Rose

building @atheonxyz, prev:- @primev_xyz, @zkemail, @nethermind, @ethereum fellow, graduate @iitroorkee || one day

[Rose @0xrosetteeee]

touched grass

[Atheon @atheonxyz]

Today we're launching early access to Zwap.

Trustless, shielded cross-chain swaps for Zcash. In and out of Orchard, trusting no one.

Live now: https://t.co/AV2pcQQ7SB

[Atheon @atheonxyz]

We're hiring a Growth Lead at Atheon

Someone who actually understands ZK infrastructure and knows how to build an audience that does too.

You'll own the voice of Atheon and build the audience from the ground up. If high ownership is what you're looking for, this is that.

[Rose @0xrosetteeee]

zk is no longer niche, it’s aesthetic now.💅🎨

[Rose @0xrosetteeee]

sf:- a tech guy’s dream and honestly so prettyyyy

[Rose @0xrosetteeee]

@worldcoinfnd’s sf office is prettyy solidd, very sam altman energyyy

[Rose @0xrosetteeee]

@worldcoinfnd’s sf office is prettyy solidd, very sam altman energyyy

[Rose @0xrosetteeee]

@iponikar here for a workstation, need to meet some ppl

[Rose @0xrosetteeee]

flew on the Airbus A380 recently, definitely lives up to the “world’s best” tag.

[Rose @0xrosetteeee]

@nitanshu already booked, it’s the A350 hehe

[Rose @0xrosetteeee]

@nitanshu damn that’s a solid first intl flight

[Rose @0xrosetteeee]

@0xanmol @worldcoinfnd @dcbuilder hehe yeah here for 2 weeks, let’s see what all I can explore on the weekends, thanks for the recs!

[Rose @0xrosetteeee]

@0xanmol j here for some work with the @worldcoinfnd team.

[Rose @0xrosetteeee]

@khushi_on_twt count me in

[Atheon @atheonxyz]

Cross-chain swaps shouldn’t leak your entire trade graph.

Today’s standard (HTLCs) makes swaps trivially linkable across chains via shared hash.

We’re introducing Zwap - a new atomic swap construction compatable across programmable and UTXO chains that removes that assumption entirely.

Instead of hash correlation, we use:

• ECDH-based key aggregation → Shared signing key = s · b
• Zero-knowledge binding proof → Ties secret to both locks (off-chain)
• Trustless execution → Fixed recipients, zero MEV surface

What this unlocks:

→ No shared on-chain identifier across chains
→ Cryptographic unlinkability
→ Compatible with Bitcoin, Litecoin, Zcash (no protocol changes)

HTLC swaps are easy to trace.
Zwap removes that linkage at the protocol level.

This moves us closer to eliminating cross-chain linkage at the protocol level.

Explore it here: https://t.co/pe3wO9eksY

[Rose @0xrosetteeee]

yeah, the constraint format is standard R1CS, but the witness includes FS challenges; we call this GR1CS internally. The key requirement is the ability to sample challenges between witness commitments, which works naturally with any multi-round proving protocol. and thanks for the paper, looks interesting, will check it out 👀

[Rose @0xrosetteeee]

@blockchainbalak good luck ser

[Rose @0xrosetteeee]

yeah, the key dependency is the ability to sample FS challenges during the proof, which assumes a multi-round protocol.
In our setup (WHIR PCS), that falls out naturally since the protocol already alternates between commitments and challenges.
Vanilla Groth16 is single-pass with a fixed witness, so there’s no place to inject that randomness.

[Rose @0xrosetteeee]

Great points on Poseidon, we actually use Poseidon2 wherever we control the primitive (Merkle trees, attestation, nullifiers).
But the core use case here is passport verification, where we don’t get that choice. Since everything is signed with RSA-SHA256 (X.509), we have to recompute the exact same hashes.
That’s exactly why making SHA-256 cheaper in R1CS matters for us, it’s not optional, it’s a hard constraint.

[Rose @0xrosetteeee]

after n rejections and 2(n+1) round trips to delhi, finally got my US visa, just in time for the war 💀🇺🇸