# Targon: Confidential Compute on Bittensor, with Intel

> Targon is the Bittensor subnet behind a co-authored Intel research paper and a $10.5M OSS Capital Series A. The technical story holds up. The customer story is weaker than the marketing suggests.

- Published: 2026-04-10 · Updated: 2026-10-06
- Canonical: https://ownyourmind.ai/tokenomics/targon-bittensor-confidential-compute/
- Cite as: Own Your Mind (ownyourmind.ai), licence CC BY 4.0. Link the canonical URL.

Charts and interactive widgets are omitted here; project data is at https://ownyourmind.ai/api/scores.json.

---

## The thesis

Targon is one of the two largest claimed-revenue subnets on Bittensor, with a [$10.5 million Series A](https://www.manifold.inc/releases/series-a-announcement) backed by OSS Capital and Bittensor's own co-founders, and a research paper co-authored with Intel. The technical story is substantive. The commercial story is weaker than the marketing suggests, and the gap between the two is the part of Targon that matters for holders.

The technical claim is straightforward to state and harder to deliver on: confidential GPU compute for AI inference, where neither the operator nor the host hardware can see the data being processed. Intel TDX handles encryption on the CPU side. NVIDIA Confidential Computing extends the trust boundary across PCIe to the GPU. Cryptographic attestation lets a buyer verify they're talking to authentic hardware before sending a single byte. For regulated buyers (healthcare, finance, defence) this is the architectural piece that makes decentralised compute usable for workloads that would otherwise have to stay on a private cloud.

The commercial claim is harder to verify. Targon's team put it at about $10.4 million in annual recurring revenue in September 2025, [as Unsupervised Capital reported](https://www.unsupervised.capital/writing/bittensors-ai-compute-subnets-collectively-reach-20m-arr), and the figure was still circulating in April 2026, but [Pine Analytics flags this](https://pineanalytics.substack.com/p/the-bear-case-for-bittensor-tao) as "a projection cited across multiple analyst reports, not an audited number." There is no public revenue dashboard. There are no named enterprise customers. The marketing copy talks about "regulated industries" as a target, not as a customer list. Three weeks after the Intel whitepaper landed, no named healthcare, finance, or government customer has been publicised.

This article looks at both sides honestly. The technical innovation deserves credit. The commercial reality deserves scrutiny.

## What Targon actually is

Targon is Bittensor subnet 4, run by Manifold Labs. The product is a GPU compute and inference marketplace where miners contribute hardware and validators score performance, with the twist that all workloads run inside hardware-attested confidential enclaves rather than on raw GPUs.

The architecture has three layers:

**Intel TDX (Trust Domain Extensions)** is a CPU feature on recent Xeon processors that creates cryptographically isolated VMs. The host hypervisor cannot read the VM's memory. Remote attestation lets a client verify that the VM is running on authentic Intel hardware before sending data. TDX itself is established. Using it as the foundation for a public decentralised compute network is the new part.

**NVIDIA Confidential Computing**, available on H100 and H200 GPUs, extends the trust boundary from the CPU enclave across the PCIe bus to GPU memory. Without this, data leaving the CPU enclave and entering the GPU would be exposed in transit and at rest in GPU memory. With it, the entire inference path stays encrypted from when the prompt enters the enclave to when the response leaves it.

**Targon Virtual Machine (TVM)** is Manifold's proprietary runtime that orchestrates attestation, key exchange, and workload scheduling across the network of untrusted Targon miners. This is the part that's specific to Bittensor and the part that Manifold has not open-sourced. The subnet incentive code is on [GitHub](https://github.com/manifold-inc/targon) under MIT licence, but the orchestration layer that makes the confidential compute promise actually work is closed.

## The Intel paper

On 23 March 2026, Manifold Labs and Intel co-authored a research paper titled [Decentralized Compute on Untrusted Hardware Using Intel TDX and Encrypted CVMs](https://www.manifold.inc/releases/intel-whitepaper). It's hosted on both Manifold's site and Intel's community blog. The Intel co-authors are Haidong Xia and Sathi Nair. The Manifold authors are Venish Patidar, Dhruv Bindra, Ahmed Darwich, and Josh Brown.

This is more substantive than the typical crypto-native partnership announcement. Intel doesn't host co-authored research on community.intel.com without internal review. The paper is a technical collaboration that Intel was willing to put its name on, not a marketing document with the logo slapped on top. For a Bittensor subnet trying to convince enterprise buyers that decentralised compute is production-ready, that's a meaningful credibility marker.

The paper's core argument captures the right framing for the entire decentralised compute thesis: "Decentralization does not eliminate the trust problem, it redistributes it." Without hardware-rooted attestation, decentralised inference asks the buyer to trust that none of the operators they don't know are malicious. With attestation, the trust collapses into "trust Intel." That's a meaningfully smaller and more credible trust assumption.

It is not, however, a commercial partnership announcement. There's no Intel customer. No revenue. No joint product. The paper is research collaboration, and treating it as anything more than that would be overreading.

## The team and the funding

Manifold Labs is run by people who built Bittensor. Robert Myers, the CEO, was previously Senior Software Engineer at the Opentensor Foundation and is described as a founding Bittensor contributor. James Woodman, the President, was COO of the Bittensor Foundation. Josh Brown is CTO. The team isn't a group of crypto opportunists who showed up after TAO went up. They're insiders who left the foundation to build something specific.

The [$10.5 million Series A](https://oss.capital/oss-capital-leads-10-5m-series-a-in-manifold-labs-alongside-industry-legends/) closed on 28 July 2025, led by OSS Capital. The participant list is unusually strong for a Bittensor-native company:

- Digital Currency Group
- Tobi Lütke (Shopify CEO)
- Ram Shriram (Google founding board member)
- Zachary Smith (Packet co-founder)
- Jacob Steeves and Ala Shaabana (both Bittensor co-founders)
- Logan Kilpatrick (then Google DeepMind Group PM)

Two of Bittensor's own co-founders backed Manifold financially, which is the strongest possible internal endorsement. The participation of Tobi Lütke, Ram Shriram, and Logan Kilpatrick is the kind of strategic angel list that gives a company direct enterprise-introduction capability. These aren't crypto-native investors. They're people who can open doors at companies that buy compute at scale.

The post-money valuation hasn't been disclosed. The corporate jurisdiction hasn't been disclosed either. Both are gaps.

## The revenue question

This is where the story gets harder.

Targon's team put it at about $10.4 million in annual recurring revenue "as of September" 2025, in [Unsupervised Capital's telling](https://www.unsupervised.capital/writing/bittensors-ai-compute-subnets-collectively-reach-20m-arr), and neither targon.com nor manifold.inc carried a revenue or ARR figure when we checked on 6 October 2026. The figure is repeated across analyst reports (Unsupervised Capital, simplytao.ai, OAK Research) but every citation traces back to Manifold's own reporting. There is no audit. There is no live revenue dashboard. Pine Analytics' bear case paper explicitly flags this: "The $10.4 million is a projection cited across multiple analyst reports, not an audited number" and notes "the absence of a live revenue dashboard excluding emissions as a transparency concern."

Pine puts Targon's emission-to-revenue ratio at approximately 1.7 to 1. That's significantly better than [Chutes' 22-40 to 1 ratio](https://ownyourmind.ai/tokenomics/chutes-bittensor-revenue-machine/), which would put Targon far closer to economic sustainability than Chutes. If the $10.4M figure is accurate, Targon is the strongest sustainability story on the network.

If.

I want to believe the number. The Series A backing, the Intel paper, the team's Bittensor pedigree all point in the right direction. But "trust the team's projection" is not verification, and Pine Analytics has the same access to the underlying data as we do, which is to say none. A meaningful percentage of analyst confidence in Targon comes from the strength of the surrounding signals (investors, Intel, founders) rather than from independent revenue verification. That's a reasonable heuristic but it's not the same as proof.

The thing that would change my read materially is a public revenue dashboard. Anything that gets the ARR figure from "Manifold's own number" to "verifiable on a URL" closes the gap with Pine's scepticism. Until then, every published ARR figure should carry attribution.

## The Dippy clarification

You'll often see Targon described as "powering Dippy AI, an app with 4 million plus users." This framing is misleading in two ways.

