Warden Protocol

What it does

Warden Protocol is a purpose-built Layer-1 blockchain for AI agents in Web3. It positions itself as the “distribution layer for the agent economy”: infrastructure for autonomous AI agents to execute transactions, manage assets, and interact across chains.

Core components:

• Agentic Wallet – natural language interface for crypto operations. “The wallet anyone can use – just ask.” Agents handle the complexity behind conversational commands.
• Agent Hub – an app-store-style marketplace for Web3 AI agents. Pre-built agents include swap agents, trading bots (Kaibot), the Messari research agent, and portfolio management agents.
• SPEX (Statistical Proof of Execution) – verifiable AI inferenceInferenceRunning a trained AI model to produce an answer. Inference is what happens when you type a prompt into ChatGPT and get a response. The model takes your input, computes a best guess, and returns it.Like asking an expert for their opinion. The training was the decades they spent becoming an expert. The inference is the 30 seconds it takes them to answer your specific question.Read more → using probabilistic sampling and consensus across validators. Published as an academic paper (arXiv: 2503.18899). Validators independently verify random samples of inference outputs rather than re-running entire computations.
• AVRs (Asynchronous Verifiable Resources) – plugins that encapsulate AI functions callable cross-chain. Think microservices for agent capabilities.
• AI Trading Terminal – Messari Signals integration for perpetuals and tokenised stocks.

Multi-chain support via IBC (Cosmos origins), Hyperlane, and deBridge. Covers Solana, Ethereum, BNB Chain, Base, Arbitrum, and WardenChain.

The project spawned from work at Qredo (which separately became Open Custody Protocol). The team is heavy on Qredo and Binance alumni:

• David Pinger (Co-Founder, Ecosystem) – LMU Munich + Pantheon Sorbonne, ex-Uber, ex-Binance, led R&D at Qredo Labs.
• Antonio Pitasi (Co-Founder, Protocol) – ex-Tendermint/Ignite, Cosmos SDKSDKSoftware Development Kit. A collection of code libraries, documentation, and tools that lets developers integrate a service into their applications without writing everything from scratch. SDKs are how projects become easy to build with.Like a plug-and-play kit for building furniture. You don't have to mill your own wood, forge your own screws, or design the joinery from scratch. The kit gives you pre-cut parts and instructions so you can assemble the thing in an afternoon.Read more → expertise.
• Alex Melikhov (Co-Founder, Product) – CEO of Equilibrium (EOSDT stablecoin).
• Jon Heywood (Co-Founder, Design) – 15+ years tech, ex-Qredo, built SpaceWard.
• Josh Goodbody (CEO) – ex-Binance, ex-Qredo.
• Dr. Michele Dallachiesa (Chief AI Officer) – ex-Google, ex-NASA.

Entity based in Madrid, Spain. Total funding approximately $5M across three rounds:

• Angel/seed: ~$450K (early 2024)
• Fjord Foundry IDOIDOInitial DEX Offering. A token launch mechanism where the initial sale happens directly on a decentralised exchange, with built-in liquidity pool funding. IDOs replaced ICOs as the standard launch model for many projects after 2018.Like opening a new shop directly inside an existing market hall instead of running a separate sale event. The shop is open, the market provides foot traffic, and customers can walk in and trade from day one.Read more →: $534K at $460M FDVFDVFully Diluted Valuation. The market cap a token would have if every token that will ever exist were already in circulation. FDV is what the project would be worth if all locked, vesting, or unminted tokens were trading today.Like valuing a startup based on what every share would be worth if all the unvested employee options had already been exercised. The number is bigger and uglier than the official market cap, but it tells you the true ceiling.Read more → (April-May 2024)
• Strategic round: $4M at $200M valuation (January 2026 from 0G, Messari, Venice.AI)

TokenTokenA digital unit of value or access rights tracked on a blockchain. Tokens can represent ownership in a project, a right to use a service, a share of future revenue, or simply a tradable asset with no underlying claim.Like a physical poker chip a casino issues. The chip itself has no value. What makes it worth something is what it lets you do at the casino, what the casino has promised, and how much other people will pay you for it.Read more → launched 4 February 2026. This project is approximately one month old at the time of writing.

Value proposition

SPEX is the technical standout. Rather than requiring expensive ZKZKZero Knowledge. A class of cryptographic proofs that let you prove something is true without revealing any of the underlying information. ZK lets a network verify a transaction without seeing the transaction's contents.Like proving you know the password to a safe by demonstrating you can open it, without ever saying the password out loud. The verifier learns that you know the password and nothing more.Read more → proofs or running every computation on-chain, SPEX uses statistical sampling: validators independently verify random samples of AI inference outputs, and consensus determines correctness. This is a practical middle ground between full verification and trust-based oracles.

