Hungry Cats Studio is undergoing a re-branding!
It started as a game studio, and hence the original, playful name. Already a while back, the company shifted gears to cryptography.
It's time for New Projects, working alongside Nice People.
It's time for NP Labs.
With the hype around zkVMs, I've had many crypto-but-not-ZK people ask me whether we will use Jolt, Risc0, or SP1. We are not, and I hope this thread will help you understand why:
I’m excited to announce that Hungry Cats Studio has been accepted into the Spring 2024 cohort of
@a16zcrypto
’s Crypto Startup Accelerator (CSX)! We’re excited to connect with the other founders in London, meet and learn from top crypto entrepreneurs, and receive guidance from
It’s been five months since we opened applications for Crypto Startup Accelerator (CSX) Spring 2024 in London, and after reviewing and interviewing a huge pool of worthwhile candidates, we’re thrilled to announce that we’ve selected our final cohort of 24 early-stage companies.
Our team at
@0xHungryCats
has implemented 3 multilinear Polynomial Commitment Schemes from scratch in the recent weeks: Hyrax, Ligero & Brakedown.
We used the
@arkworks_rs
backend and made our new schemes compatible with the arkworks traits.
I love how at
@a16zcrypto
's CSX I can just book a 1-on-1 with the CTO. 1h with
@eddylazzarin
is like a full day of intense brainstorming. Still processing the convo.
Spot the winner of the Crypto '24 Best Paper Award winner.
Hint:
@GiacomoFenzi
We're lucky to have him with us
@0xHungryCats
. Congratulations Giacomo!!! 🎉🥳🔥
8/24 (fresh take!) with
@a16zcrypto
CSX teams
@DeryaKarl
from
@zkPassport
at her 2nd home in the
@aztecnetwork
office. I must admit, it is a great office with shiny logos :)
With her track record in the ID space, and the user-first vision, zk-credentials gonna make waves. LFG!
4/24 pic series with
@a16zcrypto
CSX London '24 teams.
Ran into
@CoffeeTimesTW
from
@Spire_Labs
in one of the Fora offices. We jammed about ZK, sequencers and fundraising.
Bullish on solo founders from our cohort ;)
11/24 pics with
@a16zcrypto
CSX founders
Do we want ZK consensus by ZK, or by consensus?
That, and other deep questions on prover networks with
@jmininger0
from
@taralli_labs
. We found a sunny terrace in London!
There is a misconception that SNARKs need FFTs.
With hash-based SNARKs, you can use FFTs, but other, possibly more efficient techniques are possible. Here's the breakdown (no pun intended):
You typically need to encode a vector into some larger vector, and then have the
I recently did a deep dive into the differences in groth16 implementation between snarkjs and arkworks, to prepare
@arkworks_rs
`circom-compat` 0.5.0 release. That was quite a journey!
Common misconception: ZKP is not always about 'circuits'. Actually, what we are proving are 'relations'. It just happens that most of the early deployed SNARKs were for relations that were best expressed by (arithmetic) circuits. So, the name caught on.
Boarding the plane to London rn. I'm grateful for this unique opportunity to meet and work with crème de la crème of crypto.
See you tomorrow
@jasonrosenthal
&
@a16zcrypto
!
Today we’re announcing the full cohort for CSX Spring 2024 in London
Our Crypto Startup Accelerator (CSX) Spring 2024 program kicks off this week, with the founders of 25 promising early-stage startups gathered in London. Over 10 weeks, they’ll learn from each other and receive
But, if you have:
1) very structured computation, with only a few gadgets (gadget is like a function: write once, use many times)
2) program structure known ahead of time (i.e. program not user-generated)
3) preference for efficiency over flexibility/programmability
don't use VM
22/24 with
@a16zcrypto
CSX
Beautiful shot with the beautiful
@razgraf
and
@PaulRBerg
.
I just learned that with
@Sablier
you can set up a streaming airdrop! This is big: reward your community but no risk of dumping.
Keep 'em tricklin'
But, as with most good things in life, this comes at a price.
A VM is designed to be general-purpose, so for any particular program, it may end up executing many unnecessary steps. This is similar to the distinction between CPUs and FPGAs.
A founder needs to wear multiple hats, they said.
I took it literally. Here are my hiking (
@Web3summit
), running (
@ModulusLabs
) and coding (
@SindriLabs
) hats.
