In a world where critical decisions are made by AI using proprietary data, privacy-preserving proof of inference is table stakes. A trust layer for AI.
The world has identified verifiable AI as a missing civilization-scale primitive. The core technical obstacle, practical zero-knowledge proofs, was considered impossible.
We solved it.
Today, we are launching @attestable, the AI Integrity Company, and announcing a $20M seed round led by @jaminball at @AltimeterCap and @YonatanMandelba at @TLV_Partners , with participation from @HalcyonFutures, Cerca Partners, @Weiner_Lia at Netz, @nickymontanaa at Zero Knowledge Ventures, @assaf_rappaport, Asaf Ezra, Nadir Izrael, Jon Coller, Eyal Manor, @OmerPerchik.
Value in any hard-capped asset ultimately comes from liquidity and network effects, which is the same reason Bitcoin works.
The difference with PRL is what the work actually is. Minting it proves that an amount of computation was run, trustlessly, with no oracle or attestation involved. That means any agent or machine doing compute can mint it, which makes it a natural native asset for machine economies (inference and compute markets, verification, value transfer, or using it as collateral).
In a world where most GDP is produced by non-humans, the real currency isn’t money, it’s compute (data + energy).
The question that motivated @prlnet was whether it’s possible to create a currency directly from this scarce resource. A currency pegged to intelligence.
Our partnership with https://t.co/IwfRAocLPA (@togethercompute) showcases how Pearl changes the unit-economics of inference, and how it could help fund the AI buildout.
Couldn't have said it better than @vipulved.
Right. Pearlified inference indeed does slightly more FLOPs, but every GPU cycle also produces a second output: $PRL.
So the effective cost is:
inference cost + Pearl overhead − value of mined $PRL
Assuming $PRL is liquid, that value translates directly into “cashback.” But the deeper way to think about it is as compute futures / *AI-native money*: the token is backed by the same scarce commodity AI companies need — verifiable compute.
As enterprise adoption and network hashrate grow, that parallel revenue can more than offset the overhead, making Pearl-enabled inference cheaper net of rewards than vanilla inference.
Price model (based on Jevons analysis) can be found here: https://t.co/j8PB9qcxG9
In the unit-distance problem (as well as AlphaTensor’s 2022 improvement over Strassen’s matrix multiplication tensor), the “search space” of solutions may be infinite, but is relatively well defined (points in 2D plane, 5x5 tensors, etc).
Reasoning over a search space where solutions are themselves an algorithm/mathematical inequalities, seems much harder to “navigate”, because it’s more abstract (formally, an uncountable set). So finding logical “shortcuts” here would seem to require a higher level of “intelligence” / level of abstraction.
This is by no means to belittle GPT5.5’s Erdos breakthrough — but the most impressive aspect of the proof IMHO was the *analysis* of the counterexample it found to the grid: Analyzing the configuration’s pairwise distances relies on unexpected sophisticated ideas from algebraic number theory, which shows the level of abstraction LLMs are capable of.
The harness described below proves yet again the power of Test Time Compute, over training stronger base models.
Even @OpenAI's recent Erdős breakthrough didn't convince me that LLMs can do general math research. This changed my mind..
Using a clever 'prover-verifier' LLM loop, this harness solved 9 substantial open problems in Theoretical CS, including one that kept me up at night for 2 years.
Incredible work by my former Columbia collaborator @binghuip, @runzhou_tao, Steven Wang & @HantaoYu_Theory.
The plan is to expand this to ALL fields of science. Stay tuned.
[1/n] Recent OpenAI research has demonstrated the ability of LLMs to solve frontier problems in mathematics. We design a simple pipeline (using GPT 5.5 Pro and Claude Opus 4.8) that resolves 9 challenging open problems, including open problems from prominent theoretical computer science venues—4 from COLT open problem list and 1 from FOCS —as well as 4 problems from the commutative algebra.
Project link: https://t.co/YCBzYjfz3N, joint work with @runzhou_tao, Steven Wang & @HantaoYu_Theory
The Hadamard Transform underpins many SoTA LLM quantization algorithms such as @Google's TurboQuant, QuIP#, QuaRot, SpinQuant, and NestQuant.
LLM quantization works best when a vector’s coordinates have similar magnitudes. If most of a vector’s mass sits in one coordinate, e.g.
x = (0,0,0,1,0,0,0,0,0,0), then the quantizer faces a bad tradeoff: use a wide range and waste resolution, or use a tighter range and “clip” the outlier, which may result in significant accuracy loss of the LLM.
This is the basic motivation behind random orthogonal rotations: Multiplying x by a Gaussian rotation matrix R spreads x’s mass uniformly over coordinates, while preserving inner-products:
‖Rx‖₂ = ‖x‖₂, ⟨Rw, Rx⟩ = ⟨w, x⟩.
The problem with random rotation, of course, is computational cost: a dense d × d rotation costs O(d²) per vector, so cubic time for W*X.
In 2006, a beautiful and influential paper by Ailon and Chazelle, proposed a faster “pseudo-random” rotation op via the randomized Hadamard transform
H′ = (1/√d)HD,
where H is a Hadamard matrix and D is a diagonal random sign matrix.
It turns out that H’ has essentially the same effect as
a fully random rotation, in the sense that it “evenly spreads the mass” of any unit vector. This is essentially the uncertainty principle of the Fourier transform (!) The upshot is that H’x and H’w can now be computed in O(d log d) time instead of O(d²), due to the recursive (FFT) structure of H.
