skip to content - Halo2 in 2026: what changed since the Zcash era
- PPST: extending SPST to arbitrary private computation
- Recursive proof composition without the abyss: Halo to Nova
- Plonky3, the small-fast-cheap revolution
- WASM-native proving for ZK SDKs: an SDK author's take
- On the death of the trusted setup
- TAB: hiding the submitter with ring signatures and FROST
- Bayer-Groth verifiable shuffles for network-layer privacy
- UPEE: composing SPST + PPST + TAB into one framework
- x402 Vector 6: AI-agent wallet drain via slow-burn pricing
- Fitting F_RP in 656 bytes on Solana
- x402 Vector 9: amount-string parser fuzzing
- F_RP vs Zcash, Tornado, RAILGUN, Aztec, Penumbra, Aleo, Namada, Monero
- MEV resistance: why UPEE is sandwich-proof by construction
- The post-quantum migration path: lattice commitments, STARK wrapping, isogeny credentials
- x402 Vector 1: settlement race condition
- x402 Vector 2: partial-signing instruction injection
- x402 Vector 3: facilitator gas drain
- Zera Wallet v3: ZK Proofs in a Tauri Webview
- Building the ZERA Wallet for desktop, iOS, and Android
- 144 Tests and a Surfpool Devnet
- Pedersen commitments, in production
- Nullifiers without the witchcraft
- The MCP server inside zera-sdk
- Range proofs in 80 lines: Pedersen commitments and a tiny Bulletproof
- Block explorers for privacy chains: a Rust indexer for vanta
- Stratum v1, the from-scratch Python version
- Generating mempool with a Rust txbot
- iroh in production: encrypted-note gossip on a 1-minute-block chain
- The vanta sidecar: how a Rust ZK indexer talks to a C++ Bitcoin node
- Cross-compiling vantad for darwin: Apple Silicon, sign + notarise
- The vanta wallet HTTP API: an Axum bridge to vantad RPC
- Latitude bare-metal primary, Fly.io backup: the deploy story for a 1-min-block chain
- Vanta Desktop: a Tauri wallet that ships its own full node
- Tauri 2.x sidecars in anger: the ergonomics paper-cuts I had to fix
- BIP-199 by hand: a code walk through vanta-swap
- What's in vanta/papers — reading 17 design docs in 2026
- Privacy's broadband moment
- Why BN254, and when to switch off it
- Mining VANTA with a Bitaxe BM1368
- btc-tunnel.sh: SSH-jumping into a remote bitcoind for swap testing
- Why we shipped SP1 instead of RISC Zero
- L1 nullifier sets: enforcing no-double-spend at consensus
- Private atomic swaps and the price-discovery problem
- Vanta: a Bitcoin fork with ZK at consensus
- The unified dashboard: collapsing private and transparent into one wallet view
- Being CEO and still shipping code
- Stuck Sell, Post-Graduation: Fixing a Trapped-Funds Bug Without a Redeploy
- Poseidon, by hand and by code
- Relayerless privacy on a Turing-complete L1: an intro to F_RP
- The fee paradox: why every smart-contract privacy mixer needs a relayer
- Merkle inclusion proofs over compressed account state on Solana
- Proving in the browser, by the numbers
- Circom, by example
- SPST: a self-paying shielded transaction model
- From sailor to CEO in three acts