23/24 with
@a16zcrypto
CSX teams
Great thing about the CSX series is getting to know each founding team and learning new terms like 'phygital': a hybrid world of physical products and their digital twins.
@aleksijavujicic
and Leon at are pioneering it!
13/24 of the
@a16zcrypto
CSX series.
Discussing growth drivers for proof aggregation with
@afrazhaowang
from
@nebrazkp
. Imagine if every web3 app had an integrated ML engine. They'd need cheap proofs on-chain. Massive partnership opportunities between Nebra and all of ZKML.
14/24 of
@a16zcrypto
CSX series
Do platforms benefit more from a flagship demo, or multiple smaller examples showcasing the range of capabilities?
@damor_eth
&
@heylukegibson
from
@PlaymintUK
can share their perspective on game platforms. Similar logic applies to blockchains!
5/24 pic series with the
@a16zcrypto
CSX teams.
Discussing different lock up and vesting mechanisms with
@PiccoGabriele
from
@magicblock
. It's hard to prevent trading of your token, but you can definitely make it harder.
Having fun tackling
@CryptoHack__
challenges using an
@arkworks_rs
backend for working with ECC. Mine is the first submission in
@rustlang
for the `Efficient Exchange` task. More to come!
20/24 of
@a16zcrypto
CSX teams
I gave
@jaymehoffman
the elevator pitch, and he said he still didn't know what I was building after 50s of me talking. So I refined it acc. to his spot-on feedback, and delivered a killer 30s on stage.
With such a CEO,
@launchcaster
is 🔥🔥🔥
If you have:
1) potentially arbitrary, unstructured computation
2) programs generated by users (you don't know what logic they want to encode)
3) end users who are not ZK experts
You should probably use a VM-based approach to SNARKs.
Ethereum has been great at scaling...well, Ethereum.
We're entering a phase where we can do more than EVM-compatible L2s.
Imagine compute-rich use cases like Machine Learning verifiable directly onchain.
SNARKs + ML can provide tangible benefits for the users. Let's see how:
9/24 with the
@a16zcrypto
CSX founders
Reflections and bad lighting, but still the
@TranchedSocial
team with
@Savinien2Cyrano
and Michael shining with their F1 skills and St. Paul's in the background.
It allows you to prove that you ran an arbitrary program (which compiles to a fixed set of instructions, e.g. RISC-V). No need to express each step of the program as constraints! This is an extremely powerful primitive: devs don't need to know ZK to write verifiable programs.
VM-based approach to SNARKs is tailored for arbitrary programs whose structure is potentially unknown ahead of time - e.g. user-generated programs, like smart contracts.
Let's define coprocessors: computation executed outside of L1, but that is settled to L1 via some verification mechanism (can be optimistic, ZK or TEE or sig)
Thx to
@rezabfil
and fellow panelists
@melynx
@Ismael_H_R
@no89thkey
@zkdiegokingston
(Better late repost than never)
I recently read my first fiction book in 6+ months, Project Hail Mary (grabbed from the
@a16zcrypto
London library!).
I wish I could spoil the plot; it was SO good.
It is a funny read, too (all narrated as 1st-person, amnesia-hit astronaut).
If you like hard science fiction,
19/24 with
@a16zcrypto
CSX founders
Payment Ladies
@juliejaclyn
and
@MichelleLatzer
from
@payTweed
. Their UX-first approach is evident when reading docs (yes that's what I do on Thur evenings). Quoting:
"control over how much detail of the wallet you want to show to your users"
Removing the ZK-expertise barrier will unlock tremendous opportunities and open the doors to more developers. We are 100% aligned with this - we're facing the same problem for ZKML: web3 devs don't have the necessary skills to deploy verifiable models.
1/3
Check out our new Hungry Cats and Blogs entry:
We explain why and where we need efficient multilinear Polynomial Commitment Schemes in Lasso(1) and Jolt(2), a new line of work by:
@srinathtv
(1,2),
@SuccinctJT
(1,2), Riad Wahby(1),
@arasuarun
(2)
Looks like there is some renewed interest in Rabin-Williams signatures out there.
Sharing my old implementation in case this helps the community. There is no audit, use at your own risk:
Rabin-Williams has a much faster verifier than RSA, because it
GM, if you had one shot, or one opportunity
To seize all the funding you ever wanted,
In one moment, would you pitch it, or just let it slip?
