yurin.eth

building @molecula_io |
Founder of @web3talentsshow and @royalfools_lol |
Web3 full stack dev. React/Next/Nest/Node/Solidity

[yurin.eth @Yurin_sol]

Development Team weekly check-out. We are working on second level quests. Cooking something interesting for y'all 👀

[soispoke.eth @soispoke]

🪾New EIP-8272: Recent Roots for Frame Transactions 🪾

by @soispoke, @nero_eth and @VitalikButerin

Another EIP to enable native, trustless, censorship-resistant privacy on Ethereum.

tldr: Private transactions on Ethereum often need to prove against a recent commitment tree root. This EIP lets a FrameTx carry that root directly in its signed envelope.

The protocol checks that the root was written onchain for the referenced slot and is still inside the usable window. This means validation can use the root without reading arbitrary application storage.

The goal is to help private transactions get FOCIL inclusion guarantees by making recent roots part of the partial state attesters will store after the transition to zkEVM.

Target fork: Hegota

Links below 👇

[yurin.eth @Yurin_sol]

@shannholmberg Warp. Default terminal is a bull shit

[Aave @aave]

Aave V4 is now live on @ethereum.

[vitalik.eth @VitalikButerin]

Now, the quantum resistance roadmap.

Today, four things in Ethereum are quantum-vulnerable:

* consensus-layer BLS signatures
* data availability (KZG commitments+proofs)
* EOA signatures (ECDSA)
* Application-layer ZK proofs (KZG or groth16)

We can tackle these step by step:

## Consensus-layer signatures

Lean consensus includes fully replacing BLS signatures with hash-based signatures (some variant of Winternitz), and using STARKs to do aggregation.

Before lean finality, we stand a good chance of getting the Lean available chain. This also involves hash-based signatures, but there are much fewer signatures (eg. 256-1024 per slot), so we do not need STARKs for aggregation.

One important thing upstream of this is choosing the hash function. This may be "Ethereum's last hash function", so it's important to choose wisely. Conventional hashes are too slow, and the most aggressive forms of Poseidon have taken hits on their security analysis recently. Likely options are:

* Poseidon2 plus extra rounds, potentially non-arithmetic layers (eg. Monolith) mixed in
* Poseidon1 (the older version of Poseidon, not vulnerable to any of the recent attacks on Poseidon2, but 2x slower)
* BLAKE3 or similar (take the most efficient conventional hash we know)

## Data availability

Today, we rely pretty heavily on KZG for erasure coding. We could move to STARKs, but this has two problems:

1. If we want to do 2D DAS, then our current setup for this relies on the "linearity" property of KZG commitments; with STARKs we don't have that. However, our current thinking is that it should be sufficient given our scale targets to just max out 1D DAS (ie. PeerDAS). Ethereum is taking a more conservative posture, it's not trying to be a high-scale data layer for the world.
2. We need proofs that erasure coded blobs are correctly constructed. KZG does this "for free". STARKs can substitute, but a STARK is ... bigger than a blob. So you need recursive starks (though there's also alternative techniques, that have their own tradeoffs). This is okay, but the logistics of this get harder if you want to support distributed blob selection.

Summary: it's manageable, but there's a lot of engineering work to do.

## EOA signatures

Here, the answer is clear: we add native AA (see https://t.co/YD9nIpsxcC ), so that we get first-class accounts that can use any signature algorithm.

However, to make this work, we also need quantum-resistant signature algorithms to actually be viable. ECDSA signature verification costs 3000 gas. Quantum-resistant signatures are ... much much larger and heavier to verify.

We know of quantum-resistant hash-based signatures that are in the ~200k gas range to verify.

We also know of lattice-based quantum-resistant signatures. Today, these are extremely inefficient to verify. However, there is work on vectorized math precompiles, that let you perform operations (+, *, %, dot product, also NTT / butterfly permutations) that are at the core of lattice math, and also STARKs. This could greatly reduce the gas cost of lattice-based signatures to a similar range, and potentially go even lower.

The long-term fix is protocol-layer recursive signature and proof aggregation, which could reduce these gas overheads to near-zero.

## Proofs

Today, a ZK-SNARK costs ~300-500k gas. A quantum-resistant STARK is more like 10m gas. The latter is unacceptable for privacy protocols, L2s, and other users of proofs.

The solution again is protocol-layer recursive signature and proof aggregation. So let's talk about what this is.

In EIP-8141, transactions have the ability to include a "validation frame", during which signature verifications and similar operations are supposed to happen. Validation frames cannot access the outside world, they can only look at their calldata and return a value, and nothing else can look at their calldata. This is designed so that it's possible to replace any validation frame (and its calldata) with a STARK that verifies it (potentially a single STARK for all the validation frames in a block).

This way, a block could "contain" a thousand validation frames, each of which contains either a 3 kB signature or even a 256 kB proof, but that 3-256 MB (and the computation needed to verify it) would never come onchain. Instead, it would all get replaced by a proof verifying that the computation is correct.

