.ts --network localhostFull setup instructions: docs/deployment/local-setup.md.
# Backend
cd backend && cargo test
# Frontend
cd frontend && npm run test # unit (Vitest)
cd frontend && npm run test:e2e # e2e (Playwright)
# Smart contracts
cd blockchain && npx hardhat testThe gateway exposes a REST API under /api/v1 (auth, bounties, submissions, wallet, webhooks). See docs/API.md for the full route reference and docs/api/openapi.yaml for the OpenAPI spec.
curl -X POST https://api.verdyx.com/api/v1/bounties \
-H "Authorization: Bearer <TOKEN>" \
-F "file=@/path/to/sample.exe" \
-F "bounty=0.05"docs/architecture/— system design and data flowdocs/deployment/— local, Kubernetes, and production runbooksdocs/development/— code style, testing, contributing guidancedocs/security/— threat model and incident response
Contributions are welcome — see CONTRIBUTING.md for guidelines and coding standards.
If you discover a security vulnerability, please do not open a public issue. Report it privately as described in docs/security/.
MIT © Verdyx