1/15
The scalability of a
#zkRollup
IS NOT limited by the prove.
I'm detecting some missunderstandings of how a zkRollup works.
Let me explain in this thread why the prover is not the limiting factor and what are the actual limitetions of zk ( and optimistic ) rollups.
I'm very excited to present next Thursday at "Polygon zk day" PIL (Polynomial Identity Language). The language we in
@0xPolygonHermez
created to define the state machines used in the zkEVM prover. People interested can register here:
1/3
In the last weeks we started the audits for the
@0xPolygon
#zkEVM
.
We are also in the final steps before before the launch of what should be the last testnet before mainnet.
Here are some of the updates:
* Proving time 2.5min in a 7$/h AWS instance.
We just finished the most important upgrade of the Polygon
#zkEVM
since the launch. It has not been an easy task. I want to thank you to the whole
@0xPolygon
team for the hard work. Now it's time for the users to enjoy pairings, sha256, and more. Lets continue scaling
#ethereum
Yesterday, I received a prestigious prize from the telecommunications engineering and computer science community in Catalonia.
I used my speech to spur the audience to dig into the blockchain tech, as it will change the way humans will organise.
Thank you all, it was a honor!
I’m ready for my talk at Polygon Connect in Bogota!
stay tune for a big announcemen!
By far the most important conference i’ve ever given till now!
@0xPolygon
Today, in the "Polygon ZK Day", I'll explain how we are writing the zkEVM prover. As always, my goal will be to go as deep as I can in 30' but at the same time try to explain it in a way that it's understandable for average engineers. Registrations:
This numbers are not accurate.
You can check this TX:
Here there are 1116 transactions and the cost is 2.27MGas.
And we are not applying compression yet..
This is not only Roman's fight, this is the full crypto industry fight. Privacy is a fundamental value required in the decentralized world we are building. I want to thank you and send full support to Roman and to all the devs and lawyers that are in the front line!
2024 is the year that will define the rest of my life.
Honestly, I’m scared. But also hopeful that this community cares with a passion.
Please donate towards my legal defense.
#zkSNARK
proof generator in Web Assembly and parallelised with Web Workers. A 50k constraint proof takes less than 10s to be generated from the browser. This new
@identhree
tool should be very useful in many zk-dApps
@VitalikButerin
@barrywhitehat
@zooko
After two years of hard work things are getting closer to this important milestone.
I want to thank you to the
#zkEVM
team, to the Polygon family and all the Ethereum community for making this possible.
💜💜💜💜💜
1/5
FFLONK is already available in
#snarkJS
!
First of all, I would like thank you 🙏 to
@rel_zeta_tech
and
@Zac_Aztec
from
@aztecnetwork
for creating this amazing protocol.
FFLONK is a zkSNARK protocol like GROTH16 or PLONK with the following advantages:
Just published lots of the zkEVM tech docs.
Official doc is still here:
But we believe that those docs can help go deeper in how the zkEVM works.
Take from the community.
Give to the community.
Be community.
#ethereum
March 27th will be an important date for scaling Ethereum!
A full team has been working really hard to make this possible.
Lets launch the Polygon zkEVM together.
You are all invited!
📢 zkDay 2.0
🗓 MARCH 27
✨Launch of Polygon
#zkEVM
Mainnet Beta✨
The journey to the frontiers of Web3 that will take Ethereum further than ever before ⚡️
special guest ➡️
@VitalikButerin
⬅️ 👏🏿
& we're joining forces w/
@ETHGlobal
[more on that soon]
I just published A CPU zkSnark prover, compatible with
#circom
and
#snarkjs
. It can generate 128M constraints proofs in less than 2min in a 64 core processor.
This is an important piece for
@hermez_network
#rollup
and for
#ethereum
scaling solutions.
Just released:
1. circom: A language and a compiler to create circuits
2. zksnark: A fully implementation of
#zkSNARK
in Javascript
An important step for building
@identhree
: a decentralised, scalable, privacy by default identity system on
#ethereum
Today is the premiere of “SCALE: Zero Knowledge and the Quest for the New Internet” that explains the internals of how the Polygon zkEVM was build.
You can watch it here:
at 17:00CET
After the projection I'll do an AMA on the Polygon discord.
- Catalonia wants to build their digital state.
- Spain wants to censure it.
- Catalonia wants to build a decentralised digital state!
The technology is in its early stages. The pressure from Spain is high. But we, the catalans are committed in making this happen!
El decret de
@sanchezcastejon
és un 155 digital. És un cop d'estat digital a Catalunya. Hem assistit a tancaments de web, d'aplicacions, al filtratge de tràfic a Internet i ara volen il·legalitzar una república que deien que no existia. Doncs bé, existeix i és imparable
Next Sunday, in the
#StarkWareSessions2023
, I'll explain how we at
@0xPolygon
are using infinite recursive STARKs to aggregate many
#zkEVM
L2 batches in a single proof.
Recursive ZK circuits opens a new era in the ZK development space.
Here are the instructions to verify the
@polygon
#zkEVM
mainnet beta deployment.
I believe this must be mandatory for any zkRollup.
Don’t trust, verify.
Plonky2 from Polygon Zero is one of the crucial innovation in the zk space in recent years. I'm sad to see this attitude, this definitively don't help to the open source community. But at the same time, I'm glad to see other projects using their work.
I'm sure they will correct…
Crypto runs on the open source ethos. When projects don’t follow it, the ecosystem suffers.
We were disappointed to see that
@zksync
copied our code without attribution and made misleading claims about the original work, so we wrote this post.
I’m speaking at the Aggregation Cave (hosted by
@0xPolygon
) at ETHDenver. Super excited to cowork, build and get aggregated. Join me on March 1st, at 10 am!
The new is out!
- ZK Proof recursion enabled
- L2 Batch size increased from 4 to 10M gas
- Proof time reduced from 10 to 4 min
- L1 verification with 350K gas
This adds more efficiency and ability to manage the tradeoff between finality time and tx cost.
The world will never thank you enough the
#zcash
people for the work they are doing in the zero knowledge research field.
They are the real throttle for bringing privacy and scalability into the blockchain space! Thank you guys!
Today we released the source code we're working on for Halo 2, a recursive proof composition that improves efficiency and eliminates the need for a trusted setup.
#Zcash
$ZEC
Thank you so much Peter for beeing always there during this 10 years. Looks like yesterday, but I’m sure it has been a long journey since then. You and the whole geth team are a reference for me and for many people in the space! Lets keep buidling!
Completely missed it, but the
#Ethereum
Geth codebase passed 10 years (on Dec 29, 2023) since it's inception 🤯... Starting to feel old here...
For anyone wondering why the "flat-lining", we've introduced squash-merging in 2015, so no more fix1, fix2, fix3 commits.
Auditor/developer FYI, Solidity 0.8.20 introduces a new opcode (PUSH0) that is UNSUPPORTED outside of Ethereum mainnet.
If you compile a contract with 0.8.20 and deploy it to an altchain, it will not work.
@gluk64
@davidsrz
Of course NO.
Main zkEVM: 0xa997cfD539E703921fD1e3Cf25b4c241a27a4c7A
You can read (as a proxy) the property "rollupVerifier": 0x4ceB990D2E2ee6d0e163fa80d12bac72C0F28D52
It's the FFLONK verifier!
The address you are pointing is the last testnet and points to a GROTH16 verifier.
I just want to thank you the
#ethCC
organitzers for the incredible conference. The venue, the organitzation, the talks, the city, really makes you fill in a perfect environment. Hope you continue organitzing it for many years. Thank you!
@AssethFR
Just updated the new token standard EIP-777 with the comments we received from the community and open sourced the reference implementation. Comments are welcome.
I hope one day we have liquid democracy where delegates are elected continuously and no body can censure them. having to go to Strasburg to defend the elected catalans representatives that Spain is censuring is our obligatioon but it’s crazy!
#Estrasburg
#omplimEstrasburg
As I mentioned today, it’s important that smart contracts are verified. You can verify the smart contracts and the verifier in
#polygon
#zkEVM
Please let me know if you run the full process!
The iden3 team is moving full steam ahead to bring tech into production. We just launched a testnet in Görli. This tech is key for scaling decentralised payment systems, self sovereign identities and all other dApps.
