And it's syncing #ethereum @EthereumOnARM
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Goodbye, Poseidon!
An epic 8-year, 8-figure rabbit hole in post-quantum cryptography reaches its dream conclusion. The Ethereum Foundation is abandoning Poseidon for L1, pivoting to SHA or BLAKE. This milestone unlocks ultimate security for lean Ethereum and foreshadows a golden era of hash-based cryptography.
Since 2018, the Ethereum Foundation has invested in magic cryptographic bricks, so-called "SNARK-friendly hashes". In 2019, Poseidon was born. It held strong and became the dominant SNARK-friendly hash, securing billions via zkrollups and zkVMs.
In a stunning reversal, breakthrough SNARK designs show that SNARK-friendly hashes aren't necessary after all. Off-the-shelf traditional hash functions like SHA2 and BLAKE2s can now match Poseidon in a SNARK. In hindsight the key was not SNARK-friendly hashes, but hash-friendly SNARKs.
The secret is doing maths over the smallest prime number: 2. So-called "binary fields" natively speak the language of bits, aligning with the boolean operations inside traditional hashes. This is a stark departure from "prime fields", where awkward large-prime arithmetic makes bit manipulation painfully expensive.
We're talking sci-fi cryptography. 1M traditional hash calls proven per second, on a laptop. Just 100x overhead vs native CPU boolean compute. Nobody predicted such performance, not even the handful of binary-field visionaries. Hat tip to the research geniuses: Jim and Ben with Binius in 2023; Ron, Benedikt and William with Flock in June.
With SHA2, the lean aesthetic of minimal assumptions reaches its climax. The EF's principled stance on pure hash-based cryptography has aged like fine wine. We now enjoy foundations the world can trust for decades and centuries, foundations worthy of the dream of an internet of value.
Speed of deployment is a secondary win. There's no longer a need to wait years for Poseidon cryptanalysis to bake. Emile and Thomas from the EF post-quantum team are moving at breakneck speed with binary fields. The strawmap now points to a production-grade leanVM in 2027, with CL, DL, EL deployments in 2028.
As AI becomes exceptional at cryptanalysis, the contrarian bet to avoid riskier structures like lattices and isogenies is visibly paying off. The past weeks have been brutal. Lattice-based "HAWK" and isogeny-based "SQIsign", both signature schemes in NIST's Round 3, have suffered blows. Sources I trust say more blood is coming.
On AI, the open autoresearch trend kicked off by ECDSA[.]fail is spreading fast, with amazing outcomes from zk[.]golf and SNARK[.]fast. Days ago SNARK[.]fast crossed 1.8M BLAKE3/sec proven on an M3 Max. Stay tuned for fresh autoresearch challenges dropping tomorrow.
Also tomorrow: Ethproofs call #10, dedicated to binary fields. Possibly the most noteworthy Ethproofs call yet. Experts leading the charge will present the future of hash-based SNARKs at 2pm UTC. What an incredible time to be alive. To witness history, DM me for a calendar invite :)
Today I can confidently claim that hash-based cryptography has won out for blockchain post-quantum signatures. SNARK succinctness compresses arbitrarily many signatures into one small proof per block. SNARK flexibility yields k-of-n threshold signatures, complex multisigs, and more.
Ultimate security. Uncompromising performance. Full programmability.
Believe in something. Believe in hashes.
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Two weeks ago, Ethereum researchers met in Berlin to continue charting the protocol's long-term trajectory, following along discussions with client teams in Svalbard in April.
The updated strawmap is at strawmap.org, and I attached a picture of it to this post.
My own high-level takeaways:
* "Lean Ethereum" is not a single one-shot upgrade, it is a collection of improvements that will come online to the Ethereum network over the course of three or four years. But make no mistake, this IS the third major iteration of Ethereum in the same way that the Merge was the second. Almost every major piece of the protocol will be replaced:
- Verification through recursive STARKs, rather than direct re-execution. Recursive STARKs become an enshrined first-class core component of the protocol
- Replacing everything quantum-vulnerable with quantum-safe alternatives
- Consensus: decoupled available chain and finality, one or two-round finality. Theoretically optimal security properties, simpler than today, and faster than today
- Multidimensional gas
- State: not just tree structure, but what *types* of state are available
- Changes to client architecture
...
At the same time, simplification, cleanup and future-proofing. And this will all be done in a way that minimizes disruption to existing application. We've done this before (the Merge), we can do it again.
* H-star (aka Hegota) is probably Ethereum's last thematically "pre-Lean" fork. Starting from I-star, most of everything we do will have a very strong "Lean" feel to it in one way or another.
* Privacy is no longer an afterthought, it is a first class goal. When designing Frames, the mempool, additions to the state tree, we explicitly ask the question "okay, how do quantum-safe, intermediary-free privacy protocol transactions go through this, and what is the overhead?"
* Formal verification of everything for security.
* FV also makes us much more comfortable with canonicalization (having pieces of the protocol that are directly defined as a piece of bytecode expressed in some language). evm-asm is being written in part to become a canonical proof system for the EVM.
