It’s refreshing from the L2 side to have an L1 focused org like @ethlabs_org making collaboration with L2s a core priority.
EthLabs is working on UX improvements like shorter slots & native AA, finality, interop, PQ security, censorship resistance & scaling. These are areas where close coordination with L2s matters.
@Offchain is fully committed to Ethereum’s cypherpunk principles, ecosystem & long-term success. We believe in settling on the most decentralized chain in the world, and want to help make L1 stronger.
Across my time working on @Arbitrum and previously @ZKsync, we’ve had valuable collaboration with Ethereum Foundation. But consulting L2s on protocol design, product priorities, UX, & performance constraints often felt secondary. I’ve heard that sentiment shared across other L2s, wallet teams, & dapp devs.
L2s process the vast majority of Ethereum ecosystem transactions & work directly with businesses, developers and users. We see the adoption barriers & technical bottlenecks firsthand.
We’ve spent years improving scaling, UX, DevEx & proving. Several approaches now discussed in ACD have already been researched or implemented by L2 teams, bringing practical experience into L1 discussions.
As the Core Protocol PM at Offchain leading our L1 coordination, I’m happy to be working closely with EthLabs on these shared priorities 💙
Show more
Excited to see Native AA scheduled for inclusion in the Hegota upgrade, and happy to be part of the effort @Offchain to make frame transactions work across L1 & L2s 🤝
=== @Offchain’s stance on Native AA: EIP-8141 vs EIP-8130 ===
We are very happy that ACD is considering Native AA as a Hegota headliner, and think it is essential for L1 to adopt it.
For @Arbitrum, we evaluate Native AA designs based on throughput, DoS risk, DevEx, and wallet UX/security.
TLDR ->
• To support 8141 in Arbitrum Nitro, we need pure verification frames to become the default validation path. We are working with @ethereumfndn, @ethlabs_org, @base, & @WalletConnect on this direction.
• We also support an optional Guarantor mechanism, where another account can safely pay for the transaction. We will propose this separately.
• Offchain is reviewing the prospect of proposing that the Arbitrum DAO adopt 8130 first. It provides the guarantees needed today, covers the main user flows & does not prevent adding 8141 later.
• We think 8130 deserves genuine consideration in this headliner process, but we are not explicitly asking ACD to adopt it.
• If ACD converges on a modified 8141 for L1, we will support this effort and reconsider implementing it alongside 8130.
What matters most to us: Native AA standards designed with L2s in mind, in compatible ways, so wallets and infra can support them.
Full statement below 👇
Show more
under appreciated recent news imo
Arbitrum going ZK
Huge for improving UX across Ethereum
Timeboost worked. It generated $7M+ for the DAO and validated that tx ordering can create meaningful value for the eco.
But good product development means shipping, measuring & iterating on what we learn.
Why PGA + Fast Feed is next for @Arbitrum One ->
Show more
Core devs confirmed through benchmarking of the L1 gas repricing that we comfortably have room for up to 300M gas/block. That's roughly 170 TPS with mixed transactions on Ethereum L1, and 10x where we were a couple of years ago.
The next bump will be to 200M gas (110 TPS), shortly after the Glamsterdam upgrade.
Show more
Researchers at two of our @Offchain Tandem partner teams @SuccinctLabs & @EspressoSys rewrote the future of ZK proving.
The Poseidon hash function (commonly used in ZK provers today) existed for one reason: SNARKs did arithmetic over large prime fields, while standard hashes like SHA-256 are pure bit operations, and emulating bits in prime-field arithmetic cost a fortune. So Poseidon hash function was built with prime-field operations to fit the prover - and the price was cryptanalysis.
Poseidon is 7 years old. SHA-256 has been public since 2001 and has survived 25 years of the entire world trying to break it.
The new Flock paper proves hash functions over bits directly, so standard hashes stop being the expensive option.
Post-quantum proving on Ethereum can now run on the hash that already secures Bitcoin and TLS, not one still waiting for its cryptanalysis to get lindy.
And Succinct is already exploring how to bring Flock's binary-field approach into SP1, the zkVM used by @Arbitrum.
