On Most Bitcoin L2s, Your BTC Stops Being BTC
The ownership proof changes species, and that is the objection nobody in the L2 pitch deck answers.
On Most Bitcoin L2s, Your BTC Stops Being BTC
The ownership proof changes species, and that is the objection nobody in the L2 pitch deck answers.
Shielded Pools Have a Shelf Life
On the asymmetry between forging a proof and reading a history, and what it implies for confidential settlement.
Shielded Pools Have a Shelf Life
On the asymmetry between forging a proof and reading a history, and what it implies for confidential settlement.
Most MEV Mitigations Move the Trust Rather Than Remove the Discretion
Commit-reveal, threshold encryption and builder auctions each solve a real problem. None of them authenticates who may commit, and none makes omission provable.
Most MEV Mitigations Move the Trust Rather Than Remove the Discretion
Commit-reveal, threshold encryption and builder auctions each solve a real problem. None of them authenticates who may commit, and none makes omission provable.
Your Address Is Your Public Key. That Is the Migration Problem
Post-quantum migration is discussed as a performance question. It is a coordination question, and the coordination is forced by one design decision made in 2008.
Your Address Is Your Public Key. That Is the Migration Problem
Post-quantum migration is discussed as a performance question. It is a coordination question, and the coordination is forced by one design decision made in 2008.
ZK-ACE: Why Post-Quantum Blockchains Need to Rethink Authorization from Scratch
The post-quantum transition is coming for blockchains — and the naive path forward is quietly catastrophic. When NIST finalized ML-DSA (formerly Dilithium) and SLH-DSA as the post-quantum signature standards, the blockchain community breathed a sigh of relief. Just swap Ed25519 for ML-DSA and you're quantum-safe. Simple. Except it isn't. An ML-DSA signature at NIST security level 2 is approximately 2.4 kilobytes. An Ed25519 signature is 64 bytes. That's a 37× blowup — per transaction, permane...
ZK-ACE: Why Post-Quantum Blockchains Need to Rethink Authorization from Scratch
The post-quantum transition is coming for blockchains — and the naive path forward is quietly catastrophic. When NIST finalized ML-DSA (formerly Dilithium) and SLH-DSA as the post-quantum signature standards, the blockchain community breathed a sigh of relief. Just swap Ed25519 for ML-DSA and you're quantum-safe. Simple. Except it isn't. An ML-DSA signature at NIST security level 2 is approximately 2.4 kilobytes. An Ed25519 signature is 64 bytes. That's a 37× blowup — per transaction, permane...
