nodes online ·  exit countries · avg TON/GB · last proof
// open VPN marketplace · on TON

Pick your route.
Pay only for traffic. Verify the math.

Independent operators run VLESS Reality nodes, you pay per GB through a non-custodial TON escrow, and bandwidth is cross-checked by TLSNotary proofs. No subscription. No single point of failure.

Non-custodial · TON escrow · Open source · agent + contracts · Withdraw unused balance
Active nodes
online
Exit countries
Avg price · per GB
TON
Last proof
// how it works

Three commands. One escrow. No subscription.

Each step is verifiable: route choice, TON deposit, traffic accounting. ProofKit doesn't hold your keys, your traffic, or your money.

01sign in

Open the app with a TON wallet (or email)

Register in seconds via Telegram bot or web. We don't ask for personal data, just an authentication method. Your TON wallet becomes your account.

02deposit

Send TON to the escrow contract (you keep custody)

Funds live in a Tact smart contract on TON. You can withdraw your unused balance any time without coordinator approval. Operators only get paid after their reported usage matches independent probes.

~/proofkit — escrow
$ proofkit escrow deposit 5 TON
→ ton://transfer/EQA…escrow
→ confirmed in block #48,219
→ balance: 5.000 TON · withdrawable
03route & verify

Pick a country, import the VLESS URL, browse

Use Hiddify, V2RayNG, Streisand, NekoBox, or V2RayN. ProofKit issues a subscription URL with VLESS Reality configs. Usage is metered both client- and operator-side and reconciled with TLSNotary proofs.

~/proofkit — session
$ proofkit connect --country DE --route 2hop
→ matched 12 routes · sorted by price & uptime
→ session live · AMS-09 → FRA-12
4.21 GB used · 0.0193 TON spent
proof sha256:c0a4e1ad…b7f9
// route types

Direct or 2-hop, you decide

DIRECT · 1 HOP

Speed-first single hop

Your traffic enters a VLESS Reality exit node directly. Fastest path, simplest billing — 80% to the operator, 20% platform fee.

YOU EXIT · FRA VLESS REALITY
latency · 28 ms price · 0.0038 TON/GB split · 80 / 20
// what's actually different

Built so you don't have to trust ProofKit.

Every economic and routing primitive is verifiable. Operators compete on price and proof status, not on advertising.

PROTOCOL

VLESS Reality, not a fingerprintable VPN

Handshakes look like ordinary TLS 1.3 to a real domain. Built to survive TSPU (Russia), GFW (China), Iranian SNI filtering.

PROOFS

TLSNotary bandwidth attestations

An independent notary co-signs bandwidth checkpoints. Operators can't inflate usage. Bilateral cross-checks against kernel counters.

PAYMENTS

Pay-per-GB. Withdraw the rest.

~$0.02-$0.06 per GB depending on operator. No 12-month plans. The TON escrow is a Tact contract, not a billing database.

MARKETPLACE

Open node network

Anyone with a VPS can list a node. Users sort by country, price, uptime, proof status. No gatekeeper picks the routes.

CUSTODY

Non-custodial by contract

Your TON sits in a public escrow contract. You can sweep your balance back to your wallet without our cooperation. We can't freeze it.

CLIENTS

Hiddify, V2RayNG, Streisand…

One subscription URL that auto-refreshes as the network changes. No bespoke client to install — your VLESS app already works.

// for operators

Got a VPS? Earn TON for the traffic you relay.

Run an origin (exit) node or an entry (edge) node — or both. Set your own price per GB. Payouts settle on-chain in batches signed by the coordinator after probes confirm your reported bandwidth.

~/proofkit-agent · install
# on any Debian/Ubuntu VPS
$ curl -fsSL proofkit.org/agent | sh
→ pulling agent · v1.4.2
→ verifying ed25519 signature
agent registered · node FRA-12
→ price: 0.0045 TON/GB
→ stake: 1.000 TON locked
listening · vless-reality :443
// faq

Short answers to long questions.

Does ProofKit actually work in Russia, Iran, or China?

VLESS Reality is the most resilient widely-deployed transport against DPI today. ProofKit combines it with route diversity — if one entry/exit pair degrades, you switch routes in the marketplace. No VPN can promise permanent availability under modern censorship, but route choice and proof-based operator competition give you better odds than a fixed provider.

What's a 2-hop route? Why would I want one?

Direct routes connect you straight to a VLESS exit node. 2-hop routes interpose an entry node in a different country: You → Entry (WireGuard) → Exit (VLESS Reality) → Internet. The entry sees your IP but not your traffic; the exit sees your traffic but not your IP.

How is this different from a normal VPN subscription?

A centralized VPN owns every server, sets every price, and holds your payment data. ProofKit is a marketplace: independent operators compete, escrow is a public TON contract, and bandwidth is checked by an independent notary. You pay only for traffic you actually used.

Which client should I use?

Any VLESS-compatible client: V2RayNG (Android), Hiddify (iOS/Android/Desktop), Streisand (iOS), NekoBox (Android), V2RayN (Windows). ProofKit gives you a subscription URL — the client handles the rest.

Is the escrow really non-custodial?

Yes. The Tact smart contract on TON holds deposits. You can withdraw your unused balance directly from your wallet without coordinator approval. Operators only get paid after reported usage matches independent probes, signed by the coordinator.

How much does it cost?

Operators set their own prices, typically 0.003–0.01 TON/GB (~$0.02–$0.06). 2-hop routes add the entry node's price on top. There's a 20% platform fee already included in displayed rates.