Potentially, this proving does not even need to be done by the block builder. Instead, I envision that it happens at mempool layer: every 500ms, each node could pass along the new valid transactions that it has seen, along with a proof verifying that they are all valid (including having validation frames that match their stated effects). The overhead is static: only one proof per 500ms. Here's a post where I talk about this:

https://t.co/rAUSJjW7WL
https://t.co/EtXpkaDll5

[vitalik.eth @VitalikButerin]

“Ethereum was not created to make finance efficient or apps convenient. It was created to set people free”

This was an important - and controversial - line from the Trustless Manifesto ( https://t.co/QAvZfiNxpe ), and it is worth revisiting it and better understanding what it means.

“efficient” and “convenient” have the connotation of improving the average case, in situations where it’s already pretty good. Efficiency is about telling the world's best engineers to put their souls into reducing latency from 473 ms to 368ms, or increasing yields from 4.5% APY to 5.3% APY. Convenience is about people making one click instead of three, and reducing signup times from 1 min to 20 sec.

These things can be good to do. But we must do them under the understanding that we will never be as good at this game as the Silicon Valley corporate players. And so the primary underlying game that Ethereum plays must be a different game. What is the game? Resilience.

Resilience is the game where it’s not about 4.5% APY vs 5.3% APY - rather, it’s about minimizing the chance that you get -100% APY.

Resilience is the game where if you become politically unpopular and get deplatformed, or if a the developers of your application go bankrupt or disappear, or if Cloudflare goes down, or if an internet cyberwar breaks out, your 2000ms latency continues to be 2000ms.

Resilience is the game where anyone, anywhere in the world will be able to access the network and be a first-class participant.

Resilience is sovereignty. Not sovereignty in the sense of lobbying to become a UN member state and shaking hands at Davos in two weeks, but sovereignty in the sense that people talk about "digital sovereignty" or "food sovereignty" - aggressively reducing your vulnerabilities to external dependencies that can be taken away from you on a whim. This is the sense in which the world computer can be sovereign, and in doing so make its users also sovereign.

This baseline is what enables interdependence as equals, and not as vassals of corporate overlords thousands of kilometers away.

This is the game that Ethereum is suited to win, and it delivers a type of value that, in our increasingly unstable world, a lot of people are going to need.

The fundamental DNA of web2 consumer tech is not suited to resilience. The fundamental DNA of _finance_ often spends considerable effort on resilience, but it is a very partial form of resilience, good at solving for some types of risks but not others.

Blockspace is abundant. Decentralized, permissionless and resilient blockspace is not. Ethereum must first and foremost be decentralized, permissionless and resilient block space - and then make that abundant.

[yurin.eth @Yurin_sol]

@legiondotcc The problem when working in private repositories or corporate GitLab(((

[shafu @shafu0x]

It's so simple bro

1) Do CryptoZombies
2) Cyfrin Updraft
3) Go to Hackathons!
4) Build simple frontend
5) Build simple indexer
6) Build the EVM from scratch
7) Deploy something real
8) Read great protocols
9) Go to step 7 and repeat

[SHERLOCK @sherlockdefi]

Sherlock is pleased to announce that we are auditing @Molecula_io.

Launched in late May 2025, Molecula is building products that make safe yield accessible to everyone.

Be sure with Sherlock.

[Bankless @Bankless]

The next 10 years of Ethereum laid out by @VitalikButerin:

- ZK-snarking everything.
- Privacy by default.
- Ultralight nodes.
- Self-custody.
- Finance happens on Ethereum by default.

He envisions a future where cryptographic verification is the norm.

“The era of ‘trust me’ for security starts looking as archaic as the era of not cleaning our water… we’ve already gotten there with HTTPS… we need to get there with everything else.”

[molecula @molecula_io]

🚨 Myth or Fact?
“Stablecoins are always safe because they’re pegged to a fiat currency - usually the US dollar”

If you think a peg is a magic shield, you might want to ask $UST holders how their 2022 went. 🫠

Let’s break it down 👇

[molecula @molecula_io]

https://t.co/ViMzWKzpci

[nixo.eth 🦇🔊🥐 @nixorokish]

Updated with the Pectra mainnet date 🤠

[yurin.eth @Yurin_sol]

@shahh Is a power

[yurin.eth @Yurin_sol]

@yanbrode @PlatonRedkin Пусть не переживает, это на Терлецкой дубраве на самом деле

[yurin.eth @Yurin_sol]

@shafu0x pick it pack it fire it up

[yurin.eth @Yurin_sol]

@Optimism Optimism, it’s like react over js

[yurin.eth @Yurin_sol]

@realDonaldTrump wen rug?

[Lauris @lzminsky]

of course you hate L2s

youre a first year cycler. you just started your CT account. bet your first follow was ansem. youre gonna be convinced of solanas fast throughput until next month when you discover the nakamoto institute. then youre gonna be talking about szabos history of money and how bitcoin and ordinals are the immutable play. Thats gonna last until next year you're gonna be in here regurgitating zkSync's whitepaper, talking about, you know, the validity proofs and the capital-efficient effects of EVM equivalence

[yurin.eth @Yurin_sol]

@MattWallace888 @Civil_Disco

[yurin.eth @Yurin_sol]

@naiivememe no comments