Register and share your invite link to earn from video plays and referrals.

Eli Ben-Sasson | Starknet.io
@EliBenSasson
CEO @ StarkWare | 2xCo-founder: Zcash, StarkWare ZK, Blockchain: ZK-STARK, Zcash co-inventor Opinions mine, no investment advice
1K Following    57.7K Followers
Prepare for quantum, prepare for AI. Your goal should be using the strongest cryptography there is.
Key features that will become non-negotiable for crypto projects: 1. Crypto agility: We'll see many mathematical breakthroughs in the near future, and AI will surprise us time and again. The timeline for quantum computers is getting shorter. All of the above lead to this: crypto agility will play a crucial role in adapting and adjusting security. 2. Post-quantum and post-AI security: (Explained above.) 3. Privacy: For crypto to expand, it must offer privacy. 4. UX: Many crypto apps already have excellent UX. But it needs to be the standard, not the exception. What else?
Show more
Projects will need to have: 1. Quantum-safe and AI-safe cryptography 2. Crypto agility. No one knows what the next AI × Math breakthrough will be. Projects will need to upgrade to safe versions fast, and crypto agility will determine whether they can.
Show more
Strong disagree. Lattices have juicy mathematical structure, ripe for AI to attack. And the succinct versions based on module SIS are too new -- only around since 2012. I recommend waiting another 3-5 years for AI to kick the tires, before entrusting serious $ with it. DYOR; stay safe.
Show more
Regarding point (iii) - I respectfully disagree. Quantum computers need to advance on three things: - Better hardware - Better error correcting codes for qubits - Algorithms with fewer qubits AI is improving each one of these three things. Worth checking out the ECDSA/fail project. It shows clearly that AI can reduce the number of qubits needed to, basically do break ECDSA.
Show more
Should Starknet become an L1? Time for the community to speak. A non-binding governance vote is now open. Becoming an L1 is a big deal. So is post-quantum security. We want to hear what the community thinks. So vote, share your thoughts, let us know where you stand.
Show more
100% agree with @lordOfAFew My take is: 1. It's already consensus that ZK-STARKs are the endgame for blockchain 2. Cairo is optimized for ZK-STARKs 3. The more people rely on AI for coding, the more we'll shift from choosing a programming language because we know it to choosing one because it's best suited for what we're building. Build with Cairo.
Show more
MAIN TAKE-AWAY from @token2049: World needs Starknet as a quantum-safe L1. Market says it. Whales, KoLs and OGs say it. I say, We hear you.
0
157
748
103
Forward to community
Starknet becoming an L1 for post-quantum agility: good idea or bad idea? Two giant elements we need to pay attention to: (1) The quantum threat. It may be MUCH closer than we think. (2) AI. It's becoming more powerful than we can process. Is anyone willing to bet how much time we have until AI breaks something that we considered as safe? This calls for “bunker mode”. Chains need to become future-proofed. And fast. Here's what it takes to make a chain truly future-proofed: - The right cryptography - Crypto agility - Becoming an L1 This connects to what I talked about in my Token2049 talk today. Here’s the summary: 🧵
Show more
0
132
528
103
Forward to community
@zooko I'm not in the weeds, but full time compensated delegates, elected by coin holders, seems like the safest way to go.
Prediction: BTC will hit $200K by EOY. Is this too bold? Putting $100 where mouth is😎 We have 99 days to see if I'm right. Not investment advice. DYOR
Done. What’s should I put for end of year?
Will $ZEC hit $1200 by Sept 25th? I says it will. Putting money where mouth 😎 It’s Fire&Forget on this app. Ape in, sleep well: Even if ZEC → $700 (or → $7), NO LIQUIDATION BABY. Not investment advice, DYOR
Show more
Crypto has set the bar too high for both users and builders for too long. The current phase must prioritize simplified UX and simplified devX. This is a guiding principle for STRK20: - Privacy should be easy for users - Privacy should be easy for builders
Show more
Name a token Trump didn't mess with. I'll start $STRK
typo: WILL, not COULD.
🚨MASSIVE: INTERNAL TREASURY DOCUMENT WARNS AI BOOM COULD END IN A DOT-COM STYLE BUST A draft internal U.S. Treasury report, obtained by NOTUS, warns the AI boom has become so deeply embedded across the economy that a sharp downturn could trigger widespread fallout across stocks, banks, chipmakers, cloud providers, data centers, and private credit. Unlike the dot-com era, analysts say today's AI industry is far more interconnected, making the consequences of an AI bust potentially much broader.
Show more
Quantum computers will break certain cryptographic protocols, but some will stay safe. Which cryptography is quantum-resistant and which isn't, and why? Watch my explanation
Shipping season never ends 🥷 1⃣ Native privacy for all assets is now live on Starknet - STRK20s is fully live on Mainnet, a privacy pool integrated at the protocol level, finally bringing practical privacy onchain: the lowest privacy fee on the market, fast UX, one-click at the wallet level, deep DeFi integrations, and the same liquidity as public markets, for all ERC-20s - As of today, you can shield, unshield, and access private swaps directly from Ready and Xverse wallets. - The ecosystem is already leveraging it: private USDC flows highlighted by Circle, 2 PoCs built by StarkWare (private Payroll and private KYC), and Zylith, a new call auction dark pool built on top of STRK20s. - For builders: the privacy SDK will be open-sourced very soon, and the Starknet Foundation launched Proof, an 8-week incubator for high-potential privacy teams. Applications close 10 July, so be quick. 2⃣ Starknet is becoming a real bet on post-quantum security StarkWare published a roadmap to make Starknet an end-to-end post-quantum-secure chain well before the Q-Day deadline: - Phase 0 (the foundation): STARK proofs already post-quantum secure, S2morrow's post-quantum wallet PoC already running on Mainnet, and Native Account Abstraction making wallet migration smooth for everyone. - Phase 1 (in progress): make new activity post-quantum secure by default. Work started, ~2 months to completion. - Phase 2 (next): give existing contracts a path to post-quantum durability, without breaking interfaces or forcing painful migrations. 1-2 months after phase 1. - Phase 3 (depending on Ethereum): the two remaining inherited surfaces, bridge messaging and blob data availability through KZG commitments, will be resolved as soon as Ethereum migrates its own stack. 3⃣ Better performance, more post-quantum security Starknet v0.14.3 goes live on Mainnet Monday, 6 July, bringing: - Keccak support for client-side proving, enabling virtual private txs signed with EVM signatures - A quantum-resistant SNOS hash, with Blake replacing Pedersen - Block times down from 2 to 1.5 seconds - A dynamic L2 gas base fee for more adaptive pricing during congestion Note: an 8-minute downtime at 8:10am UTC on Monday, and some breaking changes for builders, read the pre-release notes! 4⃣ The ecosystem keeps shipping - STRK is now listed on Robinhood - Extended launched its spot market offering, starting with BTC, ETH, and USDT, with spot and perpetuals sharing a single margin account. We also know the next 6 months' focus: decentralization, ecosystem expansion, the transition to a community-owned protocol, and a massive partnership to be announced (eToro announced yesterday). - Xverse now supports Ledger on Mobile, any user can now use the leading hardware wallet on Xverse mobile to access Starknet. - Medieval Tech became the first Starknet project accepted into the NVIDIA Inception program, with Octopi, a real-time spatial intelligence platform built in parallel of the AMMA prediction market. - Troves released a WBTC boosted vault: a one-click advanced DeFi strategy yielding ~7% - Vesu launched Explore: track positions, inspect pools, and monitor liquidations in one place. - 5 new projects launched on Mainnet this month: ArcX (Pendle-like mechanism on top of Extended) - Starkscan (explorer combining an explorer, an API surface, and an agent workflow layer) - Deadeye (Distribution Markets) - Gaffer (fantasy soccer game) - DeFa (RWA project) 5⃣ The numbers keep improving - Starknet crossed 300M transactions processed on Mainnet - STRK staking reached 1.4B STRK, ~22% of the circulating supply. - Starknet is still the #1# L2 by developer activity across the Ethereum ecosystem. - In only a few days: ArcX hit $400,000 TVL on top of Extended, Hyper xSTRK by Troves filled all its tiers, and the privacy pool reached 5k txs and 100 new users per day, with $500 in daily revenue, during the Shield rush campaign. Can’t stop, won’t stop.
Show more
My take on the new roadmap for Ethereum: TL;DR - many good things, a few unclear things, still a few problems. The good: - Recursive STARKs - excellent. Huge progress since the days where most of the Ethereum ecosystem was skeptical about the immense value of STARKs. This and more, recursive STARKs are the efficient way to go. - Privacy - excellent. - Formal verification - excellent. - Quantum-safety - excellent. glad to see this as a high priority. I wish the Bitcoin community took a similar approach. Unclear: - New kinds of state: what does that mean? Who is affected by it? Happy to hear explanations and opinions. Needs improvement: - 3-4 years as the timeline is way too long. Especially for quantum readiness. - New EVM - makes sense given the chosen path with STARKs. The simplest, fastest, safest and wisest path goes through Cairo. It’s battle-tested, designed for ZK STARKs, is a next generation smart contract language.