Warden’s 2025 report claims 60.4 million AI agent runs, 11.7 million inference proofs, 10.9 million cumulative on-chain transactions, $749K protocol revenue, and $704K agent revenue. We verified on-chain activity independently by sampling 180 blocks across WardenChain’s history via the Cosmos RPC endpoint. Our estimate: roughly 35-37 million total on-chain transactions since the 1 October 2025 genesis. Warden reports 10.9 million “cumulative on-chain transactions” for the same period. The discrepancy is unexplained; Warden doesn’t publish its counting methodology. The chain is real and active.

The 60.4 million “agent runs” figure is harder to verify. It’s 5-6x the on-chain transaction count, which means most of those runs are off-chain activity counted by Warden’s own infrastructure. No independent analytics platform (DeFiLlama, Artemis, Dune) tracks WardenChain, so we can’t confirm the off-chain portion.

That matters, because there’s a pattern of inflated metrics here.

Inflated user numbers. Warden claimed 15-20 million users. The founders then admitted to purging approximately 6-7 million bots. The remaining “6.5 million real users” is also unverified by any independent source. When a project inflates user counts by 2-3x and then walks them back, every other self-reported metric deserves the same scrutiny.

93% crash in one month. WARD launched at TGETGEToken Generation Event. The moment a project's token first becomes tradeable. TGE is when vesting clocks usually start, when liquidity hits exchanges, and when public price discovery begins.Like the IPO day for a startup. Everything that happened before TGE was private valuations and paper agreements. Everything after is the public market deciding what the thing is worth in real time.Read more → on 4 February 2026 and is down 93% from its recorded ATHATHAll-Time High. The highest price a token has ever reached. ATH is usually quoted as a reference point for how far the current price has fallen (or risen) since the peak.Like the record lap time on a racetrack. It tells you what the car has been capable of at its absolute best, not what it will do today. Whether that record gets broken again depends on conditions that may or may not come back.Read more → as of early March 2026. Fjord Foundry IDO participants are down 97.8%. That’s a brutal one-month performance.

Proprietary core module. The x/async module is proprietary with restricted use. The rest of the codebase is Apache 2.0, but having a core component closed-source undermines the whole open-source pitch.

42% of supply is controlled by insiders (20% core contributors + 22% treasury), with 120M treasury tokens already unlocked at genesis. Add unlimited PoSProof of StakeA consensus mechanism where validators earn the right to create new blocks by staking tokens as collateral. If they misbehave, the network slashes their stake. Proof of Stake replaced energy-intensive mining on most modern chains.Like being a licensed auctioneer. You post a bond to get the license, you earn fees for every auction you run, and you lose the bond if you rig an auction. The bigger the bond, the more auctions you get to run.Read more → inflationEmissionsNew tokens created and distributed by a blockchain protocol over time as rewards to validators, stakers, or miners. Emissions fund network security and participation at the cost of diluting existing holders.Like a company that pays employees partly in newly printed shares. Every year the total number of shares goes up, which means existing shareholders own a slightly smaller slice of the same company unless the company grows faster than the printing.Read more → at 1-10% annually and a 3% burnBurnPermanently removing tokens from circulation by sending them to an address that no one controls. Burns reduce total supply, which (all else equal) makes each remaining token worth more of the network's value.Like a company buying back its own shares and shredding them. The company's total value stays the same, but each remaining share now represents a slightly bigger slice of that value.Read more → on just $750K annual revenue, and the deflationary case doesn’t hold up.

The “Do-It-For-Me Economy” framing (agents as autonomous economic actors) is compelling as a vision but describes a future that doesn’t exist yet.

Tokenomics

WARD has a genesis supply of 1 billion tokens with unlimited maximum supply due to PoS inflationInflationThe annual rate at which new tokens are created and added to the circulating supply. Most networks use inflation to pay validators, stakers, and infrastructure providers from freshly minted tokens rather than real revenue.Like a landlord who raises the rent every year. If your salary goes up at the same rate, you break even. If it doesn't, you get poorer without noticing, because the number on your payslip hasn't changed but the ground under it has shifted.Read more → (1-10% annually). Approximately 250 million are circulating (25%).