Show more
Goodbye, Poseidon!
An epic 8-year, 8-figure rabbit hole in post-quantum cryptography reaches its dream conclusion. The Ethereum Foundation is abandoning Poseidon for L1, pivoting to SHA or BLAKE. This milestone unlocks ultimate security for lean Ethereum and foreshadows a golden era of hash-based cryptography.
Since 2018, the Ethereum Foundation has invested in magic cryptographic bricks, so-called "SNARK-friendly hashes". In 2019, Poseidon was born. It held strong and became the dominant SNARK-friendly hash, securing billions via zkrollups and zkVMs.
In a stunning reversal, breakthrough SNARK designs show that SNARK-friendly hashes aren't necessary after all. Off-the-shelf traditional hash functions like SHA2 and BLAKE2s can now match Poseidon in a SNARK. In hindsight the key was not SNARK-friendly hashes, but hash-friendly SNARKs.
The secret is doing maths over the smallest prime number: 2. So-called "binary fields" natively speak the language of bits, aligning with the boolean operations inside traditional hashes. This is a stark departure from "prime fields", where awkward large-prime arithmetic makes bit manipulation painfully expensive.
We're talking sci-fi cryptography. 1M traditional hash calls proven per second, on a laptop. Just 100x overhead vs native CPU boolean compute. Nobody predicted such performance, not even the handful of binary-field visionaries. Hat tip to the research geniuses: Jim and Ben with Binius in 2023; Ron, Benedikt and William with Flock in June.
With SHA2, the lean aesthetic of minimal assumptions reaches its climax. The EF's principled stance on pure hash-based cryptography has aged like fine wine. We now enjoy foundations the world can trust for decades and centuries, foundations worthy of the dream of an internet of value.
Speed of deployment is a secondary win. There's no longer a need to wait years for Poseidon cryptanalysis to bake. Emile and Thomas from the EF post-quantum team are moving at breakneck speed with binary fields. The strawmap now points to a production-grade leanVM in 2027, with CL, DL, EL deployments in 2028.
As AI becomes exceptional at cryptanalysis, the contrarian bet to avoid riskier structures like lattices and isogenies is visibly paying off. The past weeks have been brutal. Lattice-based "HAWK" and isogeny-based "SQIsign", both signature schemes in NIST's Round 3, have suffered blows. Sources I trust say more blood is coming.
On AI, the open autoresearch trend kicked off by ECDSA[.]fail is spreading fast, with amazing outcomes from zk[.]golf and SNARK[.]fast. Days ago SNARK[.]fast crossed 1.8M BLAKE3/sec proven on an M3 Max. Stay tuned for fresh autoresearch challenges dropping tomorrow.
Also tomorrow: Ethproofs call #10#, dedicated to binary fields. Possibly the most noteworthy Ethproofs call yet. Experts leading the charge will present the future of hash-based SNARKs at 2pm UTC. What an incredible time to be alive. To witness history, DM me for a calendar invite :)
Today I can confidently claim that hash-based cryptography has won out for blockchain post-quantum signatures. SNARK succinctness compresses arbitrarily many signatures into one small proof per block. SNARK flexibility yields k-of-n threshold signatures, complex multisigs, and more.
Ultimate security. Uncompromising performance. Full programmability.
Believe in something. Believe in hashes.
Show more
Across every @Offchain product (@Arbitrum, @ZeroDev_app, @Prylabs):
We build the neutral, end-to-end infrastructure layers that other platforms can build their onchain products on — We're not another payment service, exchange, wallet, router, or custodian, who build stacks that compete with their own customers.
Come build with a partner that is not your competitor.
Show more
Adding ZK to @Arbitrum BoLD protocol was surprisingly simple.
How does it work?
Today, BoLD settlement works like this:
→ Proposers can make assertions (a claim about the chain's new state); when a new assertion comes in a challenge timer starts
→ No rival assertion within the challenge window? The assertion is confirmed
→ Rival posted? The challenge protocol kicks in
New multi-prover path (everything above still holds, plus):
→ A proposer can prove any unconfirmed assertion with a ZK proof + K-of-N attestations from the Fast Confirmation Committee
→ ZK proof verifies on the parent chain & enough attestations check out? The assertion settles early - no waiting out the challenge window
Why this beats a ZK-only design:
1. Multi-prover security: Fast confirmation needs two independent systems to agree: a ZK proof verified on the parent chain + attestations from committee nodes re-executing the chain. To fast-confirm a bad state, an attacker has to break both at once. TEE-run committee nodes are planned as a further hardening step.