* Quantum safety has shifted up a LOT in priority. This adds a lot of work (eg. finalizing a quantum-safe blobs design has become urgent; this work has already been ongoing for months)
* Probably the single most disruptive part of the plan is the changes to state. There is growing consensus around leaving present-day-style "dynamic state" mostly unchanged, but scaling it only a medium amount, and adding new types of state that are more scalability-friendly (eg. no need for builders to sync/store all of it) but more restrictive, and that will scale a large amount.
eg. possible Ethereum in 2030: 2 TB of present-day-style (dynamic) state, and 100 TB of new-style (scalable but restrictive) state
This "new-style" state would work very well for ERC20s, NFTs, many defi use cases, but not eg. highly "central" objects like Uniswap contracts, or onchain order books, or other complex things (which are crucial for Ethereum but which only take up a small percentage of state)
Hence, it will not be *necessary* to rewrite any apps, but it will be *very cost-effective* to eg. rewrite an ERC20 token into a newer design that uses a new type of UTXO storage that is currently being explored, so that it will have >10x lower txfees.
Design of these new state types (current ideas: keyed nonces, ring buffers, UTXOs, statically accessible state, temp state) is an area where we will need a lot of feedback from application developers (incl. privacy-friendly application developers) and probably several rounds of rethinking and iteration.
* In the context of a much larger total state size, we need to figure out the incentive issues around who stores this state and what motivates them to. Even saying "each node stores 1%" is not good enough - why do they store that 1% and why are they willing to serve it? This is being elevated as a first-class research area.
* Ethereum will need to have a "VM" other than EVM in one form or another - at the very least, we need something like leanISA for recursive STARKs - and the gains are large in exposing it to users so that we support programmable privacy and better scalability. Right now, the most likely contenders are leanISA and RISC-V.
My own ideal is that in this world, we adjust the protocol so that the EVM becomes a high-level-language compiler-level feature, and the protocol only "sees" RISC-V / leanISA directly. But this is still far away.
* Gas limit increases, blob increases and slot time decreases will happen many times over the next ~5 years. We expect a large gas limit increase with Glasterdam. Each step of increased scale or decreased slot time is a matter of getting to the point where it is safe to do it, which comes from a combination of client optimization and protocol changes.
Ethereum is CROPS.
Ethereum is scaling.
Ethereum is reinventing itself.
Onward.
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Don’t fall for false narratives
- Equity bull market intact
- Crypto only way for tokenization
- Crypto key in a machine to machine AI world
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Go away
Tom Lee is down eight billion dollars on $ETH and Vitalik decides to write a sci fi novel
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
meanwhile prediction markets volume on solana:
$0
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Base is doing things the right way: an L2 on top of Ethereum, that uses its centralized features to provide stronger UX features, while still being tied into Ethereum's decentralized base layer for security.
Base does not have custody over your funds, they cannot steal funds or stop you from withdrawing funds (this is part of the L2beat stage 1 definition).
You can see Base's status as an L2 on l2beat: l2beat.com/scaling/projects/…
I feel like many people have been confused by recent cynicism and think that things like L2beat are a weird sort of nerd-sharia compliance authority. This is NOT what is going on. The security that L2s provide, that L2beat measures, reflects concrete properties that protect you as a user from being rugged.
Here is an explanation of how, if an L2 shuts down, users are automatically able to withdraw funds even without that L2's involvement:
nitter.cf/l2beat/status/18537569…
Here is an example of how L2s prevent the operator from censoring transactions, that happened on Soneium earlier this year:
nitter.cf/gauthamzzz/status/1879…
This is what we mean when we say that L2s are non-custodial, they are extensions of ethereum, not glorified servers that happen to submit hashes. There are concrete pathways implemented in smart contract logic on Ethereum L1, that have been successfully used in the wild, that ensure that the L2 users' funds are ultimately controlled by L1, they cannot be stolen or blocked by the L2 operator.
1/ as a follow-up to @iampaulgrewal's comments, I want to provide more detail on how the @base sequencer actually works — and fully shut down the FUD that folks are actively spreading around the role sequencers play
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Replying to @ryanconnor
How many times are you going to ask this same question and keep getting the same answer? lmao
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
$ETH will be above $5,000 by october
Repost if you agree
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Major outages: Ethereum vs The rest 🤯
credits to @sharplink for this.
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
It would be nice if we all got to do the Vegeta meme again together some time this year
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
ladies and gentlemen, welcome to the Era of Ethereum
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
The Summer Pump is here!
ETH is pumping and to celebrate, we are pumping up the ETHFI incentives
Up to 2M $ETHFI will be distributed to new depositors.
Deposit weETH or liquidETH now, and start earning ASAP: ether.fi/app/weeth
Details below👇👇
Eleon.eth Ξ Da3m0ns.eth Eigenlayer operator retweeted
Ethereum is leading on every front
- Most decentralized
- Most stablecoin value settles on Ethereum
- Largest total value locked in DeFi protocols
- Ethereum is home for real-world assets migrating onchain
As real capital and sovereign actors enter the space, they’ll look for a foundation that hasn’t failed
Ethereum has had zero downtime at the protocol layer in 10 years
It's looking good for Ethereum




