Distribution: core contributors 20% (6-month cliffCliffA waiting period at the start of a token vesting schedule during which no tokens unlock at all. After the cliff ends, tokens begin releasing according to the vesting schedule.Like a probationary period at a new job. You don't get your stock options on day one. You wait 12 months to prove you'll stick around, then everything starts unlocking normally.Read more → + 24-month linear), treasury/R&D 22% (120M at genesis + 12-month linear), agent incentives 19% (20M at genesis + 12-month linear), ecosystem/community 12% (20M at genesis + 30-month linear), validators 10% (permanently locked), public goods 5.3%, liquidityLiquidityHow easily a token can be bought or sold without moving the price. High liquidity means you can enter or exit large positions quickly at the quoted price. Low liquidity means even small trades can swing the market.Like the difference between selling a house and selling a share of Apple stock. The house might be worth more on paper, but finding a buyer at that price takes weeks. The Apple share converts to cash in one click.Read more → 5%, initial airdropAirdropDistributing tokens for free to eligible wallets, usually to reward early users, bootstrap a community, or decentralise token ownership away from a small group of insiders at launch.Like a supermarket handing out free samples to people who already shop there. The samples cost the supermarket nothing to print. The goal is to convert casual shoppers into loyal customers by giving them something tangible to talk about.Read more → 4.7%, strategic investors 2% (12-month cliff + 12-month linear).

Token utility: gasGasThe fee paid to a blockchain to process a transaction. Gas is denominated in the chain's native token and varies with network demand. Sending a transaction without enough gas means the transaction fails and the gas is still consumed.Like the petrol that powers a car. You need to put petrol in to make the engine run. The amount of petrol you need depends on how far you're driving and how much you're carrying. If you run out, the car stops.Read more → on WardenChain, PoS stakingStakingLocking up a cryptocurrency to help secure a blockchain network, usually in exchange for rewards. The locked tokens act as a security deposit that can be taken away if the staker misbehaves.Like putting down a large rental deposit for an apartment. You get the money back if you behave, you earn interest while it's locked, and the landlord takes it if you trash the place.Read more →, governance voting, agent execution fees, operator bonding. A 2% community tax on protocol fees is burned programmatically, the sole deflationary mechanism.

Daily volume notably exceeds market cap, suggesting active speculation rather than organic demand. Listed on KuCoin, Bybit, BingX, Bitget, and Binance Alpha. Available on WardenChain, BNB Chain, and Base. FDV/MCap ratio reflects 25% circulating supplyCirculating SupplyThe number of tokens currently in circulation and tradeable on the open market. Differs from total supply (which includes locked or unvested tokens) and max supply (the upper limit, if there is one).Like the number of cars on the road today versus the number ever produced. Some are in showrooms, some in junkyards, some still at the factory. Only the ones on the road count toward what people are actually driving.Read more → at TGE with significant unlock pressure ahead.

How to participate

Stake WARD. Secure WardenChain via PoS. Dynamic inflation targets 65% staked. Technical skill: basic.

Use the Agentic Wallet. Natural language crypto operations. Access pre-built agents from Agent Hub. Technical skill: basic.

Build Agents. Use Warden Studio to create and deploy AI agents. SPEX for verifiable inference. Technical skill: advanced.

Honest assessment

Freedom Score: 47/100

Warden Protocol is a one-month-old project with heavy team control and mixed transparency signals.

Infrastructure Decentralisation: 10/20. PoS chain with validatorValidatorA computer that runs the full blockchain protocol, verifies transactions, and proposes new blocks. Validators are the workers that keep a Proof of Stake network running, and they earn rewards for doing the work correctly.Like a notary public who witnesses and stamps legal documents. Validators witness transactions, check they follow the rules, and stamp them into the permanent record. A notary who commits fraud loses their license. Validators work the same way, except the license is staked tokens that get slashed on misbehaviour.Read more → set but details on count and distribution are sparse. WardenChain is brand new. The x/async module is proprietary, so core infrastructure has centralised control. SPEX is novel but unproven at scale. No DeFiLlama presence.