2. Deterministic upper bound on settlement: If the prover stalls or has a bug, the chain simply falls back to optimistic settlement: slower, never halted, funds untouched. A ZK-only chain in the same spot may never settle without security council action.
3. Pay for proving only when you need it: Proving is optional per assertion: pure fraud-proof chains pay nothing, Hybrid ZK chains proves on demand to settle early or resolve disputes, and ZK Prove All chains prove everything for always-fast settlement. ZK-only stacks have one mode: prove every batch, forever.
@Offchain will bring a proposal to the DAO to upgrade Arbitrum One to ZK settlement, and other chains built with Arbitrum Platform will be able to upgrade at will.
Stay tuned for more 👀
Show more
ZK is moving from a niche technology to core infrastructure, and @Offchain research is pushing it forward on every front 🧑🚀
I put together an overview of our team's latest ZK research ->
• Making ZK proofs faster: Verifying data 4,000x faster & expanding ZK to native integer math
• Verifiable AI: ZK proving the AI model ran correctly
• ZK in multi-prover: How @Arbitrum is integrating ZK
• ZK for confidential enterprise chains
• Closing security gaps in recursive ZK: Are recursive proofs actually secure, & can recursive proofs be tampered with
• Why WASM beats RISC-V for Ethereum L1 ISA
Full article in next tweet 👇
Show more
Gm, Robinhood Chain casually pushing 2,023 TPS in last 24h, with an all time high of 5,068 TPS (4 weeks on mainnet).
Powered by @Arbitrum Platform 🤝
First @PayPal, @CashApp, @Mastercard, @tryramp, @Venmo…
Now @Shopify! Stablecoin season on Arbitrum 🫡
Stablecoins have moved into checkout.
@Shopify supports USDC payments on Arbitrum through Shopify Payments.
Customers can pay from 480 supported wallets without FX or gas fees, while eligible merchants can receive payouts in local currency or USDC.
Show more
It’s an interesting feeling to be in the middle of a bear market ...yet more bullish than ever!
First 6 months of 2026 @Offchain ->
@Arbitrum:
• Arbitrum One monthly stablecoin transfer volume >$60B, and RWA TVS >$850M
• @RobinhoodCrypto Chain launched 3 weeks ago - ~$750M TVL, $9.2B DEX volume
• @LGUS is piloting a chain for its ad network spanning 38 countries & a 400M+ device base
• @PayPal PYUSD peaked at $428M on Arbitrum
• @CashApp, @Mastercard, @tryramp, @Venmo now all settle stablecoins on Arbitrum One
• Dynamic Pricing V1 live - smoothing gas prices & enabling up to 910 MGas/s back in Jan
• Shipped ArbOS 51. ArbOS 61 now in governance:
• Compliance tooling, ZK settlement, Privacy infrastructure, PGA, Fast Feed & new economic levers actively in development
• More major enterprise projects we can’t talk about yet 👀
@zerodev_app:
• Wallet UI SDK
• Smart Routing Address (SRA) - universal deposit address for chain abstraction
• Key Management Service (KMS) - TEE-backed tx signing
• Solana gas sponsorship
• Co-authoring Native AA for Ethereum
• More coming soon 👀
@prylabs:
• Helped define L1 Strawmap for Ethereum 3.0 (oops…I said it 🙊)
• Helped ship Fusaka
• Championed ePBS & co-authored FOCIL
• Helping define & build out Glamsterdam
You aren’t bullish enough, anon.
Show more
We're aware of a report of a bridge hack on Arbitrum and are investigating. We can confirm that the transaction in question originated from a third party protocol, and the Arbitrum native bridge has not been hacked or exploited in any way.
We will coordinate with the third party team and will report more details when we have them.
Show more
