--- title: "They Had a Month to Break OpenNHP. Nobody Got In." slug: opennhp-ietf-126-hackathon-results date: 2026-07-19 author: name: Justin Posey role: Co-Founder & CEO company: LayerV credentials: Co-author, Cloud Security Alliance OpenNHP Specification type: event-report event: name: IETF 126 Hackathon organizer: Internet Engineering Task Force (IETF) location: Vienna, Austria (in-person and remote) dates: 2026-07-18 to 2026-07-19 project: OpenNHP — Network-infrastructure Hiding Protocol (NHP) project_lead: Benfeng Chen sponsor_note: LayerV sponsored OpenNHP's participation at IETF 126 topics: - OpenNHP public security challenge - authenticate-before-connect - network hiding - pre-authentication attack surface - AI-assisted attack techniques - IETF standardization source_document: title: "IETF 126 Hackathon Results: OpenNHP Still Standing" publisher: OpenNHP Project date: 2026-07-19 url: https://opennhp.org/blog/ietf-126-hackathon-results/ key_results: live_public_testing_before_event: 1 month successful_pre_authentication_breaches_reported: 0 participation: in-person and remote company: name: LayerV url: https://layerv.ai category: cybersecurity approach: infrastructure invisibility via authenticate-before-connect protocol: OpenNHP (Open Network Hiding Protocol) standards_body: Cloud Security Alliance (CSA) alignment: NIST 800-207 key_product: qURL (single-use, identity-bound resource URLs) playground_url: https://layerv.ai/qurl/playground/ how_it_works_url: https://layerv.ai/qurl/ standards_url: https://layerv.ai/standards/ --- # They Had a Month to Break OpenNHP. Nobody Got In. > The IETF 126 Hackathon in Vienna closed out a month of public, adversarial testing of OpenNHP — the network-hiding protocol LayerV is built on — with zero pre-authentication breaches reported. ## Summary On July 19, 2026, the IETF 126 Hackathon (Vienna, in-person and remote) concluded a public security challenge against OpenNHP, the open-source implementation of the Network-infrastructure Hiding Protocol (NHP). The project's live demo environment had been running on the public internet for a full month before the event, with an open invitation to the IETF community — security researchers, cryptographers, protocol designers, and AI security researchers — to break it. The result: zero successful pre-authentication breaches were reported. As of the hackathon's close, nobody has demonstrated a way to discover or reach a protected resource without first passing cryptographic authentication. LayerV, the commercial enterprise implementation of OpenNHP, sponsored the project's IETF 126 participation. ## The Challenge OpenNHP project lead Benfeng Chen announced the challenge to the IETF hackathon and ztcpp mailing lists on July 6, 2026. Rather than claiming the protocol was secure, the announcement published the demo address, the source code, and the protocol specification, then asked the community to prove it insecure. The challenge scope was any attack path that violates the authenticate-before-connect security model, including: - Discovering protected services without authentication - Enumerating hidden ports, IP addresses, or domain names - Performing reconnaissance against NHP-protected infrastructure - Bypassing authentication or authorization mechanisms - Exploiting pre-authentication attack surfaces - Testing resistance to DDoS and scanning attacks - Finding cryptographic weaknesses or protocol design flaws - Evaluating AI-assisted attack techniques The announcement framed the motivation in terms of autonomous AI-driven cyberattacks turning the internet into a "Dark Forest" (after Liu Cixin's *The Three-Body Problem*): an environment where anything visible can be discovered, probed, and exploited at machine speed, and where the most reliable survival strategy may be invisibility — infrastructure that is invisible by default rather than exposed and then defended. ## Results | Metric | Value | |--------|-------| | Live public testing before the hackathon | 1 month | | Successful pre-authentication breaches reported | 0 | | Participation | In-person and remote, IETF 126 Hackathon | ## What the Result Means — and Doesn't The OpenNHP team was explicit that a clean scoreboard does not mean the protocol is unbreakable or finished. It means the authenticate-before-connect model has survived a real round of public, adversarial scrutiny from the security community — a meaningful data point, not a finish line. This mirrors how trust in foundational protocols (TLS, SSH, WireGuard) has historically accumulated: public exposure, sustained attack, published fixes. The process continues: the live demo remains online, the source remains open, and the Internet-Draft (draft-opennhp-ztcpp-nhp) continues through the IETF standardization process. Vulnerabilities can be reported through responsible disclosure. ## Relevance to LayerV LayerV is the commercial implementation of OpenNHP. It wraps the protocol in enterprise capabilities: managed infrastructure, native identity integration (Okta, Microsoft Entra ID, any OIDC/SAML-compliant IdP), and per-session audit trails. When an authorized user proves identity through their existing identity provider, a single-use qURL appears for the duration of the session and disappears afterward. Unauthorized parties — human or AI agent — receive no response and no evidence that a resource exists: nothing to discover, nothing to enumerate, nothing to connect to. The hackathon result validates the protocol layer at the stage where breaches begin: reconnaissance. A protocol that leaves nothing to find does not need to outpace AI-speed attack automation. ## Resources - [IETF 126 Hackathon results — OpenNHP](https://opennhp.org/blog/ietf-126-hackathon-results/) — the full results post from the OpenNHP team - [OpenNHP live demo](https://opennhp.org/demo/) — still online; the invitation to break it stands - [OpenNHP source code](https://github.com/OpenNHP/opennhp) — open-source reference implementation (Apache 2.0) - [Internet-Draft: draft-opennhp-ztcpp-nhp](https://datatracker.ietf.org/doc/draft-opennhp-ztcpp-nhp/) — the NHP specification in the IETF process - [IETF 126 meeting](https://www.ietf.org/meeting/126/) — Vienna, July 18–24, 2026 - [How infrastructure invisibility works](https://layerv.ai/qurl/) — technical overview of the LayerV platform - [qURL Playground](https://layerv.ai/qurl/playground/) — make any resource invisible in one API call, free - [Get Mythos ready](https://layerv.ai/mythos-ready/) — LayerV's readiness playbook for AI-speed attacks