Three steps. One escrow. No monthly plan.
Sign up, top up, connect. You pay for the gigabytes you use and take the rest back when you like.
Create an account
Open the ProofKit bot in Telegram or sign up on proofkit.org with an email. No card and no plan.
Top up with TON
Send TON from your wallet into the non-custodial escrow contract. You pay per GB and can withdraw what you don't use.
Connect
Pick an exit country and add your personal link to a VPN app: Happ, Hiddify, V2RayNG or Streisand for VLESS Reality, Hysteria2 and XHTTP, or an olcRTC client for olcRTC.
Four ways through a firewall.
Every exit offers the same connection in different disguises. When one is blocked on your network, switch to another in the same app.
Looks like an ordinary website
The handshake is plain TLS 1.3 to a real domain. The fastest option and the default.
QUIC over UDP
Obfuscated QUIC that stays quick on lossy mobile networks, where UDP gets through and TCP is throttled.
Shaped like ordinary HTTP
Traffic cut into normal-looking HTTP requests, for networks that judge connections by how they behave.
Looks like a video call
Traffic travels as a call through major video services, so it keeps working where a network lets little else through.
Ghostlane, an open-source client, runs all four in one app: App Store · Google Play · desktop and APK · setup guide. Happ, Hiddify, V2RayNG and Streisand run VLESS Reality too, and some of them Hysteria2 and XHTTP (compared), from one link that keeps itself up to date.
Direct or 2-hop, you decide
Straight to the exit
Your app connects to the exit node directly. The fastest path: one operator's price plus the network fee.
Entry near you, exit abroad
You connect to an entry node that stays reachable on your network, and it carries your traffic on to the exit over its own tunnel. Useful where routes abroad are throttled; the exit never sees your IP. You pay both operators' prices plus the fee.
Built so you don't have to trust ProofKit.
Every economic and routing primitive is verifiable. Operators compete on price and proof status, not on advertising.
Nodes are tested, not trusted
The network sends its own traffic through nodes and compares what it measured with what each node reported.
Signed traffic checkpoints
Nodes sign their traffic reports as TLSNotary proofs, so every number the bill is built from is on record and checkable.
Pay per GB. Withdraw the rest.
Routes cost 0.0012–0.012 TON per GB today, the network fee included. No plans: the escrow is a Tact contract, not a billing database.
Open node network
Anyone with a VPS can list a node and stake 1 TON on it. You sort by country, price and uptime; nobody picks the routes for you.
Non-custodial by contract
Your TON sits in a public escrow contract, not with us. Withdrawals are co-signed automatically, and a paused contract lets you withdraw alone after 30 days.
Apps you already know
Happ, Hiddify, V2RayNG and Streisand run three transports from one link that updates itself. olcRTC needs an olcRTC client.
Got a VPS? Earn TON for the traffic you relay.
Run an exit (origin) node, an entry (edge) node, or both, in Docker on an x86-64 Linux VPS. Set your price per GB and stake 1 TON per node; your earnings are paid on-chain as signed claims you submit from your TON wallet. You can also connect your own video-call accounts to host olcRTC rooms.
Run a VPN bot, an app or a reseller business? See the Partner API.
Short answers to long questions.
Does ProofKit work in Russia, Iran, or China?
It is built for heavy blocking. Every exit offers four transports: VLESS Reality looks like an ordinary TLS visit to a real website, Hysteria2 and XHTTP take other paths, and olcRTC looks like a video call through major video services when little else gets through. No VPN can promise permanent availability under modern censorship, but switching transports and routes in one app gives you better odds than a fixed provider.
What's a 2-hop route? Why would I want one?
A direct route connects you straight to an exit node. A 2-hop route goes through an entry node first, one that stays reachable on your network, and the entry carries your traffic on to the exit over its own tunnel: You → Entry → Exit → Internet. It helps where direct routes abroad are throttled, and the exit never sees your IP.
How is this different from a normal VPN subscription?
A centralized VPN owns every server, sets every price and bills you monthly. ProofKit is a marketplace: anyone can run a node and set its price, your deposit sits in a public TON contract, and traffic reports are checked by probes and signed checkpoints. You pay only for the gigabytes you use.
Which app should I use?
Ghostlane, an open-source client on the App Store, on Google Play and on GitHub, runs all four transports in one app. VLESS Reality also works in Happ, Hiddify, V2RayNG and Streisand, and Hysteria2 and XHTTP in some of them; of these, only Ghostlane runs olcRTC. ProofKit gives you one link that keeps itself up to date.
Which transport should I use?
Start with VLESS Reality: it is the fastest. Hysteria2 runs over QUIC/UDP and helps where TCP is throttled. XHTTP shapes traffic as ordinary HTTP requests for networks that inspect behaviour. olcRTC is for networks where only the big domestic services still work. One link can carry all of them, so you switch inside the app.
Is the escrow really non-custodial?
Yes. A Tact contract on TON holds deposits, not ProofKit. Withdrawals of your unused balance are co-signed automatically, and if the contract is ever paused for 30 days you can withdraw without anyone's signature. Operators are paid only for traffic the network's checks confirm.
How much does it cost?
Operators set their own price per GB, and the marketplace shows it with the 20% network fee included. A 2-hop route costs both operators' prices plus the fee. There is no monthly plan: you pay for the gigabytes you use and can withdraw the rest.
How do I get TON?
Buy it with a card or on an exchange, for example in the Wallet inside Telegram or in a TON wallet app such as Tonkeeper, then top up your ProofKit balance from that wallet.