Cover photo

ZK Insights | 22 Mar 2026

#105

1. Blogs

ZK Circuit Security: A Guide for Engineers and Architects

  • ZK Circuits are a core component of integrating ZK proofs into real world applications, enabling the proving of arbitrary NP complete statements privately. A 2024 analysis revealed that approximately 96% of documented bugs in SNARK-based ZK systems were caused by under-constrained circuits, which are circuits that lack sufficient checks to prevent invalid proofs from passing verification. These vulnerabilities have enabled everything from unlimited token counterfeiting (Zcash, 2018) to $1.9 billion in forged withdrawals (zkSync Era, 2023). Thus, it is necessary to understand the security considerations when writing and designing circuits for usage in protocols and applications.

  • https://www.nethermind.io/blog/zk-circuit-security-a-guide-for-engineers-and-architects

Revisiting Falcon signature aggregation for PQ mempools

Post-Quantum Threats to Ethereum Privacy

  • Industry broadly shipped PQ key exchange first (Chrome, iMessage, AWS, Cloudflare); PQ authentication is still early, especially in default public-web PKI. Ethereum inherits PQ transport encryption for some surfaces (HTTPS/JSON-RPC over TLS via Go 1.24), but application-layer privacy — cryptographic protocols built on top of the EVM rather than natively supported by opcodes or precompiles, such as stealth addresses, zkID, and confidential transactions — requires Ethereum-specific work.

  • https://ethresear.ch/t/post-quantum-threats-to-ethereum-privacy/24450

What if post-quantum Ethereum doesn’t need signatures at all?

  • Current PQC migration plans assume we must verify post-quantum signatures — either on-chain (kilobytes per tx) or inside ZK circuits (millions of constraints). We present an alternative: prove authorization semantics directly in ZK, without any signature object. Result: 4,024 R1CS constraints, 128-byte proofs, 52 ms proving time. The construction is proof-system agnostic (Groth16, PLONK, STARKs all work) and deployable today as an AA validator module — no protocol changes required.

  • https://ethresear.ch/t/what-if-post-quantum-ethereum-doesn-t-need-signatures-at-all/24427

2. Projects

powdr-wasm -- zkVM for WASM

3. Radios/Videos

Mechanizing Lattice-Theoretic Tools for Cryptography in Lean (with LLM-Assisted Proof Engineering)

  • Speaker: xy

  • Lattice-based cryptography underpins major post‑quantum standards (e.g., ML‑KEM/ML‑DSA), but its strongest theoretical guarantees rely on a deep mathematical stack—geometry of numbers, linear algebra, discrete Gaussians, and Fourier analysis on lattices. This talk presents a new Lean formalization that targets this “math basement” rather than only protocol‑level game-hoppings or adversary argument: a reusable library intended to support future end‑to‑end mechanizations of worst‑case‑to‑average‑case reductions for SIS/LWE and related constructions.We mechanize core theorems and tools including Minkowski’s theorems, Poisson summation and Fourier machinery on lattices, discrete Gaussian foundations, Banaszczyk-style transference, and smoothing-parameter bounds, along with full analyses of LLL basis reduction and Babai’s nearest-plane algorithm (including non-full-rank cases). Finally, we report practical lessons from extensive LLM assistance in proof engineering: what it accelerates (library navigation and routine glue) and what still needs human design (APIs and proof architecture), with Lean’s kernel providing soundness throughout

  • <https://youtu.be/1O7y9t0KViA >

Episode 395 - Devnets & Upgrade Coordination with Will & Raúl

  • In this episode Nico Mohnblatt chats with Will Corcoran and Raúl Kripalani from the Ethereum Foundation. This is part 5 in the 6-part leanEthereum miniseries, shifting focus from the cryptographic primitives and LeanVM stack to the real-world integration happening through devnets, specs, and cross-team coordination.

  • They dive into the human coordination layer, how independent teams align on post-quantum signatures, SNARK aggregation, and protocol changes, plus the networking upgrades needed for larger payloads.

  • Raúl explains the shift from today's libp2p stack to a purpose-built Eth P2P next-gen version optimised for Ethereum's workloads, including better broadcast layers, erasure coding, and control planes to handle bandwidth competition between execution and consensus layers.

  • https://youtu.be/Ul2bs8INF0k?si=j_RJ3FW3oZD7qlhm

Baby Lattice Folding Series EP6 | Neo and SuperNeo

4. Papers

Orca And Dolphin: Efficient Bivariate And Multilinear Polynomial Commitment Schemes Under Standard Assumptions

Proof-Carrying Data via Holography Accumulation

S-two Whitepaper

  • Dan Carmon, Lior Goldberg, Ulrich Haböck, Leonardo Lerer, Ilya Lesokhin

  • formalize the "flat AIR" circuit model, a modern arithmetization paradigm used by several contemporary zero-knowledge virtual machines, and we provide an in-depth security analysis of our proof of proximity for flat AIRs.

  • https://eprint.iacr.org/2026/532

Balthazar Wallet: Making Password Authentication Practical on Web3 via OPAQUE and Privacy-Preserving Smart Contracts

SoK: Understanding zkVM: From Research to Practice

Distance of RAA Codes over Large Finite Fields (with Applications in zkSNARKs and PCGs)

UniMSM: An Efficient and Flexible Hardware Accelerator for Multi-Scalar Multiplication

SMART: Secret-Metadata Attribute-based Anonymous Rate-limited Tokens

zkBSA: Auditable Blockchain Stealth Address

Human-Extractable ZK Proofs of Knowledge: A Solution to Dark DAOs


If you're interested in our ZK Insights or have ideas for similar content, we highly encourage everyone to head over to our GitHub repo and submit a Pull Request. Join forces with like-minded ZKPunks to co-create!

Github repo link: https://github.com/ZKPunk-Org/zk-insights