Wyatt Benno

@wyattbenno

9 Following

381 Followers

Wyatt Benno pfp

I have heard a few people say : "there will only be one or two companies that win the ETH realtime proving race". But @vitalik.eth points out some interesting facts. I would add this to 3: Most provers use special hardware and are extremely memory hungry. Folding scheme are the most direct way to decentralize and democratize ZKP proving — it is the best technique that we have to allow provers of any size to join and prove. In the end, I think there will be ZERO companies left and just networks of people. Most likely they will be using memory efficient folding scheme in a collaborative setting to achieve realtime proving at scale. https://x.com/VitalikButerin/status/1925050155922862526

0 reply

0 recast

2 reactions

Wyatt Benno pfp

We use Microsoft/Nova repo heavily in @NovaNet_zkp . It allows us to match memory requirements so we can do ZKP proving on many type of machines. WebGPU will accelerate this big time! NeutronNova upgrade is also poised to make BIG speedups. Our webGPU implementation is Rust lib independent. This means it can work with Arkworks with minimal modifications. JOLT zkVM in the browser anyone?? 2/2

0 reply

0 recast

1 reaction

Wyatt Benno pfp

We are proud to open-source a high-performance MSM for BN254 curve in WebGPU. It runs on Windows, macOS, AMD chips, many mobile devices, and in the browser. Optimized for speed, portability, and massive parallelism. Check it out: https://github.com/ICME-Lab/msm-webgpu __ The implementation follows the cuZK paper closely and is highly optimized for GPU workflows. WebGPU is not well documented and hard to test - thank you @zk_albi for the painstaking hours spent making this come to life :) https://eprint.iacr.org/2022/1321.pdf Want to know what we are using it for? 👇 1/2

1 reply

0 recast

17 reactions

Wyatt Benno pfp

Zero-Knowledge Machine Learning is Sus, But It Won’t Be for Long. In this post I explore the costs of ML for ZKP proving — how GKR, sumcheck protocol and 'sparsity' can help! Particularly in the the elliptic curve or lattice setting. Moreover some insight from our work with lookup arguments and JOLT for non-linearities. https://www.novanet.xyz/blog/verifiable-ai-with-zero-knowledge-proofs

0 reply

0 recast

6 reactions

Wyatt Benno pfp

We have been doing some work on SoTa zkML that has me much more bullish on the use-case. Should be a fun talking point at zkSummit 13 😅

0 reply

0 recast

3 reactions

Wyatt Benno pfp

Homomorphism is a mathematical super power that EC and lattice play with. Great listen on lattice 🐦‍🔥 https://x.com/zeroknowledgefm/status/1917573411502461062?s=46

0 reply

0 recast

6 reactions

Wyatt Benno pfp

ZK land is a bit like the current wars: direct current (DC) vs alternating current (AC). FRI is our DC - backed by early supporters and initially dominant. Folding schemes are our AC - elegant and efficient at scale. DC was Edison's baby and had early success, but Tesla's AC ultimately transformed power distribution. If history rhymes in cryptography Michael Arrington is cast as Westinghouse 😂🏴‍☠️. https://x.com/arrington_cap/status/1917569694011207867?s=46

0 reply

0 recast

5 reactions

Wyatt Benno pfp

Cool new paper on fast accumulation with hashes. First time thinking about moving away from homomorphic EC/Lattice for small space provers. https://eprint.iacr.org/2025/753

0 reply

0 recast

4 reactions

Wyatt Benno pfp

Seems to already be broken.. so science moves fast.

0 reply

0 recast

0 reaction

Wyatt Benno pfp

SNAIL: GKR that replaces sumcheck with batched zerocheck. https://eprint.iacr.org/2025/728.pdf

1 reply

0 recast

7 reactions

Wyatt Benno pfp

I think we can leave this for some future panel 😂 There are various use case where you do not need verifiable data (public data, zkML, validity proofs, the users trust their own data sources / oracles) - zkTLS can work as one verifiable data source when it’s needed and that is super cool.

0 reply

0 recast

1 reaction

Wyatt Benno pfp

zkML where you want to know that a training program was run correctly.

0 reply

0 recast

0 reaction

Wyatt Benno pfp

On the talking point about the verifiability property. Has anyone called you out on that one? 1. What if the data is public and you are verifying the computation. 2. zkREGEX is one such use-case where you get data from a document. 3. zk proof of location with on-device signing. 4. ETHproofs is a core use-case for most zkVM. 5. zkECDSA. So many use-case for ZKP. You are right in terms of verifying the data source. A nuance here is also interesting as what happens if I zkTLS my bank account but then immediately transfer?

2 replies

0 recast

0 reaction

Wyatt Benno pfp

Getting ready to present in NYC on Sat.. "Verifiable Compute Is Eating The World." At: https://lu.ma/kaqoydqn

0 reply

0 recast

4 reactions

Wyatt Benno pfp

A zkVM that only runs on massive, custom rigs? Centralizing. JOLT + folding gives you a fast zkVM that runs anywhere— from beefy servers to edge devices. That’s decentralization. +Privacy w/ HyperNova folding. Necessary and sufficient.

0 reply

0 recast

1 reaction

Wyatt Benno pfp

Thanks for the feedback! Will do.

0 reply

0 recast

0 reaction

Wyatt Benno pfp

If you don't care about privacy you can break big problems up and run then in ZKP with 'continuations'. So you can quite literally have a challenge where you co-operate with your friends to make proofs fast. What does a prover network look like in collaborative setting? @NovaNet_zkp 👀 We hope that Proof Parties are fun and easy to use and understand for everyone! Try ZKP in your browser today Try it: https://zkp.fun/ Blog post about it: https://icme.ghost.io/proof-parties-zero-knowledge-proofs-with-friends/ FIN.

0 reply

0 recast

1 reaction

Wyatt Benno pfp

DeSCI is dead, long live DeSCI! Data and computer science problems can often be verified with ZK. Future 'Proof Party' competition will targeted towards experts in these fields, where they can work in teams or solo, pushing forward their fields. One such game would be to use a prediction model to forecast the price of an asset over two weeks. Best model wins! With ZK you keep the data and potentially the model hidden, while we can all see you ran it (w/ ZK) and the predictions were the most accurate each day. AI experts can play, ZK experts can play (SoTa zkML w/ continuations). 3/4

1 reply

0 recast

1 reaction

Wyatt Benno pfp

Other than scaling blockchain - the use-case of ZK is numerous for privacy and local verifiable compute. ZKP acts as a third degree of freedom for web3. The first is a ledge (BTC), second (smart contracts), and third is ZKP where ANY compute can be used via succinct verification; off-chain compute triggers on-chain actions. State of the art is often dev focused — so normal people do not get to see it. Why would anyone get hyped about something they can't see? Proof Parties mostly works in browsers and on-device. For example, in an initial challenge we have delegated Spartan working in browser showing if an IP is in a blacklist or not. Simple - fast - client side ZK. 2/4

1 reply

0 recast

1 reaction

Wyatt Benno pfp

Introducing 'Proof Parties' - a platform for games and competitions demonstrating the state of the art in ZKP. At ETH Denver I heard a bunch of : "Why is ZK important?" "What can I do with it?" "Show me!" 1/4 thread. Try it: https://zkp.fun/ My blog about it: https://icme.ghost.io/proof-parties-zero-knowledge-proofs-with-friends/

4 replies

8 recasts

61 reactions