His palms are sweaty,
knees weak,
ledger's heavy
It's time for the demo day already,
tokens steady.
3/24 pic series with
@a16zcrypto
CSX cohort.
Here
@CottenIO
from
@scryptedinc
and I at the Polish memorial in Bletchley Park. The Poles were the first to crack the early Enigma machine, even before WW2.
Very bullish on Polish cryptographers ;)
The first piece of writing we have for you as the newly rebranded
@NPLabs_
is a deep dive into the Ligero Polynomial Commitment Scheme (PCS):
We review its soundness analysis and study the number of column openings required for a target security level.
As
@SuccinctJT
noted multiple times in his posts, this massively reduces the area for buggy code since turning programs into constraints requires practice & expertise. End users write standard Rust code and pam! -magically they can prove its correct execution.
Spelling "on-chain" vs. "onchain" is a serious question.
@NoahCitron
,
@rhhackett
&
@jessepollak
argued that "onchain" hints at being part of the common language, like "e-mail" became "email".
The argument for "onchain" is much simpler though, you save one char in tweets.
Before looking at how VMs magically make programs provable, let's first examine how a very simple computer program, like multiplying two integers and adding a constant, would be expressed with a constraint-based approach like halo2 (or the FPGA in our analogy).
6/24 of the
@a16zcrypto
CSX series.
Sharing book recommendations with
@EDuijnstee
&
@_scheuclu_
from
@labs_compass
, with the curated CSX library in the background.
I'm currently reading "The Power Law", where the author S. Mallaby recounts the story of a pioneer VC Arthur Rock:
Well said, but small correction: the endgame is high performance *provable* compute.
Let me expand on this:
We are in a position to build the world computer, Ethereum, that is able to do more than token transfers, swaps, and even more token transfers and token swaps on L2s.
We
There are few companies with leadership as strong as Ben's, and a team as talented as
@EspressoSys
.
If anyone's gonna build a solution used across L2s it's gonna be them.
LFG ☕
Espresso Systems is hiring! Fueled by a new round of investment led by
@a16zcrypto
and with angel support from founders and contributing organizations to some of the most forward thinking L2 rollups and infra projects, including
@arbitrum
@0xPolygon
@taikoxyz
@Scroll_ZKP
Some thoughts on why zkML adoption has been slow:
The recent improvements in efficiency are a positive development, unfortunately, they are not enough. We need an easy and reliable way for dApp developers to integrate verifiable ML.
Let's explore the details in this thread:
10/24 of the
@a16zcrypto
CSX series
Openly trading hungry cats with
@BTC_Dave
and Tom from
@opentrade_io
, and sharing hiring & firing stories (I was mostly soaking up their wisdom, not much to share on my side yet).
18/24 with
@a16zcrypto
CSX founders
Multi-handshake partnership with
@zk108
,
@yorkeccak
& Alex<>
@0xHungryCats
confirmed!
I'm thrilled to bring
@ValyuNetwork
's validated data sources to our Model Exchange platform and facilitate the job for competition hosts & participants.
You'd start by expressing the mul operation as a constraint, and if you do it correctly for all operations, you can proceed to prove that your output was computed correctly, given some input.
(for our simple program, this is actually just one plonkish constraint)
We encourage all engineers and researchers familiar with these PC schemes to review the implementations. PRs are up in arkworks-rs/poly-commit:
- Hyrax:
- Brakedown:
- Ligero:
1/ It seems that many repos within ZK are getting typo-fixing-PRs by bots at scale now. I would discourage accepting such contributions, especially from accounts with private activity. E.g. .
Another deep dive from
@NPLabs_
just landed, this time in the zkML land:
Our goal is to highlight how changes in the number of model parameters impact the tradeoff between accuracy of ML models vs. proving time for verifiable inference.
While a CPU is versatile, an FPGA is customized to a specific application, efficiently eliminating unnecessary tasks - such as repeatedly fetching and decoding each instruction that a CPU must perform.
I'm excited to see where the upcoming development in general-purpose ZK from
@a16zcrypto
Jolt,
@SuccinctLabs
's SP1 or
@RiscZero
will take us and how performant they can get.
This work was possible only thanks to the fantastic effort by
@AutQuis
and Antonio Mejías Gil.
Furthermore, we'd like to thank Giorgos Zirdelis from
@ModulusLabs
for the discussions on the security of linear code based PCS.
