Remco ⚪️
@recmo
Followers
6,217
Following
1,778
Media
147
Statuses
3,094
🪩 Worldcoin | Math & Engineering @ 2π.com
Earth
Joined October 2009
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Rio Grande do Sul
• 183143 Tweets
Madonna
• 133989 Tweets
Tottenham
• 81023 Tweets
Spurs
• 73960 Tweets
Leverkusen
• 64676 Tweets
Palmer
• 56817 Tweets
Dame
• 52458 Tweets
#虎に翼
• 46040 Tweets
Ole Miss
• 35079 Tweets
#ラヴィット
• 32525 Tweets
Ange
• 28780 Tweets
bruno mars
• 27226 Tweets
憲法記念日
• 27062 Tweets
Pacers
• 20275 Tweets
FDNY
• 18840 Tweets
OUÇA FOI INTENSO
• 18302 Tweets
EP INTENSO ZNEC
• 18252 Tweets
Anne Hathaway
• 12710 Tweets
DANNY OCEAN
• 11556 Tweets
Lillard
• 11399 Tweets
#SnowMan結成12周年
• 10840 Tweets
I'm thrilled about this, we are extending libp2p with WebRTC support and compilation to WebAssembly. You will be able to run a full node in a browser tab! No need to install software!
FULL NODES IN THE BROWSER!
This is something I've wanted since before the bitcoin whitepaper.
Introducing 0x Mesh, a peer-to-peer communication network for the 0x ecosystem! 🌊💦
5
74
316
16
72
355
Let's build free infinite flash loans straight into the token contracts and see what happens. Introducing FlashERC20!
20
43
296
I'm seeing too much discussion of theoretical ZKP performance and not enough about concrete performance. Lets compare 🍎≟🍏 and bench Polynomial Commitments!
13
35
175
With EXP and LOG you can build a ton of useful functions, especially in finance (e.g. compound interest). Can be as cheap as 411 and 585 with some mathemagic!
12
25
157
I wrote a TLDR on a number of signature schemes so I don't have to look them up again (or deal with exponent notation).
4
18
146
I'm starting up a team in 0x around ZKP-based layer two DEX scalability. Job description here: . If you are interested in working with us on this cool tech or know anyone appropriate, please reach out!
5
28
108
Groth16 is the most used and cheapest-to-verify-on-eth proof system. Here's my notes on the maths behind it:
8
13
105
Never been more excited to read a codebase.
I spend so much time thinking about what it would look like, finally get to see the real thing.
4
7
100
Here's the secret to the optimization process
4
8
97
Plonky2 performance, recursion and Groth16 proof size/verification cost? You bet!
5
14
94
After a nomadic journey across chains, Worldcoin finds its forever home. Super exciting to be part of the Superchain working to scale without compromise.
Even more exciting will be exploring what Proof-of-Humaness can do for fees and MEV to create a better experience for users.
Introducing World Chain, a new blockchain designed for humans ⚪️
518
810
6K
6
3
93
If you want to know how modern compilers work, shelf the dragon book and read the cairo repo:
* Incremental computation
* Infallible parsers and concrete syntax trees
* Formatter, diagnostics and language server
* Multiple intermediate languages
Awesome
@LiorGoldberg2
et al!
The day has come: a first look into Cairo 1.0, fully open-source 🦀
This is a big step towards open-sourcing the StarkNet stack
You can now get familiar with the new syntax, compile and run simple programs locally.
#StarkNet
support is coming soon
107
451
1K
3
10
82
Why are you not working on the biggest problem?
Global governance is huge, yet you can start small and with a grant. There are exciting ideas in the
@worldcoin
Wave0 Grant and you can bring your own
With millions of users, you will build the largest onchain governance experiment
8
15
82
@worldcoin
created 2 million WorldID accounts on L1. This is onle possible thanks to some efficient zkProof batch insertions we developed for Semaphore.
But how can you trust these proofs?
@bkiepuszewski
explains how you can verify them yourself!
So you have heard about zkProofs, how cool they are and how using them Ethereum can verify computational integrity of some off-chain programs (ranging from custom apps to full-blown Layer2 zkEVMs). But how do we know what is that program that is being verified ? 🧵👇
7
38
155
20
66
77
The Ethereum community was spending several hundreds of thousands of dollars PER DAY for L1 calldata that disappeared almost overnight with 4844.
Imagine if this was instead directed at shipping 4844 faster. How do we tackle this going forward?
18
4
71
If I prompt my seed phrase to DALL·E 2, how hard would it be to recover my wallet from the image?
(Also, someone with API access please generate a seed phrase image)
4
2
69
Speedrun the Worldcoin Tech Tree, Any%!
Calling all people working on zk-Identity and L2 scaling to apply.
4
15
65
Love the codebase! It's almost entirely Yul.
Let's make Yul a first-class standalone smart contract language.
Introducing Seaport, a brand new web3 marketplace protocol for safely and efficiently buying and selling NFTs.
With an emphasis on flexibility and optimizations, Seaport has been built to support new and evolving use-cases for where NFTs are heading.
1K
755
2K
4
1
67
Out of curiosity I took a geiger counter on a transatlantic flight. Got to ≈2.45μSv/h where Warsaw ground level is more like 0.08μSv/h. That's 30× background levels. Cosmic rays are real.
6
2
66
Plonk+FRI over a small field with useful properties is the way to go for flexibility and performance. I'm reading through the code and the implementation is also rock solid and highly optimized. Love it!
We're excited to announce Plonky2, an implementation of PLONK+FRI which is focused on fast recursion.
After experimenting with several approaches, we've reached a level of performance that we're happy with, with recursive proofs taking ~170 ms on a Macbook Pro.
41
49
359
0
7
65
Ethereum, the world's computer, has a ~200kHz processor and less than 1MB memory. But it can not be stopped!
1
4
62
PR for generic elliptic curve linear combinations, hoping to get this in the next hardfork. It solves a very large class of problems. I'm excited by the support from great minds at
@StarkWareLtd
@the_matter_labs
@aztecprotocol
et al.
1
18
59
𝔾₁ and 𝔾₂ point decompression can be done for 2.4k and 7.6k gas making it economical on L2s where calldata is relatively expensive.
Should lead to good fee savings when using Worldcoin PoP.
6
3
54
It's not an EVM compatible chain if it doen't have an etherscan clone and a gas price oracle.
1
3
55
Never do this.
I've chased down problems to incorrectly bot-closed issues so many times. I'm not going to re-open and add comments just to have it closed again in a month.
🤖 This handy action flags issues and PRs that go untouched for a certain amount of time.
Try it out in your repo today and start closing out those stale issues!
81
21
150
1
3
54
We would have had AGI by now already if Python had a half-decent package manager.
1
3
53
Blockchains are great, but the real reason cryptography is moving so fast now is additive notation:
Then: gᶭᵆ = gᶜᶞ gᶡ gᶣᵜᶣᵜᶼᵔᶣᵙ
Now: R = s G + e B
I wrote a TLDR on a number of signature schemes so I don't have to look them up again (or deal with exponent notation).
4
18
146
3
5
50
I'm thrilled to do the closing keynote at
#EthCC
on scaling Blockchains, DApps and
@0xProject
.
1
5
52
Excited about this!
The wallet has Semaphore's Circom circuit compiled to native mobile using Arkworks' Groth16 implementation and the WASM witness generator. Thank you
@PrivacyScaling
,
@identhree
&
@arkworks_rs
🙏.
Let's see much more ZK adoption wallet side!
1/ Introducing World App. Built by
@tfh_technology
, its simple yet powerful tools are designed to be accessible to everyone. Use it to prove personhood w/ World ID, claim Worldcoin where available & send digital money anywhere for free.
79
166
562
2
4
51
I cleaned up and pushed the Yul parser I wrote some time ago. It uses the same design as rust-analyzer, so it is a lossless infallible parser. Great for a yul language server!
You can try it with `cargo install yulc`. Or read the libs source here:
Interest check: YUL→EVM compiler, but in Rust with pattern matching and all that goodness for rewrite rules. Should be easy to combine it with solc frontend to compile Solidity.
2
1
19
3
10
48
Optimism has been on the forefront of scaling since forever and with Superchain we are entering an exciting new phase! Looking forward to work alongside great teams to create great infra and build the billion people chain!
7
5
45
@_prestwich
instead everyone should just run a SNARK inside FHE
> yes we can solve the problem! * ** ***
* depends on correctness of a 6 day old preprint
** prototype ready for audit in 74 months
** can only handle numbers less than 57 in the Grothendieck prime field.
2
4
47
🏛️ Ruint v1.0.0 released!
All the traits and methods you know from 🦀 Rust uint primitives, but for 🐘 ANY number of bits!
Great 📚 Doc, 🧪 Test and ⏱️ Benchmark coverage.
Ready for use, expect many more features added during v1 series.
3
4
46
Customizable Constraint Systems in a tweet. Operators ranging over sets leads to much cleaner notation.
3
0
45
zkEVM seemed far fetched not that long ago. Now there are many, all unique and incredible feats of engineering.
Massive congrats to all the teams!
1
5
44
The future of EVM L2s will be based on Reth.
Reth ecosystem is shipping fast, has several talented teams and is focused on solving the hard real world problems.
We have made great strides in the world of blockchain scaling in the last 10 years.
It’s time to go further.
Reth’s path to 1 gigagas per second, and beyond…where we present our roadmap for scaling Ethereum.
33
125
668
0
0
44
My post on scaling DEXs!
Learn how we are working towards evolving the 0x tech stack to scale decentralized exchange for a tokenized world! 📚🌍
3
49
210
3
2
39
Today I wrote a tiny implementation of LLaMA in pure numpy (inspired by PicoGPT).
It also does some hacks to memmap the weights, so you can run large models regardless of GPU/RAM (but very slowly).
1
5
41
Imagine a world in which people can have as many legal identities as they please. What could go wrong?
With anonymous proof of person hood we can still have progressive taxation, welfare, and even a criminal justice system without ever linking identities.
7
1
42
Had a great evening chatting with
@chriswaclawek
and
@RaoulGMI
about humans, identity, privacy and blockchains at the
@CIBlockchain
meetup!
2
8
37
Just published 📦v0.2.0 of the const-generic Uint lib. It is
🏛️ now called ruint, and
🦀 works on stable with a
🛋️ good type ergonomic compromise, and an
🚀 even better uint! macro, and is also
✈️ compatible with a ton of crates!
1
1
42
@gakonst
@stonecoldpat0
@technocrypto
@sidiropo
@ercwl
@jtriley_eth
I don’t think people realize how ridiculously large PoW got. It simply dwarfs all other compute on this planet. It makes training big AI models look like grains of sand. FOR TEN TPS.
All eyes are on hacks and scammers, but really crypto should be lynched over this.
1
4
40
BN254 point compression got audited and merged into Gnark!
Worldcoin project contributors have developed & open sourced an optimization technique that modifies the Golang contract template of the Groth16 proof verifier in the gnark library to optimize the verifier for both L1 & L2 gas consumption.
34
62
293
0
4
36
How ‘bout we rename “Coinbase, Inc” to “Fee Recipient, Inc”?
I think it's time to rename the EVM opcode `COINBASE` to `FEERECIPIENT`.
5
4
116
4
1
40
Crypto twitter, meet Edgar.
Edgar is like Etherscan but for CeFi, from our friends at the SEC.
3
4
39
Summoning Danksharding, hope this works!
🕯
🕯 🕯
🕯 🕯
🕯 Danksharding 🕯
🕯 🕯
🕯 🕯
🕯
1
2
39
New 0x network economics model mathematically derived from design goals by Peter Zeitz. I'm learning so much from him, the paper is a great read!
0x Roadmap 2019 (part 4) — Proposal for Stake-based Liquidity Incentives 🌊
9
82
282
0
5
39
@transmissions11
@onbjerg
to be a pro is to be a noob forever
srlsly, the set of things you know you don't know will always grow faster than the set of things you know.
1
5
38
@gakonst
@stonecoldpat0
@technocrypto
@sidiropo
@ercwl
@jtriley_eth
Energy spend on PoW is more than 2x consumption of all US datacenters combined. And it gets us like 10 tps.
10 tps in zkEVM takes maybe a couple dozen GPUs.
These numbers are not even in the same universe. There’s like an Avogadro constant between them.
2
3
36
While we are working on zk-proofs and decentralized state machines, tradfi is still struggling to move on from EBCDIC. The tech gap is incredible.
0
5
34
Thank you! Modern cryptography is truly amazing.
@LouisAnslow
IMO they actually have been doing quite a good job of taking the privacy critiques seriously and designing their system to be more and more data-minimal. Modern cryptography is truly amazing.
60
48
350
1
0
36
I contributed these earlier to Solmate, but v7 is taking some time. Meanwhile Paradigm is hoarding that unpublished sweet gas alpha in ArtGobblers and 0xMonaco! No fair!
Time to set these babies free!
2
0
35
With capital abundant and talent scarce the smart VCs (VTs?) know how to maintain an edge. Congrats
@transmissions11
and
@paradigm
!
I'm thrilled to announce that I've joined
@paradigm
as a Research Engineer, to help
@matthuang
,
@FEhrsam
, and the rest of the amazing team build the world’s best crypto-native investment firm.
320
89
2K
0
1
36
I predict floating rock desk toys will become a profitable market nearly immediately, even with the tiny flecks we see so far. We can scale up from there.
If LK-99 turns out to be the real deal it’s manufacture is still unreliable. It’ll be decades before it becomes a viable product.
Rare-earth barium copper oxide high temperature superconductors, discovered in the 80’s only became available as long tapes in last decade.
349
93
3K
2
1
30
And soon we’ll measure it in “per second”. We are serious about scaling chains! Always looking for talented individuals and teams to join forces and build the billion people chain.
day 3 of
@worldcoin
launch, crazy lines around the world. one person getting verified every 8 seconds now.
3K
1K
6K
5
2
34
PSA: 'Quantum secure' cryptography just means we don't know yet if and how to break it with a quantum computer.
This is similar to 'cryptographicly secure' and classical computers, except we understand classical much better.
"This gives a polynomial time quantum algorithm for solving LWE."
Is this real?
29
154
1K
1
5
36
2
5
32
This should give big improvements in Plonky2 style recursion.
Say hello to STIR 🥣!
STIR is an IOPP for RS which, compared to FRI, has shorter arguments (~2x) and a faster verifier (~1.2x) that performs fewer hashes (~2x).
Joint work with Gal Arnon, Alessandro Chiesa and Eylon Yogev.
-
14
45
192
0
1
32
@huff_language
The real challenge is, how do you exploit this without getting sniped by MEV bots.
4
0
33
PSA: Biometrics ≠ private keys.
@mike_connor
Not how biometrics work. Anyone can lift your fingerprints from a drinking glass. It would be a terrible secret key.
What authenticates is that you have that fingerprint on a *real life finger*. Without the lifeness check there is no authentication. Data alone not enough.
3
1
24
3
4
26
It's 25% faster than a good regular Keccak/SHA3 implementation.
Code:
The rumors are true! Stare at Preview's beachball long enough and you shall find!
0
0
10
3
2
34
@0xtuba
@chriswaclawek
Numbers from back when L1 ERC20 transfer was $10. Hubble L1 verification cost can probably be gas-golfed down quite a bit.
4
7
33
How about a whole new programing language?
the most romantic thing a man can do for his girlfriend is write her a compiler
6
4
69
1
3
33
My attempt at improving on the fastest PCS (Winterfell's FRI). Note that you can do FFTs on Goldilocks for any root of unity efficiently. Doesn't need to be 2ⁿ.
Also K12 hash beats Blake3 on M1.
1
2
26
I've been thinking about efficient NTTs inside circuits (many uses), and came up with this simple polynomial argument:
3
4
34
@Zac_Aztec
@ShivanshuMadan
The mulgroup is sufficiently smooth that I think you can implement efficient non-power-of-two FFTs.
I've been deepdiving lately into FFT/NTT algos and there's a lot you can do besides Cooley-Tukey.
5
4
32
The 2008 financial debt crisis triggered the creation of blockchain.
Here's hoping the 2020 crisis will do the same and trigger a breakthrough revolution in healthcare.
3
0
31
Global Value Numbering using Schwartz-Zippel lemma and random functions. Feels like cheating.
2
1
31
@jtriley_eth
EVM - SNARK impedance mismatch just means proofs are going to be hard to write and very slow. “hard to write” was solved surprisingly quickly. Slowdown is easily 10,000x. But this hardly matters since it can be done parallel on beefy servers, and only has to be done once.
2
1
30
@matthew_d_green
The 'crypto' in 'cryptocurrencies' is really more analogous to its use in 'cryptozoology' than 'cryptography'.
0
0
30
PSA: 1) Use non-custodial exchanges.
2) Don't use custodial exchanges.
3) If you have to break 1&2, audit their wallets and recovery procedure.
Really, just use a
@0xProject
relayer and you're safe from this.
We have thousands of wallet addresses known to belong to
@QuadrigaCoinEx
and are investigating the bizarre and, frankly, unbelievable story of the founder's death and lost keys. I'm not normally calling for subpoenas but if
@rcmpgrcpolice
are looking in to this, contact
@krakenfx
98
301
1K
3
5
30
Reposting my (flawed) polynomial commitment benchmark since it's a hot topic.
* Small-field FRIs perform great.
* MSMs are much easier to parallelize.
* Plenty room for improvement everywhere.
1
2
28
Our Hubble optimistic rollup just did 1024 transactions on mainnet for less than 350 L1 gas each.
1
0
30
The only AI risk I worry about is the uncanny ability of LLMs to mimic and manipulate human emotions. The abuse potential here is enormous.
AGI is a red herring. It's artificial stupidity we should worry about.
Excited to announce v(1.0) of Digi, the future of AI Romantic Companionship, for IOS and Android 🤖
Site:
Twitter:
@digiaiapp
A quick thread on features, and where we go from here (1/13)
3K
684
5K
3
4
31
Welcome
@m1guelpf
! I'm so stoked to be work with you! 🚀
✨ Super excited to announce I'm joining
@worldcoin
to help build the most scalable & private sybil resistance solution.
I'll be helping build the protocol, and assisting with strategy to make sure it becomes more transparent, decentralized and, in general, web3. 🚀
101
21
546
1
0
31
The Goldilocks multiplicative group order having only Fermat prime factors is not just curious, it actually gives optimal performance in the Rader prime-size NTT algorithm!
Combine this with the twiddle-free Good-Thomas algorithm and you get good perf for *any* p-1 divisor.
0
2
31
@haydenzadams
Yes, and let's go further: Allow all state variables to go negative, as long as they come back to >= 0 at the end of the block.
3
1
30
How high can we raise the gas limit?
This is a much harder question than it seems on the surface. What we need is a process grounded in analysis, not anecdata and vibes. I’ve been reaching out to top people building this. DM us if I missed you!
@parithosh_j
@peter_szilagyi
@potuz1
@KurtosisTech
For sure, we have a few teams like
@NethermindEth
who are thinking of doing research on gas limits for our RFPs (). Excited to see some proper work being done on this.
@recmo
pilled me on this problem space
1
0
8
2
1
28