**First, Dippy is not a Manifold product.** It's owned by Impel Intelligence, which raised a separate $2.1 million pre-seed led by Drive Capital. Dippy also runs Bittensor subnet 11 directly. Dippy is a customer of Targon, buying inference at negotiated rates. The customer revenue from Dippy users flows to Impel Intelligence, not to Manifold. When you read "Targon powers Dippy", what that means is "Dippy is one of several Bittensor-ecosystem product teams that buys inference from Targon."

**Second, the user count is overstated.** Independent data from AppBrain shows roughly 1 million Android downloads with about 150,000 monthly downloads. Different sources cite "1M+ users" or "around 600K MAU." The "4 to 8.6 million users" figure that gets repeated in some Targon coverage doesn't match any verifiable source I could find.

This matters because the implied story (Targon has millions of consumer users through Dippy) is different from the actual story (Targon sells inference wholesale to a handful of Bittensor product teams, the largest of which has hundreds of thousands of users on Android). Both descriptions hold, but they describe different businesses.

## The customer gap

Targon's marketing positions confidential compute for healthcare, financial services, and government workloads. The Intel paper reinforces that positioning. The Series A press release leans into it. The targon.com landing page claimed "99% uptime, sub-50ms latency, 1000+ GPUs" at publication.

What's missing is a single named enterprise customer.

I went looking. Three weeks after the Intel whitepaper, no healthcare, finance, or government customer has been publicised. No case studies. No customer logos on the website. No testimonials. Neither Pine Analytics' coverage nor the Series A press release names one. The named Targon customers in any source are Dippy, Ridges, and Score, all of which are Bittensor-native product teams, not external enterprise buyers.

Sales cycles in regulated industries run long. A confidential compute deal with a healthcare buyer can take 12-18 months from first conversation to first invoice. Three weeks of silence after a research paper proves nothing on its own. The problem is that if the thesis were materialising, you'd expect to see something by now.

The most charitable interpretation is that Manifold has signed customers under NDA and can't publicise them yet. The less charitable interpretation is that the enterprise sales motion hasn't started producing yet. We don't know which. What we know is that the publicly observable customer base is Bittensor-internal.

## The next halving

Bittensor halves emissions on a Bitcoin-style cadence. Halvings are supply-threshold events: the second halving fires when total TAO issuance reaches 15.75M and is projected for approximately 11 December 2029. At its April 2026 share, Targon's daily emission drops from roughly 206 TAO (5.73% of 3,600) to roughly 103 TAO. Our 22 September 2026 chain read puts the share lower, at 4.63%.  Annualised TAO subsidy roughly halves.

Pine's 1.7:1 ratio means Targon is closer to break-even than Chutes is, but it's not at break-even today. The math is materially better than Chutes' situation, and the Targon question is a different one entirely: not "can revenue grow fast enough" but "is the reported revenue actually there." Holding the TAO price and Targon's 5.73% emission share constant, here's where the subsidy ratio lands at the second halving across plausible revenue assumptions:

The spread is enormous, and that's exactly the point. The difference between "Targon is the closest thing Bittensor has to a sustainable subnet" and "Targon is in the same trap as Chutes" is not the halving date or the growth rate; it is whether the $10.4M figure survives independent verification. Manifold's Series A and Intel partnership do not settle that question. Pine's flag (unaudited projection cited across multiple analyst reports) does not resolve it either. Until there is an externally verifiable number, every other analysis on this page rests on a single self-reported input.

## What to actually watch

Six leading indicators over the next 12-18 months tell you whether Targon's commercial story matches its technical story or stays a paper thesis. The first two carry far more weight than the rest, because they directly resolve the verification gap that the entire investment case rests on.

