# Proposal 142743: Creating the second SEV-enabled Subnet

**URL:** <https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370>\
**Category:** Developers\
**Tags:** Proposal, Trusted-Execution-Environments\
**Created:** [July 8, 2026, 5:14am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370 "2026-07-08T05:14:59Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\
**Post date:** [July 8, 2026, 5:14am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/1 "2026-07-08T05:14:59Z")

</div>

Hello everyone,

We have just submitted [proposal 142743](https://dashboard.internetcomputer.org/proposal/142743) to create a new confidential subnet! This follows our first SEV-enabled subnet, which has been running smoothly and securely for almost six months now.

We considered whether to transition an existing subnet. However, we propose to create a brand-new subnet instead to ensure maximum security as this allows to start with a completely fresh state. Transitioning an existing subnet would mean carrying over old, non-confidential state, which could compromise the strict security guarantees we want to achieve.

Thanks a lot for your support. Happy voting!

---

<div class="post-metadata">

**Author:** ![MeneseProtocol](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/meneseprotocol/32/33958_2.png) [@MeneseProtocol](https://forum.dfinity.org/u/MeneseProtocol)\
**Post date:** [July 8, 2026, 7:56am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/2 "2026-07-08T07:56:45Z")

</div>

If this is running the Mulitdex would it have threshold curves signing enabled? Would it have a key like key\_3 or something or we still have two the test and fiduciary?

---

<div class="post-metadata">

**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\
**Post date:** [July 8, 2026, 8:30am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/3 "2026-07-08T08:30:37Z")

</div>

At the moment, there is no plan for the subnet to host another threshold signing key.

---

<div class="post-metadata">

**Author:** ![ZackDS](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/zackds/32/40368_2.png) [@ZackDS](https://forum.dfinity.org/u/ZackDS)\
**Post date:** [July 8, 2026, 4:34pm UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/4 "2026-07-08T16:34:12Z")

</div>

The proposal states:  
“Initially, it is intended to host the upcoming MULTI/DEX, which benefits from the stronger security and confidentiality properties that this environment provides.”

1. does this mean it will be authorized only not open to public ?
2. why not just use the 1st existing one with only 1.1 GB state and 40 something canisters basically low to no usage so far ?

---

<div class="post-metadata">

**Author:** ![Lorimer](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/lorimer/32/17601_2.png) [@Lorimer](https://forum.dfinity.org/u/Lorimer)\
**Post date:** [July 8, 2026, 9:35pm UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/5 "2026-07-08T21:35:01Z")

</div>

Thanks for creating a post for this proposal @rbirkner

I see that the proposed subnet type is “application”. Wouldn’t “verified application” be more appropriate as a subnet that is intended to run one specific product. I think that’s exactly what “verified application” subnets are supposed to be (whether or not some of them haven’t entirely kept to this definition). I’d expect it to be the right type in this scenario.

Given that this isn’t going to be a “system” subnet, and the cycles for its canisters will therefore need funding, presumably DFINITY will be responsible for funding the cycles?

Once the core components of [Jupiter Faucet](https://jupiter-faucet.com/) are blackholed, I wonder if DFINITY would consider making use of this to ensure MULTI/DEX is perpetually funded with cycles, permanently. This is Jupiter Faucet’s core principle, such that users are no longer dependent on any maintainer keeping a product topped up (as though it were on a “system” subnet, but with the benefit of ICP burn).

[https://x.com/JupiterFaucet/status/2069836947653005478](https://x.com/JupiterFaucet/status/2069836947653005478)

---

<div class="post-metadata">

**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\
**Post date:** [July 9, 2026, 8:24am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/6 "2026-07-09T08:24:41Z")

</div>

Hello everybody

A few answers/comments to your posts @ZackDS and @Lorimer:

_Will it be authorized? Why application and not verified application?_  
Initially, there will be one authorized principal to install the MULTI/DEX. However, in the longterm, the subnet will see more applications and will not be dedicated to the MULTI/DEX.

\*Why not use the existing SEV subnet (re2t4)  
In general, there should/will be more SEV subnets. We have the code, the tech and also the confidence since the first one has been running without issues for almost 6 months. To get more SEV subnets, there are two ways: (1) replace all nodes in an existing subnet with SEV-enabled nodes, and (2) create a new subnet with only SEV-enabled nodes. For security reasons, it is better to create a new subnet without any “baggage” from the old times. This will of course not work for subnets that already have a lot of canisters and state. Soon subnet deletion will go live, which will allow to delete existing unused subnets and, potentially, “replace” them with SEV subnets.

_DFINITY will be responsible for funding the cycles_  
Exactly, MULTI/DEX will be launched in play mode and DFINITY will be providing for the cycles consumed by the canister.