Together with
@0xHungryCats
I had the pleasure to collaborate with Modulus Labs. Every single person on their team is an absolute wizard in what they do. Go ML!
Ecstatic to announce our $6.3M Seed round today, co-led by
@1kxnetwork
&
@variantfund
🎉
With participation from prominent funds & angels, we're building Modulus: the 𝗔𝗰𝗰𝗼𝘂𝗻𝘁𝗮𝗯𝗹𝗲 𝗠𝗮𝗴𝗶𝗰 company🪄
How does specialized ZK bring AI on-chain?
Inversion paradigm in SNARK design:
To avoid R1CS for range checks etc., people came up with lookups. Then Lasso was introduced, which relies on Spartan, a technique designed for R1CS. Full circle.
#EuroCrypt24
musing while boat cruising with
@MatCampanelli
@Flavio_leMec
ZK chains/rollups have good amortized costs, so work great for huge demand.
Game-theory based chains/rollups don't scale so well, but arguably there's still room for them as they offer better costs for lower levels of demand.
Playing the long term game will make you look stupid in the short term. It takes discipline and strength (financial, emotional) to not give in to what everyone else is doing and stick to your principles.
- Paraphrasing from Shane Parrish's "The Knowledge Project"
For the last 12 weeks, I've been surrounded by world-class founders who have all come to London to participate in the
@a16zcrypto
CSX. The accelerator is coming to an end with Demo Day next week, but you can follow our future achievements via this list:
Now, if you use a zkVM approach, rather than expressing the operation directly as add/mul gates, you simulate - in a circuit - how your CPU operates. This includes reading instructions, reads & writes to registers and to memory. Described very well in Fig. 2 in the Jolt paper:
@rphmeier
I often allude to Solana's approach: to process compute-rich applications (rich in volume or complexity) you need one of:
1) powerful nodes (Solana)
2) proofs of computation (ZK)
3) cryptoeconomic security & sharding (async backing)
1) won't scale infinitely, but is needed
Luck favors the prepared mind.
Over the last ~12 months, our team at
@0xHungryCats
has been exploring ZK co-processors, and only thanks to the experience we gathered during that journey were we able to make the most recent pivot.
21/24 with
@a16zcrypto
CSX
I heard many people get excited about Farcaster, but few compare to
@rish_neynar
in their conviction and energy.
Keep an eye out for
@neynarxyz
's infrastructure offering
Books mostly talk about how great entrepreneurship is. Yes, it often appears glamorous from the outside. On the inside, it's an emotional rollercoaster and Ben does a great job at preparing you for it.
Note: you can never be fully prepared, no matter how many books you read
The Hard Thing About Hard Things by
@bhorowitz
quickly became one of my favorite books on entrepreneurship and leadership.
Discussing some of my favorite quotes with
@_scheuclu_
and
@m2magician
with the curated
@a16zcrypto
CSX library in the background.
He's nervous, but on the surface he looks calm and ready
To pitch more and he keeps on fundraising
Building heads down, the whole crowd goes so wild
he opens his mouth and the words just come out
he’s closing how, everybody’s FOMO, wow
the clock’s run out, term sheets give me now
Honored to have
@0xHungryCats
featured in the landscape!
ZKML is all about:
1. Correct Application - fixed model
2. Integrity of Parameters - parameters not tampered with
3. Correct Execution - correct output, given some input and a fixed model
I prefer to think of bundling 1 &
Excited to launch the ZK Catalog, an initiative that kickstarts ZK circuit verification in blockchain projects.
This marks the start of a wider initiative aimed at boosting transparency and trust in Zero-Knowledge systems.
7/24 with
@a16zcrypto
CSX founders.
As a founder, you gotta have a clear vision for your product.
@grimmtidings
from
@Roux__xyz
and I start by sharing her cute, animal print microfiber cloth to get our glasses in shape.
True story 😎
Zero knowledge tech is making rapid progress in the crypto world. You can look onchain to see who's using ZK.
Since Ethereum's launch, the # of unique contracts on mainnet Ethereum calling ZK related precompiles every month has grown steadily.
Let's dig in to the data!
Had fun creating this Devcon zkPassport integration! It allows people from SEA countries to prove their country (from their passport) without revealing anything else using ZK proofs to get a Devcon ticket discount. Here’s how it looks in action: