Tags → #zk
-
Hot Potato: the floor that won't budge (unless you're math)
TATER is a potato with a hidden floor that is proven never to drop and a reserve proven to cover every holder. Built on the shielded-note stack I've been assembling for Zera and Vanta. A plain-English tour of what a ZK proof actually buys you.
-
Hot Potato post-mortem: the floor held, the token didn't matter
Four days of TATER on mainnet, every trade on one chart. The proven floor did exactly what it promised and was irrelevant to the price the whole time. What went wrong, what held, and how I would build the next one.
-
The post-quantum migration path: lattice commitments, STARK wrapping, isogeny credentials
Series finale. Shor's algorithm breaks every elliptic-curve assumption F_RP currently rests on. The migration: lattice polynomial commitments (Brakedown/Orion), hash-based STARKs as universal backend, isogeny group actions for credentials.
-
MEV resistance: why UPEE is sandwich-proof by construction
Theorem 7.3 — UPEE transactions resist sandwich/frontrun/liquidation MEV by construction. Theorem 7.4 — block MEV bounded by public-bit leakage, not transaction value. Independent of V, not super-linear.
-
F_RP vs Zcash, Tornado, RAILGUN, Aztec, Penumbra, Aleo, Namada, Monero
F_RP vs nine deployed privacy systems on the four axes that matter: relayer-free, Turing-complete, on-chain verifiable on a high-perf L1, low-trust setup.
-
Fitting F_RP in 656 bytes on Solana
Concrete F_RP instantiation on Solana. Groth16 over BN254, Poseidon Merkle, indexed nullifier tree, BN254 Pedersen, transaction in 656 of 1,232 bytes, 235K of 1.4M CU.
-
UPEE: composing SPST + PPST + TAB into one framework
F_RP Construction IV. The five-algorithm tuple Setup/Deploy/Invoke/Verify/Finalize plus the simulation-based privacy theorem (3.12) and self-sovereignty theorem (3.13). The composition that makes the whole thing deployable.
-
Bayer-Groth verifiable shuffles for network-layer privacy
F_RP Construction III, Approach C. Bayer-Groth verifiable shuffles obscure the input→output permutation of a batch with O(√n) proof size — used to cascade-mix pre-broadcast batches at the network layer.
-
TAB: hiding the submitter with ring signatures and FROST
F_RP Construction III. ZK proofs hide the contents but the wrapping Solana tx still leaks the submitter pubkey. TAB closes that gap with a Fujisaki-Suzuki ring signature and a FROST threshold Schnorr over Ed25519.
-
On the death of the trusted setup
Universal SRS, transparent FRI, and why Groth16's per-circuit ceremony feels anachronistic in 2026 — even when, as ZERA does, you're still using one. A history of the ceremonies that worked, the ones that didn't, and what comes next.