Bittensor integrates confidential routing layer with OpenRouter, processing up to 120 billion tokens daily

Subnet 28 brings Trusted Execution Environments to decentralized AI inference, while Bittensor's Chutes subnet quietly becomes one of OpenRouter's top providers.

Share

Add us on Google by Editorial Team May. 30, 2026

Bittensor’s decentralized AI network is building a confidential routing layer that could reshape how AI inference gets priced, delivered, and verified. The integration centers on Subnet 28, internally called “gm,” which uses Trusted Execution Environments to let miners compete on routing costs, payments, and model access, all while keeping user queries private.

What Bittensor is actually building

Subnet 28 introduces a privacy-first marketplace for AI inference. Trusted Execution Environments, or TEEs, are hardware-level secure enclaves that process data without exposing it to the machine’s operator. Even the miners running your AI queries can’t see what you’re asking.

The system generates verifiable attestations, cryptographic proof that your request was handled inside a secure enclave without tampering. Miners on the subnet compete not just on speed or quality but on routing costs and payment terms, creating a dynamic pricing layer that sits on top of Bittensor’s existing subnet economy.

Development discussions around this confidential routing integration took place between May 28 and 29, 2026. The architecture has been explicitly compared to “OpenRouter or Venice AI, but on Bittensor,” suggesting the team sees centralized inference aggregators as the competitive benchmark to beat.

Advertisement

The numbers behind the integration

Bittensor’s Chutes subnet, designated SN64, processes between 100 billion and 120 billion tokens per day. Between 20% and 25% of that traffic routes through OpenRouter, making Chutes one of the platform’s top inference providers. Multiple other Bittensor subnets, including Targon and Nineteen, are also operational on OpenRouter, enabling decentralized inference through standard API access.

OpenRouter itself just raised $113 million in May 2026, led by CapitalG, Google’s independent growth fund. That round valued the company at $1.3 billion, reflecting surging enterprise demand for unified multi-model routing.

Users accessing Bittensor-powered models through OpenRouter don’t need to own TAO tokens. They interact through OpenAI-compatible APIs, the same interface developers already use for GPT models.

Why confidential routing matters

TEE-based confidential routing produces hardware-backed proof that data was processed securely, rather than relying on a provider’s privacy policy. For Bittensor’s subnet economy, this creates a new competitive dimension where miners compete on privacy guarantees, routing efficiency, and payment flexibility simultaneously.

What this means for investors

OpenRouter’s $1.3 billion valuation signals that enterprise customers are willing to pay for multi-model routing. Bittensor subnets competing within that marketplace as top providers demonstrates decentralized inference is commercially competitive.

For the TAO token, the OpenRouter integration means adoption can scale through traditional API channels while the token captures value at the infrastructure layer through staking, registration, and validator incentives, even though end users don’t need to hold the token.

Bittensor needs to demonstrate that TEE-based confidential routing can maintain the throughput levels its subnets already achieve. Adding encryption and attestation to every query introduces computational overhead. Whether miners can absorb that cost while remaining price-competitive with centralized alternatives will determine how quickly this architecture gains traction.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.