1. **Revenue verification.** A public dashboard. An audited number. A revenue range disclosed in a quarterly update by Manifold or by an OSS Capital portfolio update. Anything that closes the gap between Pine's "unaudited projection" flag and the cited $10.4M ARR. This is the single most important signal on Targon: the rest of the analysis pivots around whether the number holds up.
2. **Named enterprise customers.** Even one healthcare, financial services, or government case study with a logo would change the entire narrative. Three weeks after the Intel whitepaper there were none. Twelve months in, there should be at least one if the commercial motion is engaging.
3. **Pricing power.** Confidential compute carries a premium in the centralised market (Azure Confidential VMs, AWS Nitro Enclaves both price at 30-50% above standard instances). Whether Targon can capture that premium or has to discount to TAO-subsidised levels tells you whether the technical differentiation has commercial pricing power.
4. **Targon Virtual Machine open-sourcing.** The subnet incentive code being MIT is fine. The orchestration runtime staying closed undermines the decentralisation framing. Confidential compute on closed-source software is a category where open-source matters more, not less, because attestation only matters if the code being attested can be reviewed.
5. **Manifold Labs entity disclosure.** Jurisdiction, structure, accountability framework. The Series A backing makes this gap stand out more, not less; institutional buyers in healthcare, finance, and government cannot procure from an undisclosed entity, no matter how strong the technical credentials.
6. **GPU count and attestation transparency.** Earlier materials said 1,500+ H100s. Recent materials say 1,500+ H200s. Either there was an upgrade, which Manifold has not announced, or the materials are inconsistent. Beyond the whitepaper's description, a live demo where a buyer can verify a remote enclave attestation in production would settle the "compelling on paper vs verified in production" question more directly than any other single artefact.

## The honest assessment

Targon is the strongest Bittensor subnet on paper. Named funding. Doxxed founders. A research collaboration with Intel. A substantive technical thesis around confidential compute that addresses an established enterprise need. A revenue figure that, if accurate, would make Targon the closest thing Bittensor has to economic sustainability.

What's missing is the bridge from "compelling on paper" to "verified in production." The customer base is Bittensor-internal. The revenue is self-reported. The Intel partnership is research collaboration, not commercial. The platform isn't fully open source. None of these are individually fatal, but together they describe a project that has done the hard technical work and the hard fundraising work but hasn't yet done the commercial work that would justify the valuation.

I'm more positive on Targon than on Chutes. The team's pedigree is stronger, the technical thesis is more durable, and the unit economics are closer to working. The asymmetry is that Targon has more upside if the commercial motion engages, and roughly the same downside as Chutes if it doesn't.

For the broader Bittensor revenue picture, see [Bittensor subnets: where the revenue actually is](https://ownyourmind.ai/tokenomics/bittensor-subnets-where-the-revenue-is/). For the parallel deep-dive on Chutes, see [Chutes: Bittensor's revenue machine, subsidised](https://ownyourmind.ai/tokenomics/chutes-bittensor-revenue-machine/). For how to actually buy and stake into subnet 4, see our [Bittensor subnet staking guide](https://ownyourmind.ai/use/bittensor-subnet-staking/).

## Score change log

| Date | Score | Change | Reason |
| - | - | - | - |
| 2026-10-06 | Data | N/A | Correction: the $10.4M ARR dates from September 2025, "according to the team" via Unsupervised Capital, not April 2026. Scores unchanged. |
| 2026-09-24 | Data | N/A | Emission share and the $10.4M ARR dated to April 2026, with our 4.63% chain read added and a note that targon.com no longer publishes the figure; three unverified superlatives removed. Scores unchanged. |
| 2026-05-06 | Editorial | N/A | Deeper editorial reframe alongside the halving-date correction below. Subsidy economics section rebuilt with a five-row scenario table that makes the central question (does the $10.4M self-report hold up?) the explicit pivot. "What I'd want to see" reframed as "What to actually watch", with revenue verification elevated to indicator 1 of 6 because every other analysis on the page rests on it. Position unchanged: more positive on Targon than Chutes if the revenue verifies, same trap as Chutes if it does not. |
| 2026-05-06 | Data | N/A | Halving date corrected: original article stated the next Bittensor halving was approximately 14 December 2026. Bittensor halvings are supply-threshold events on a Bitcoin-style ~4-year cadence; the second halving is projected for approximately 11 December 2029 ([bittensor-halving.com](https://www.bittensor-halving.com/), corroborated by [docs.learnbittensor.org/concepts/halving](https://docs.learnbittensor.org/concepts/halving)). Subsidy ratio analysis unchanged (still halves at the next halving event). |
| 2026-04-10 | Both | N/A | Initial publish. |