witness

ZK tools for Solana. Generate and verify proofs in your browser, test what breaks on Q-day, and scan what your wallet leaks.

[witness @witnesstools]

$Witness
CA:9bRDTRVGa72n6nyJnQNP3kCyteJVnb4hUTU5E6pRpump

The only official address. It's also on https://t.co/WaI3VTknSC, so compare every character.

Zero-knowledge tools for Solana: real proofs in your browser, a Q-day check, and a wallet leak scanner.

[witness @witnesstools]

Solana transactions got 3.3x bigger.

v1 transactions went live on Sept 15: 1,232 bytes to 4,096.

- A 256-byte Groth16 proof: fits easily
- A 99,629-byte post-quantum STARK: still needs 26 of them (was 97)

Bigger. Not big enough.

https://t.co/WaI3VTknSC

[witness @witnesstools]

Flip one bit. Watch it fail.

We took a real 99,629-byte ZK-STARK from our lab and changed a single bit (byte 51,337: 6f to 4f).

Before: valid.
After: rejected.

The verifier's exact words: "FRI layer 1 opening does not match its commitment."

https://t.co/u2PDwOTZMU

[witness @witnesstools]

The bar for Q-day keeps dropping.

Qubits needed to break a 256-bit curve:
2017: ~2,330 logical
2026: under 1,200 logical, under 500k physical

No machine that size exists yet. Your wallet, Groth16 proofs and encrypted balances all rest on curves.

https://t.co/WaI3VTknSC

[witness @witnesstools]

256 bytes. That's the whole proof.

A Groth16 proof is three curve points: -A, B and C. Solana checks it with one pairing call, about 78,000 compute units, and it fits in a single transaction.

The catch: it's forgeable on Q-day.

https://t.co/u2PDwOTZMU

[witness @witnesstools]

Prove you're on the list. Not which one.

Join a 1,000-member allowlist and claim without saying who you are. Claim twice and the nullifier catches you. Copy someone's proof and it won't pay you.

Private airdrops, sized for a real Solana transaction.
https://t.co/u2PDwOTrXm

[witness @witnesstools]

Harvest now, decrypt later.

We encrypted two amounts the way Token-2022 confidential transfers do, then broke the key from its public key alone. 165 ms in a browser tab.

It was a 24-bit demo key. Shor's algorithm does the same to the real 252-bit one.

https://t.co/u2PDwOTZMU

[witness @witnesstools]

What a quantum computer actually breaks:

- Groth16 proofs: old ones never leak your secret. New ones can be forged.
- Encrypted balances: every stored amount can be read.
- Wallet keys: recoverable from your address.
- Hash-based STARKs: still hold.

https://t.co/jgSLJZoLrd

[witness @witnesstools]

Your wallet already talks.

Paste any Solana address and see what anyone can learn in about 5 seconds: who funded it, which wallets it keeps paying, when you sleep, what you hold.

No connect, no sign-in. Read-only.
https://t.co/2lIPAru8L1

[witness @witnesstools]

Same secret. Two proofs.

Groth16: 256 bytes. Fits in one Solana transaction. Forgeable once quantum computers can run Shor.
ZK-STARK: 99,629 bytes. Only hashes, survives Q-day. Needs 97 transactions just to carry it.

Make both in your browser: https://t.co/u2PDwOTrXm

[witness @witnesstools]

Meet Witness.

Zero-knowledge tools for Solana, in your browser:
- Proof lab: Groth16 vs a post-quantum STARK
- Q-day check: what quantum actually breaks
- Wallet leak scanner: what your address gives away

No token yet. CA will be posted here first.
https://t.co/WaI3VTknSC