Governance Decentralisation: 8/20. Token-based governance exists but is one month old. Treasury holds 22% with 120M unlocked at genesis. Core contributors hold 20% with vestingVestingA schedule that locks up tokens allocated to insiders, investors, and team members, releasing them gradually over months or years. Vesting prevents insiders from dumping on public buyers immediately after launch.Like a new employee's stock options at a startup. You don't get all the shares on day one. They unlock over four years so you stick around and do the work rather than cashing out and leaving.Read more →. No evidence of active on-chain governanceDAODecentralised Autonomous Organisation. A way to coordinate decisions and manage a treasury using token-weighted voting instead of a traditional company structure. Token holders propose and vote on changes directly.Like a shareholder-run company where every shareholder can vote on every decision, the votes are public, and the company can't do anything the shareholders don't approve. The coordination is messier than a normal company but nobody has unilateral control.Read more → proposals. Heavy centralisation around founding team.

Token Distribution Fairness: 6/15. Only 4.7% to initial airdrop. 42% controlled by team (20% core contributors + 22% treasury). Strategic investors only 2%, relatively small. Fjord Foundry IDO participants down 97.8%. 25% circulating at TGE.

Censorship Resistance: 7/15. Claims zk-SNARK integration for privacy but unverified. Permissionless agent deployment is positive. Multi-chain presence reduces single-point failure. Protocol is young and team-controlled; it could realistically restrict agents or modify rules.

Data Sovereignty: 8/15. User key managementWalletSoftware that stores the private keys needed to control tokens on a blockchain. A wallet does not actually hold any tokens. The tokens live on the chain. The wallet holds the keys that prove you own them.Like the key to a safe deposit box. The key doesn't contain your valuables. The valuables sit in the bank's vault. The key is what proves you're allowed to open the box and take them.Read more → through cryptographic IDs. SPEX provides verifiable AI inference, so users can verify outputs. Cross-chain operation avoids ecosystem lock-in. Privacy features claimed but implementation status unclear.

Open Source Transparency: 8/15. Main repo Apache 2.0 with 2,185 stars, decent. However, x/async module is proprietary, a meaningful gap. 36 repos with active development. Agent-kit is MIT licensed. Team is publicly identifiable and has published an academic paper on SPEX.

Returns Score: 48/100

Token Utility: 12/20. Gas token on WardenChain with direct utility. Agent execution fee payment is a growing demand driver. PoS staking, governance, operator bonding. Gated functionality and subscription tiers. One month old; actual fee revenue is modest (~$750K cumulative for 2025).

Value Accrual: 10/20. 2% community tax burn on protocol fees provides modest deflationary pressure. Validator and operator bonding locks supply. Agent fees paid in WARD create buy pressure. Revenue is small ($750K/year), unlimited supply with 1-10% inflation largely offsets the burn. Trading near ATL; market isn’t convinced.

Supply Dynamics: 10/20. 25% circulating at TGE with structured vesting. Core contributor cliff (6 months) with 24-month linear vest. Validator tokens permanently locked, which is positive. Unlimited max supply with PoS inflation (1-10%). 120M treasury tokens unlocked at genesis is concerning. Significant unlock pressure in months 6-12.

Revenue Sustainability: 8/25. Protocol revenue ~$750K in 2025. Agent revenue ~$704K, showing actual economic activity. $1M agent incentive programme to expand adoption. Multiple revenue streams. Revenue is tiny relative to claimed user base. Sustainability unproven and heavily dependent on agent adoption which remains speculative.

Liquidity & Access: 8/15. 13 exchanges including Binance Alpha, KuCoin, Bybit, BingX. Multi-chain availability. Daily volume exceeds market cap, suggesting active speculation. Micro-cap territory means extreme volatility. Down 93% from TGE ATH in one month.

Quadrant: D (Low Freedom, Low Returns)

Warden Protocol currently sits in Quadrant D. Centralised team control combined with unproven economics and a collapsing token price. Could move to C or B if agent adoption materialises and governance matures.

Key risks

• 93% crash in one month. Down 93% from TGE ATH. IDO investors down 97.8%. One month old and wildly volatile.
• Inflated user numbers. Claimed 15-20M users, admitted purging ~6M bots. Real engagement unclear.
• 42% insider allocation. Core contributors (20%) + treasury (22%) with substantial tokens already unlocked.
• Proprietary core module. x/async module is closed source, undermining open-source positioning.
• Unlimited supply. PoS inflation (1-10%) with only a 3% fee burn to counterbalance. Net inflationary on current revenue.
• One month old. Token launched February 2026. No governance track record. No battle-testing. No track record of any kind.
• Qredo heritage. Spawned from Qredo, which had its own controversies and rebranded separately. Team is competent but carries baggage.
• $750K annual revenue. Real but tiny relative to claimed users. The market already prices in limited traction.
• SPEX unaudited. Novel verifiable inference system with no third-party security audit published.