Jason Dreyzehner
@bitjson
Followers
5K
Following
2K
Media
105
Statuses
1K
Software security, markets, and bitcoin cash. Working on $BCH and @Bitauth, previously @BitPay. Lead maintainer @ChaingraphCash, @Libauth, and @BitauthIDE.
New Hampshire
Joined November 2009
In the rest of this thread, I'll describe CashTokens and why I think they're an important tool for expanding financial access and protecting human rights.
4
13
74
@NeptuneCash @Starknet October thread:
October 2025: no one has built a ZK prover that is: 🥷 Actually zero-knowledge, ⚛️ Quantum ready, and ⚡️ Reasonably succinct for one-off proofs (<100KB). This is a feature request from a future enthusiastic user/supporter 🚀
0
0
3
Like last month, @NeptuneCash's Triton VM seems to be in the lead, with post-quantum ZK proofs under 1MB. @Starknet appears to be capable of even smaller proofs, but not currently zero-knowledge. More discussion about adding privacy last month, though:
Will @StarkWareLtd do it?
1
0
6
November 2025: no one has built a ZK prover that is: 🥷 Actually zero-knowledge, ⚛️ Quantum ready, and ⚡️ Reasonably succinct for one-off proofs (<100KB). This is a feature request from a future enthusiastic user/supporter 🚀
5
6
44
Bitcoin devs: are there any use cases for SIGHASH_NOINPUT, SIGHASH_ANYPREVOUT, or similar proposals which aren't already more efficient in CashVM? IIRC, CashVM's data signatures, introspection opcodes, and/or token commitments are more efficient in every case I reviewed.
@4moonsettler @TheBCHPodcast @dimahledba @bchautist Can you share more about the end use case(s) you’re thinking about? IIRC, the various BTC SIGHASH proposals are local-maximum solutions that only make sense given BTC’s other limitations, i.e. SIGHASH_NOINPUT could simplify Lightning Network details on BTC, but it would just be
0
4
26
The new VM Limits on Bitcoin Cash mean most financial apps never need to worry about performance again. Loans, derivatives, and market makers all run easily within limits, and even cryptographic math is now practical. BCH architecture handles it in parallel without slowing the
2
8
36
🚨🚨🚨BCH BANK RUN v16.0 (15th October 2025 )!!🚨🚨🚨 The @bchblaze schedule edition! Make sure to mark down the sessions for this weekend to be up to date with the coolest hackathon in crypto! Q: What is this? A: The BCH community is experimenting with exposing the naked
1
7
37
@EliBenSasson _ZK_ STARKs, or just STARKs? Eager to use truly zero-knowledge Stwo proofs!
0
1
5
Following the successful completion of last year's goals, we're launching a Flipstarter campaign for the ongoing development of CashScript '25-26. campaign link: https://t.co/B4hC8UFhsU Read on for details! 👇
1
15
30
@seagodcrypto @StarkWareLtd @0xMiden @midnightfdn ZK teams: if your on-chain verifier works on ETH, it can now be ported to BCH for significantly higher compute limits and lower fees:
Resharing Q&A from a dev team: "what is the status of Bitcoin Cash in terms of Bitcoin Script and the latest Bitcoin soft forks? SegWit, Taproot?" Me: BCH is computationally equivalent to ETH now, but BCH has significantly higher compute limits and lower fees. As of May 2025,
1
3
21
@seagodcrypto @StarkWareLtd @0xMiden The next version of @midnightfdn's ZK proofs could be lattice-based, putting it in the running here too: https://t.co/ifv4OPapST
@bitjson We're working on privacy-preserving lattice-based crypto at @midnightfdn Current version of Midnight is using SNARKs, but we're actively developing the lattice (post-quantum) version
1
0
4
@seagodcrypto @StarkWareLtd Miden VM by @0xMiden also looks very promising – they're aiming for full ZK privacy before going to mainnet in early 2026:
@bitjson @0xMiden @zkGaylord @UHaboeck The proofs don't have perfect ZK yet. This is not so much of the VM concern as the concern of underlying proving system. Currently, we are using Winterfell, which doesn't have perfect ZK (though, there is a PR to add it: https://t.co/oWFJtMI5qx). We are very likely to move to
2
0
4
@seagodcrypto Stwo-cairo by @StarkWareLtd is also very promising – appears to have industry-leading proving times, verification cost, and proof sizes. While Stwo proofs aren't yet zero knowledge, privacy is on their roadmap (see last month's discussion too).
1
0
5
So far, @seagodcrypto's Triton VM seems to be in the lead, with the smallest post-quantum ZK proofs weighing in under 1MB:
@bitjson @adrien_lacombe @seagodcrypto @feltroidPrime Here is the result of `ls -al` in a directory with stored proofs. The size column gives you an idea. The smallest is 533 KB, and the largest is 1.176 MB. https://t.co/dAu0nvbpym
3
1
7
My request last month focused on STARKs (some great discussion in the replies), but I'm interested in hearing about any ZK system that meets these requirements!
Can anyone help me find a STARK prover that is actually zero knowledge, i.e. no data leaked by proofs? Have any ZK-STARK systems shipped to production yet?
1
0
8
October 2025: no one has built a ZK prover that is: 🥷 Actually zero-knowledge, ⚛️ Quantum ready, and ⚡️ Reasonably succinct for one-off proofs (<100KB). This is a feature request from a future enthusiastic user/supporter 🚀
4
10
56
The Bitcoin Cash Podcast #161: Functions, Quantumroot & STARKS feat. Jason Dreyzehner Discover the cutting-edge advancements in Bitcoin Cash with Episode #161 of The Bitcoin Cash Podcast, featuring Jason Dreyzehner! Dive into discussions on the 2026 CHIP proposals like
The Bitcoin Cash Podcast #161: Functions, Quantumroot & STARKs feat. @bitjson Honestly, a must watch episode. Jason explains BCH progress to Functions lock-in, acceleration to quantum secure wallets, ZK tech, ransom protection & more. BCH > everyone. No hype, just results.
0
6
25
The 2025 Limits upgrade opened the door wide for privacy apps on Bitcoin Cash. Zero-knowledge proofs, snarks, and starks are no longer just theoretical. They are now practical to build, even if not yet single-transaction simple. With loops aside, the way forward is clear for both
2
6
26