xFeed: Blockchain Oracle Integrity

The Problem

Blockchain oracles are single points of failure for DeFi. A single manipulated price feed can drain entire protocols. Oracle manipulation has caused hundreds of millions in losses through flash loan attacks and feed corruption.

DeFi protocols depend on oracles to bring off-chain data (prices, events, weather) onto the blockchain. When a protocol trusts a single oracle source, that source becomes the highest-value attack target in the entire system. Flash loan attacks manipulate oracle prices within a single transaction to drain lending protocols.

Current oracle solutions aggregate multiple sources but do so transparently -- the aggregation logic is visible on-chain and can be gamed. Weighted median oracles can be manipulated by corrupting a critical mass of visible sources. There is no mechanism ensuring that individual source data remains private until threshold aggregation produces the final value.

The Old Way

The PRIVATE.ME Solution

xFeed splits oracle data across independent providers using XorIDA. Threshold reconstruction prevents single-source manipulation. Reputation scoring weights providers based on historical accuracy.

Data is published through publishMessage(), which splits each message into N HMAC-signed shares distributed across independent channels. Each channel holds only its share. A subscriber created via subscribe() collects K-of-N shares, verifies HMAC integrity, and reconstructs the message. No individual share reveals the underlying value until threshold reconstruction.

A built-in reputation system tracks provider accuracy over time. Providers whose shares consistently reconstruct to values that deviate from the consensus are penalized. This creates economic incentives for honest oracle provision while using XorIDA's information-theoretic guarantees to prevent preview of individual submissions.

The New Way

How It Works

Oracle data flows through a three-stage pipeline: independent submission, threshold aggregation with HMAC verification, and reputation-weighted consensus output.

Use Cases

Integration

import { createFeedManager } from '@private.me/xfeed';

const manager = createFeedManager();

// Create an encrypted feed
await manager.createFeed('market-data', {
  name: 'Real-time Market Data',
  description: 'Live stock quotes and trades',
  category: 'financial',
  messageRate: 1000
});

// Publish a message split into 3 shares (2-of-3 threshold)
const payload = new TextEncoder().encode(JSON.stringify({ ticker: 'AAPL', price: 150.25 }));
const published = await manager.publishMessage('market-data', payload, {
  threshold: 2,
  totalShares: 3,
  enableProofs: true
});

// Subscribe to the feed (messages reconstructed from threshold shares)
const subscription = await manager.subscribe(
  'market-data',
  'did:key:z6Mk...',
  async (message) => {
    const data = JSON.parse(new TextDecoder().decode(message.payload));
    console.log('Received:', data);
  },
  { verifyMessages: true, enableAudit: true }
);

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xFeed?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xFeed generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases