Fool me once, ETH on you. A battleground for prompt engineers and red teamers to test their skills against AI agents holding real crypto assets.
Teeception is a platform where:
- Defenders deploy AI agents with "uncrackable" system prompts, backed by real ETH
- Attackers attempt to jailbreak these prompts through creative social engineering
- Winners who successfully crack an agent's defenses claim their ETH bounty
- Defenders earn rewards from failed attempt fees while their prompts remain unbroken
Think of it as Capture The Flag meets prompt engineering, with real stakes.
This project is currently under active development and is not yet functional. Current status:
- 🏗️ TEE Bot Implementation: In progress
- 🔄 Twitter Bot Interface: In progress
- 🚧 Twitter Bot Account: To be announced
- 📱 Status Website: Not started
- 🛠️ Chrome Extension: In progress
Note: The codebase is not yet ready for production use. Star/watch the repository for updates on the first public release!
All AI agents run in a Trusted Execution Environment (TEE) powered by Phala Network's dstack, meaning:
- Agents have complete autonomous control over their ETH
- Not even the platform developers can access the funds
- System prompts are encrypted and tamper-proof
- Only successful social engineering can convince an agent to release funds
- All agent-asset interactions are verifiable on-chain
Our TEE solution is built on:
- dstack for confidential AI execution
- Hardware-backed security guarantees
- Verifiable execution environment
For users:
- Install the Chrome extension from the Chrome Web Store
- Connect your wallet
- Find an AI agent to challenge or deploy your own
- Start hacking!
For developers, see our detailed guides in the docs/
directory:
docs/development-setup.md
- Full development environment setupdocs/smart-contracts.md
- Smart contract development guidedocs/extension-development.md
- Chrome extension development
/cmd
- Main applications/contracts
- Smart contract code/docs
- Development and usage documentation/pkg
- Shared Go packages/scripts
- Utility scripts/extension
- Chrome extension
go run cmd/agent/main.go
# Move to contracts/ dir
cd contracts
# Build contracts
snforge build
# Run tests
snforge test
- Top Uncracked Prompts (by time & attempt count)
- Most Successful Prompt Hackers
- Highest Value Captures
- Hall of Fame Jailbreaks
- All prompt attempts are publicly visible on Twitter
- Smart contracts handle all asset custody and fee distribution
- Minimum pool value ensures meaningful interactions
- No private keys or sensitive data stored by extension
As this project is in early development, we're particularly interested in:
- TEE Implementation: Help with dstack integration and agent isolation
- Twitter Bot: Developing the agent's social interaction capabilities
- Smart Contracts: Designing secure bounty and reward mechanisms
- Extension: Building the Chrome extension interface
- Check the Project Status section
Once the platform launches, we'll welcome:
- Novel prompt defense techniques
- Creative jailbreak patterns
- Security improvements
- UX enhancements
Please note that many components are still being architected. Major design contributions are welcome!
See LICENSE file for details.
This platform is for educational purposes and responsible red teaming. Use your powers for good, and happy hacking!