Organization Name – DeBox

Category – Experiences

About

powered by irmaAI

DeBox is a Singapore-based decentralised social platform launched in March 2022 that positions privacy and data ownership as its central value proposition. Users manage their identity through blockchain wallets rather than centralised accounts, communicate via end-to-end encrypted channels, and participate in community groups tied to on-chain credentials — holding a specific NFT or token may be the prerequisite for accessing a particular community space. The thesis is a direct challenge to conventional social platforms: if your identity belongs to a protocol, not a company, you cannot be… deplatformed by a policy change.

The privacy claim warrants close examination. There is a meaningful difference between “your data is on a blockchain” and “your data is private.” Blockchains are by default public ledgers — any transaction, credential, or group membership recorded on-chain is visible to anyone with access to the chain explorer. End-to-end encrypted messaging stored off-chain with on-chain key management is a different architecture, and whether DeBox’s implementation actually achieves user privacy or merely claims it requires reviewing the technical design rather than the marketing framing. Similarly, wallet-based identity means pseudonymity, not anonymity — a sophisticated adversary can often link wallet addresses to real identities through on-chain transaction patterns. Our analysis of identity verification in the AI era is relevant context for thinking through what blockchain identity actually protects.

The 260,272 X followers without certification and MES of 23.07 (39th percentile, trust Medium) are above-average marketing signals. The VBTS of 3.28 (13th percentile) is substantially below median, indicating limited transparency on team, governance, and security disclosures. DeBox is Unverified under VaaSBlock’s RMA framework. Users entrusting sensitive communications to any privacy-claiming platform should independently verify the cryptographic implementation, understand what data is stored where, and assess the legal jurisdiction of the operating entity before treating the platform as a secure communication channel. Read More