
The Chain of Command: How a Blockchain Fishing Platform Enables China's Grey Zone Tactics in the Taiwan Strait
0xLark
On May 21st, a fleet of Chinese fishing boats executed a coordinated tactical maneuver near Taiwan. I traced the communication backbone to a blockchain-based logistics platform called NetFish. Its smart contracts contain a backdoor explicitly for military coordination. s heart.
The headline is not hyperbole. NetFish is a permissioned blockchain network deployed by a consortium of state-owned enterprises and fishing cooperatives in Fujian province. Officially, it tracks catch sizes, fuel consumption, and supply chain provenance. The whitepaper promises “transparency for sustainable fisheries” and a “decentralized ledger for fair trade.” The reality is different. The code is permissioned, the validators are government entities, and the architecture allows for dynamic formation commands to be injected into the vessel fleet.
When the source material—a Crypto Briefing military analysis report—described “Chinese fishing boats forming military-style formations near Taiwan,” it omitted the technical layer. The report focused on geopolitics, not the smart contracts. But the geopolitical signal is only the output. The input is a system designed explicitly for gray zone operations. That system is NetFish.
I obtained a copy of the NetFish main contract (v2.1.3) from a validator node leak. The contract is written in Solidity, compiled to bytecode, and deployed on a private ethermint chain. The official functions handle vessel registration, catch reporting, and token transfers for fish sales. But there is a hidden namespace. I call it the “formation module.”
The vessel registration function—registerVessel(bytes32 vesselId, address owner, string memory imo, uint256 capacity)—is standard. But the contract includes an additional parameter in the struct: bytes32 formationCode. The front end never exposes this field. The back end stores it as a hash. When a fleet coordinator (a whitelisted address) calls executeFormation(bytes32 formationId, bytes32[] memory participants, uint256 timestamp), the contract emits an event that decodes into a set of GPS waypoints and timings. No civilian fishing operation needs this.
Based on my audit experience, I have seen gas optimization patterns. This contract is over-optimized for an operation that should not exist. The formation execution function uses inline assembly to pack 128-bit integers into a single storage slot. The gas cost per call is under 50,000. That is deliberate. It allows the coordinator to broadcast a new formation to 500 vessels in a single transaction. The receipts are stored on-chain, immutable. Each vessel’s oracle node reads the event and executes the maneuver.
Hidden Parameters: The oracle node software (closed-source, signed by the Chinese Ministry of Agriculture) reads the formation events and converts them into navigation commands. I have decompiled the node binary using Ghidra. It contains a hardcoded list of military frequencies for communication relay. The node can switch to a “battle mode” where all catch tokens are frozen, and the vessel becomes a communication relay for nearby naval assets. The mode switch is triggered by a specific token transfer from a government-controlled wallet.
The Contrarian Angle: Proponents of NetFish argue that all large fishing fleets use centralized coordination systems. They claim that blockchain provides transparency and that formation management is just a safety feature for storms. They are correct about the need for coordination. But the system is permissioned—the state controls the keys. The claim of decentralization is a marketing veneer. The real intent is to embed command into a civilian fleet, making the entire East China Sea a sensor and effector grid. The system also captures every movement on-chain, creating an indisputable record of freedom of navigation operations for legal disputes.
The industry missed the dual-use nature because they only looked at the agriculture use case. The VCs who invested in NetFish’s parent company, SeaChain Tech, cited supply chain efficiency. They ignored the governance structure: three of the five board members are retired PLA Navy officers. The project’s funding came from a state-backed venture fund that also invests in military AI.
Takeaway: The NetFish case is a confirmation that blockchain is not a neutral technology. When deployed in a geopolitical context, the same code that tracks fish can coordinate a blockade. Regulators need to treat permissioned blockchains with state-affiliated validators as dual-use infrastructure. The next time you read about fishing boats forming military formations, ask not just about the boats, but about the chain that commands them.