In this blog, @prlnet's 17-year old researcher @sag0li explains how how we used Agentic toos to efficiently implement a block-Hadamard kernel in CuteDSL, which allows for very fine-grained control over memory and cache management -- this is the path to ultra-fast inference!
The MoE hard fork is now live. Update now!
This upgrade marks the next phase of the Pearl network.
With this hard fork, Pearl transitions to v2 certificates based on Mixture-of-Experts (MoE) workloads, enabling the network to more accurately verify and reward useful AI computation performed by participants.
⚠️ All node operators and ecosystem participants must upgrade to the latest versions to remain on the canonical chain.
Soon, new blocks will start using the v2 (MoE) certificates. Nodes that have not upgraded will continue following the previous ruleset and will no longer be compatible with the upgraded network.
Please update to the following versions:
• pearld node → v1.1.0
• Desktop Wallet → v2.0.0
Wallet download (macOS is now supported):
https://t.co/Bs9aPMDBoX
A common critique on Proof-of-Useful-Work is that the zero marginal cost of mining drives the network’s security budget and price to zero.
A paper just released by Rafael Pass, a renowned cryptographer at @Cornell /@TechnionLive and research scientist at Pearl Research Labs proves why this argument is flawed.
By analyzing the equilibrium dynamics of PoUW, it shows not only that Pearl’s security budget (and hence price) are at least as high as Bitcoin, but in fact that Pearl will increase the SIZE of the global AI inference market, via Jevons Paradox.
https://t.co/hxRGlC3AI2
@initc3org
Mining costs crossing OTC prices proves real, large-scale inference workloads are running on Pearl. For miners running useful work on Pearl’s 2-for-1 kernels, the marginal cost of producing ¶PRL is ~0.
This partly explains why hashrate keeps climbing --
The only long-term path to profitability on @prlnet is doing useful MatMuls!
Will Fast Matrix Multiplication ever be practical?
Strassen’s 1986 discovery of fast matrix multiplication (FMM) – asserting that the product of two 𝑛×𝑛 matrices can be computed in sub-cubic time 𝑛^𝜔 ∼ 𝑛²·⁸⁷ ≪ 𝑛³ – had a profound impact on theoretical computer science and algorithm design.
Since then, mathematicians improved on Strassen’s algorithm, and some experts believe that, eventually, it will be shown that 𝜔 ≈ 2, which would mean that the time to compute AxB is essentially the time it takes to merely read the inputs: ~O(𝑛²) (!) Needless to say, such result would have a major impact on the AI compute age we’re entering…
Unfortunately, FMM algorithms only work for enormous matrices--on the order of the number of atoms in the universe (“galactic algorithms" [1])--and it is currently hard to imagine them being practical on any imaginable hardware. Besides their asymptotic runtime, a core practical issue with FMM algorithms is that they all inherently rely on recursive divide-and-conquer, which creates memory and IO-bottlenecks, and is numerically unstable; This is likely the reason why the largest hardware manufacturers in the world are not developing chips for FMM. Even Strassen’s original algorithm, which gives nontrivial FLOP speedup for relatively small matrices, struggles to beat the sheer parallelism of naiive MatMul on GPUs or TPUs.
Some interesting progress on practical FMM seems underway [2] and would be interesting to follow, but it remains to be seen whether divide-and-conquer can be implemented in both silicon and memory to deliver wall-clock speedups for realistic dimensions of matrices in LLMs.
What is means for @prlnet. That’s the reason we designed the Pearl proof-of-work protocol (cuPOW) with the underlying baseline being “naiive” matrix multiplication O(𝑛³), which is what NVIDIA, AMD, Cerebras and all other AI hardware accelerators implement today.
Nevertheless, it is important to stress that Pearl’s protocol doesn't rely on naiive MatMul remaining SoTA -- if FMM becomes practical some day, Pearl's protocol can easily adapt to the 𝑛^𝜔 baseline (since the next version of cuPoW will only verify the output AB).
In fact, one of the intriguing aspect of @prlnet is that it creates incentives (for both humans and machines) to develop faster MatMul algorithms and hardware (as had happened in Bitcoin with SHA256). Of course, without proper modification, such breakthrough would break the security assumption of Pearl-GEMM, so such algorithmic breakthrough would better be public.
FMM and FFT. Our recent paper [3] shows that it is possible to achieve fast matrix multiplication without using Strassen-like divide-and-conquer, using only the Fast Fourier Transform, which is omnipresent in countless industry-scale applications. This paper presents a simple algorithm running in 𝑂(𝑛²·⁸⁹) time, which only sums a few convolutions in 𝕫ₖᵐ, using FFT (see figure below for illustration of the algorithm).
Despite being highly parallel (no recursion), this FFT algorithm for MatMul remains asymptotic, as it still requires many parallel repetitions on submatrices in order to obtain noticeable speedup over naiive MatMul (𝑛³). Whether FFT can lead to subcubic time MatMul
for reasonably-sized matrices is a fascinating question!
I believe FFTs are the most promising tool in this direction...
[1] Lipton, Richard J., and Kenneth W. Regan. “David Johnson: Galactic Algorithms.” In People, Problems, and Proofs, 109–112. Springer, 2013. https://t.co/X6N6ViYYai.
[2] Karstadt, Elaye, and Oded Schwartz. “Matrix Multiplication, a Little Faster.” Journal of the ACM 67, no. 1 (2020): 1:1–1:31. https://t.co/VnfiWVLdKK.
[3] Uffenheimer, Yahel, and Omri Weinstein. “Improved Sparse Recovery for Approximate Matrix Multiplication.” arXiv:2602.04386, 2026..