Show more
Two weeks ago, Ethereum researchers met in Berlin to continue charting the protocol's long-term trajectory, following along discussions with client teams in Svalbard in April. The updated strawmap is at and I attached a picture of it to this post. My own high-level takeaways: * "Lean Ethereum" is not a single one-shot upgrade, it is a collection of improvements that will come online to the Ethereum network over the course of three or four years. But make no mistake, this IS the third major iteration of Ethereum in the same way that the Merge was the second. Almost every major piece of the protocol will be replaced: - Verification through recursive STARKs, rather than direct re-execution. Recursive STARKs become an enshrined first-class core component of the protocol - Replacing everything quantum-vulnerable with quantum-safe alternatives - Consensus: decoupled available chain and finality, one or two-round finality. Theoretically optimal security properties, simpler than today, and faster than today - Multidimensional gas - State: not just tree structure, but what *types* of state are available - Changes to client architecture ... At the same time, simplification, cleanup and future-proofing. And this will all be done in a way that minimizes disruption to existing application. We've done this before (the Merge), we can do it again. * H-star (aka Hegota) is probably Ethereum's last thematically "pre-Lean" fork. Starting from I-star, most of everything we do will have a very strong "Lean" feel to it in one way or another. * Privacy is no longer an afterthought, it is a first class goal. When designing Frames, the mempool, additions to the state tree, we explicitly ask the question "okay, how do quantum-safe, intermediary-free privacy protocol transactions go through this, and what is the overhead?" * Formal verification of everything for security. * FV also makes us much more comfortable with canonicalization (having pieces of the protocol that are directly defined as a piece of bytecode expressed in some language). evm-asm is being written in part to become a canonical proof system for the EVM. * Quantum safety has shifted up a LOT in priority. This adds a lot of work (eg. finalizing a quantum-safe blobs design has become urgent; this work has already been ongoing for months) * Probably the single most disruptive part of the plan is the changes to state. There is growing consensus around leaving present-day-style "dynamic state" mostly unchanged, but scaling it only a medium amount, and adding new types of state that are more scalability-friendly (eg. no need for builders to sync/store all of it) but more restrictive, and that will scale a large amount. eg. possible Ethereum in 2030: 2 TB of present-day-style (dynamic) state, and 100 TB of new-style (scalable but restrictive) state This "new-style" state would work very well for ERC20s, NFTs, many defi use cases, but not eg. highly "central" objects like Uniswap contracts, or onchain order books, or other complex things (which are crucial for Ethereum but which only take up a small percentage of state) Hence, it will not be *necessary* to rewrite any apps, but it will be *very cost-effective* to eg. rewrite an ERC20 token into a newer design that uses a new type of UTXO storage that is currently being explored, so that it will have >10x lower txfees. Design of these new state types (current ideas: keyed nonces, ring buffers, UTXOs, statically accessible state, temp state) is an area where we will need a lot of feedback from application developers (incl. privacy-friendly application developers) and probably several rounds of rethinking and iteration. * In the context of a much larger total state size, we need to figure out the incentive issues around who stores this state and what motivates them to. Even saying "each node stores 1%" is not good enough - why do they store that 1% and why are they willing to serve it? This is being elevated as a first-class research area. * Ethereum will need to have a "VM" other than EVM in one form or another - at the very least, we need something like leanISA for recursive STARKs - and the gains are large in exposing it to users so that we support programmable privacy and better scalability. Right now, the most likely contenders are leanISA and RISC-V. My own ideal is that in this world, we adjust the protocol so that the EVM becomes a high-level-language compiler-level feature, and the protocol only "sees" RISC-V / leanISA directly. But this is still far away. * Gas limit increases, blob increases and slot time decreases will happen many times over the next ~5 years. We expect a large gas limit increase with Glasterdam. Each step of increased scale or decreased slot time is a matter of getting to the point where it is safe to do it, which comes from a combination of client optimization and protocol changes. Ethereum is CROPS. Ethereum is scaling. Ethereum is reinventing itself. Onward.
Show more
When the immune system over reacts, you get disease. That's Bitcoin today.
Hard consensus is Bitcoin’s immune system. Fees price block space. Nodes set policy. Miners build blocks. Holders allocate capital. Protocol changes must earn overwhelming alignment, so bad ideas fail before becoming iatrogenic protocol changes. $BTC
Show more