Give it a try!
Already back home after a week full of good vives!
After 3 years of no
#devcon
we needed that! (please no more pandemias !! )
Thank you to the orgs for putting it together with so much love ❤️
IMO the best devcon till now !!
Thank you
#ethereum
!!
@LuozhuZhang
@Scroll_ZKP
@0xPolygonHermez
This is not true! All the code is open. We are not hiding any thing. May be there are some pieces that need better documentation that we are writing. But all the repos are open.
Regarding the technical details you mention, open to dicuse them on a white board, not in twitter.
Just installed
#G
örli Package in my
@DAppNode
. Configured the network in
#metamask
, got some GöETH from
@5chdn
and made my first Tx. All that in less than 15' . Having a
#DAppNode
is becoming a must. Specially if you are a dev and you need to keep different chains synchronised.
People mistakenly associate
@0xPolygonLabs
zkEVM, or any word containing ZK, with privacy.
@jbaylina
will seize this opportunity to demonstrate how to build a privacy rollup using the tooling implemented to create the Polygon zkEVM.
Join Privacy Reunion in 🇨🇭 on July 1st!
How do you make fast…faster? Answer: the parallel EVM engine.
TL;DR Researchers at Polygon are excited to announce an innovation to the
#Polygon
PoS chain that will make it up to TWICE 💨 AS 💨FAST 💨
What it means, why it matters👇🏾
I've been learning and understanding about this EIP. I admit I was sceptical when I first read. But now I see that's even better of what I would had done. I fully support this EIP!
Evaluating a polynomial is more efficient than hashing inside a stark. Even if it's cross prime!
I've seen a lot of fear recently that the KZG commitments introduced with 4844/full sharding will be hard to use in ZKRollups.
This is not true! You can make quite efficient use of them in proofs. More details here:
Very productive week at
#decconnect
Incredible organization! Incredible city and incredible weather! Thank you to all organizers! I was very esceptical about this decentralized concept, But the true is that it was a great decission!
#ethereum
#ERC820
is finally "final". This standard will allow to associate a behaviour to a regular account or a contract. Examples: Prevent receiving
#ERC777
tokens or forward a % of the received tokens to a donation account. Next step: finalize
#ERC777
Today at
#DevconV
Room B10 11:30. I'm going to explain how the zero knowledge based Rollup we are building at
@identhree
works. IMO the most promising path for scaling blockchain dApps. Including but not limited to payment systems. 1000TX/s are possible on top of
#Ethereum
1.0
Just published an important version of
#snarkjs
Fast prover, multicurve, browser and node compatible,
#ethereum
smart contract generation. trusted setup ceremony.... Give it a try with the new tutorial! It never has been that easy to write
#zkSnark
apps.
@VitalikButerin
@zooko
We just published a new version of snarkjs. Highlights include:
💻 Native Wasm
⚒️ Tools for trusted setups
(powers of tau and circuit ceremonies)
🌙 Support for both BN128 & BLS12-381 curves
☋ Works with node & in browser
New tutorial in the Readme
The Hermez public testnet is now live! 🔥
The public testnet will support the final round of private testing ahead of the launch of the mainnet in the coming days.
#Hermez
#Ethereum
Guten tag Berlin 👋🏽
While our EMEA tour is coming to an end, we couldn’t leave the region without our flagship event, Polygon Connect!
Save the date for September 16 in Berlin, Germany:
Today we're proud to announce the next generation of our encrypted zkRollup with the same name that started it all:
Aztec.
Aztec is the first ever hybrid zkRollup, enabling both public and private smart contract execution in one environment.
It's Ethereum, encrypted.
👇
2/15
The first step is keeping the network synchronised. This is not specific to a zkRollup, this is the same for any chain (L1, L2, .., L43, zk, optimistic, side-chain, etc)
Tomorrow at
@ethcc
, I will go deep into the
#zkEVM
. At the same time I will try to keep the explanation simple for anyone to understand.
You will not regret attending... 🧐
@hermez_network
#ethereum
2/3
* Gas limit per Batch about 10Milion gas.
* Proof aggregation: Provers will be able to proof any segment size of the chain.
* Thank you to the
#Plonky2
by
@0xPolygonZero
tech we can generate this infinite recursive proof very fast.
Here's the clip w/ "the US Dollar is a very powerful tool" which captures a LOT more than the tweets do.
It's a masterful play by both parties, though Zuck wins this micro-parley because of his subtlety. What isn't said is just as important as what is said.
@gluk64
@davidsrz
Of course NO:
Last Testnet zkEVM: 0x5e2e663A39205348cE985Bccc9673Ca25AeE727E
If you read the rollupVerifier property it points to: 0x8EdA1d8c254a77a57A6A7A1C0262e9A44A7C6D6d
Which is a groth16 verifier.
We don't run public testnets without complete provers...
🚨
#0VIX
is the 1st money-market LIVE on
#zkEVM
testnet! ⚡️
ZK rollups will usher in a new era for
#DeFi
and self-sovereignty. 🔥
The deployment of smart contracts went smoothly using a mock price oracle that allows setting the prices of $ETH and $USDC.
1/3
3/15
Once you have one (or many) nodes syncronized, you need to build the proofs for all those batches ( we call a batch to an L2 block to distinguish it from the L1 blocks).
Very excited to talk tomorrow in
#ethcc
at 11:50 Jean-Baptiste Say room. I'll talk about discovery identity protocol, identity genesis, identity services and many other concepts related to
#SelfSoverignIdentity
that we are developing at
@identhree
Wrote some notes on FFlonk (used by
@0xPolygon
ZK-EVM) and how it leverages efficient polynomial commitment schemes for multiple points and polynomials[BDFG' 21]
Despite the change of the venue, the coronavirus and a lot of difficulties, this year
@EthCC_
conference was great as allways!! Thank you so much to the organizers. As a community member I can only say “We’ll always have Paris”
#ethereum
4/15
To build the proof, you need to reexecute the batch and build the zkProof. This may take some time and resources. In the case of polygon
#zkEVM
it's 2' for a 10M gas batch in a simple machine (We internally call this reference "The rocket" and it has 128 cores and 512Gb RAM)
13/15
Well they are the same that any other rollup. The next bottle neck is data availability. This is why is so important pushing
#Ethereum2
#danksharding
and the
#EIP4844
Join next Tuesday the circom 2.0
#zkHack
workshop organized by
@zeroknowledgefm
@ZKvalidator
. It's a good opportunity to learn
#zkSNARKS
and develop you first zkApp!
Advanced users will discover the new fully rewritten in rust
#circom
2.0 compiler
#ETHCC5
is over, and as always, the organization was excellent! I want to thank you the organizers and the volunteers that made it possible. It is by far the reference eth conf in Europe. The only criticable point is that some people couldń’t made it. I hope next year can grow!
Just this week, two highly anticipated universal zk-EVMs launched:
@zksync
Era and
@0xPolygon
zkEVM! Both use validity proofs for execution correctness, but how do they differ?
Let's dive into state diffs vs TX data! 🌊🔍
10/15
For this last step the proof is converted from a STARK to a SNARK (FFLONK), this reduces the gas cost for verifying this proof onchain. This process takes about 2min in "The Rocket" and the gas cost of the whole TX is about 350K no matter how long is the proving segment.
5/15
But this process can be run in parallel!. That mean that you can have one server computing the prover for the batch one, a 2nd server for the batch 2, a 3rd server for the batch3 and so on.
@Zac_Aztec
@cryptoMaxi420
@SoSoCrypto2
@PolygonHermez
1/3 Let me try to clarify the confusion:
The zkEVM proof will have two pieces: The STARK proof where most of the work of zkEVM processor happens. This proof will extensively use plookup to do special operations and to connect state machines.
14/15
Once solved the data availability, next bottleneck will be keeping the chain synchronised (nothing to do with the zkProofs). And is at this point where thinking in a multi-rollup ecosystem running in parallel will make a lot of sense (multiprocessor approach).
This will be my 3rd year I teach in the UPC Blochain Master (Barcelona).
#Cryptography
#ethereum
#zkSnarks
#webAssembly
are some of the topics we explain. The master is in Spanish, but I’m sure it’s one of the top blockchain masters for devs in the world