---

<div class="post-metadata">

**Author:** ![ZackDS](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/zackds/32/40368_2.png) [@ZackDS](https://forum.dfinity.org/u/ZackDS)\
**Post date:** [July 9, 2026, 8:55am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/7 "2026-07-09T08:55:18Z")

</div>

# Proposal #[142743](https://dashboard.internetcomputer.org/proposal/142743) — Zack | [IC Hub-T](http://localhost.)

**Vote** : Adopted

**Reason** :  
Creates the 2nd TEE-enabled Subnet on IC, initially to be used by MULTI/DEX.

Payload:

```auto
canister_cycles_cost_schedule:"Normal"
sev_enabled:true 
subnet_type:"application"

```

✅

All 7 nodes are GEN2 `Healthy` unassigned.

- HongKong [7bleq](https://dashboard.internetcomputer.org/network/nodes/7bleq-vzj5q-mobkz-65vdq-jgg74-lcagl-eymu2-ry7xv-hv43p-5dds3-vqe) has TEE active.
- Seoul [bi2ik](https://dashboard.internetcomputer.org/network/nodes/bi2ik-i6d53-ajyvg-sw4vw-56pyk-wttfn-k4dlb-v44p7-ziewe-medig-gqe) has TEE active.
- Melbourne [oqbh3](https://dashboard.internetcomputer.org/network/nodes/oqbh3-jibyz-mt4jp-tvx7b-ihsko-sqzzn-xewop-phrm7-retgr-mybm7-cqe) has TEE active.
- Gauteng [5jeex](https://dashboard.internetcomputer.org/network/nodes/5jeex-q4ozq-shrut-ewqms-lejxq-auuqy-6qve3-kdg2i-4ksk5-oqw3z-2qe) has TEE active.
- Warszawa [476bb](https://dashboard.internetcomputer.org/network/nodes/476bb-35eh4-glf5y-7t5ne-y6sb6-a7bzb-mnail-djfqh-sc6z3-z3rnp-tae) has TEE active.
- San José [gfeqv](https://dashboard.internetcomputer.org/network/nodes/gfeqv-7ndps-okvma-qxwsi-ozk4x-b5wyp-hzwmb-v6g5t-dmen4-aff4d-zae) has TEE active.
- Navi Mumbai [s3hb6](https://dashboard.internetcomputer.org/network/nodes/s3hb6-vj3fk-yl5u4-sjq2t-eq4ha-evq2q-3dvz3-rqfxz-lxzbb-j6gi4-pqe) has TEE active.

☑

* * *

---

<div class="post-metadata">

**Author:** ![ZackDS](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/zackds/32/40368_2.png) [@ZackDS](https://forum.dfinity.org/u/ZackDS)\
**Post date:** [July 9, 2026, 10:20am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/8 "2026-07-09T10:20:54Z")

</div>

> [@rbirkner](#):
>
> will be one authorized principal to install the MULTI/DEX

This will require a `Set Authorized Subnets` proposal, ~~and given that today is already Thursday and Dfinity did not vote yet on this, I think it’s safe to assume it will be a Monday launch at earliest~~.  
Looking forward to the subnet deletion option.

---

<div class="post-metadata">

**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\
**Post date:** [July 9, 2026, 11:27am UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/9 "2026-07-09T11:27:27Z")

</div>

Hello everyone,

the proposal just passed and the second SEV-subnet has been created: [x4jtx-5dnbo-v3exa-vzamo-teufh-qsiit-txx4g-mi76n-ckrfl-oc5a6-nae](https://dashboard.internetcomputer.org/network/subnets/x4jtx-5dnbo-v3exa-vzamo-teufh-qsiit-txx4g-mi76n-ckrfl-oc5a6-nae). The proposal to authorize the principal will follow shortly.

---

<div class="post-metadata">

**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\
**Post date:** [July 9, 2026, 1:39pm UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/10 "2026-07-09T13:39:37Z")

</div>

We have just submitted the proposal to authorize the principal to deploy MULTI/DEX:  
[https://forum.dfinity.org/t/multi-dex-the-worlds-most-advanced-defi/74316/7](https://forum.dfinity.org/t/multi-dex-the-worlds-most-advanced-defi/74316/7)

---

<div class="post-metadata">

**Author:** ![flash](https://avatars.discourse-cdn.com/v4/letter/f/f475e1/32.png) [@flash](https://forum.dfinity.org/u/flash)\
**Post date:** [July 9, 2026, 3:05pm UTC](https://forum.dfinity.org/t/proposal-142743-creating-the-second-sev-enabled-subnet/74370/11 "2026-07-09T15:05:51Z")

</div>

What would be the latency of trades given the consensus?
