Dev Ojha on the Osmosis Story and his Return to Privacy

In this episode, Anna Rose and Guillermo Angeris catch up with Dev Ojha, co-founder of Osmosis and longtime ZK researcher. They revisit the story of Osmosis since its 2021 launch as a key Cosmos DEX, its role in early IBC adoption, the DeFi summer surge, the Terra collapse fallout, and the later pivot by the team toward privacy-focused cross-chain tools. The conversation then turns to Dev’s return to privacy tech, focusing on Zcash. They explore ongoing challenges like shielded sync, nullifier bloat, and scaling shielded transactions, along with proposed solutions involving private information retrieval (PIR), oblivious synchronization, evolving nullifiers, recursive SNARKs, faster block times with pre-confirmation ideas, and paths toward post-quantum recoverability. They wrap-up with a discussion about the need for further zkVM optimization and his vision for a more private future.    Related Links OsmosisZcashNamadaFractal: Post-Quantum and Transparent Recursive Proofs from HolographyTachyon: Scaling Zcash with Oblivious SynchronizationIBC ProtocolPrivate Information Retrieval (PIR)Arkworks Related Previous ZK Episodes Sean Bowe on Tachyon and the Evolution of Zcash     Applications to attend the zkSummit14 on May 7 in Rome are open! This edition has limited spots — we recommend applying early at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://youtu.be/9u4fu7TiZCA In this episode, Nico Mohnblatt speaks with Alex Hicks from the Ethereum Foundation about formal verification and its role in the lean Ethereum vision. This is the 6th and final episode of the lean Ethereum mini-series. Nico and Alex explore what it means to produce machine-checked proofs across the ZK stack, from RISC-V and zkVMs to circuits, compilers, and cryptographic primitives, and how these pieces connect in practice. The conversation also covers Alex’s path from physics and math into the ZK space, how the EF effort took shape, and the community push to formally verify the entire stack using proof assistants like Lean. They discuss efforts to formalize zkVM components, the tradeoffs between proof assistants and automated solvers, and what real progress looks like after a year and a half of focused work.   Related Links lean Ethereum Part 1: Introduction with Justin Drakelean Ethereum Part 2: PQ Signatures and Poseidon with Dmitry and Benediktlean Ethereum Part 3: Security of PQ SNARKs and an update about the Proximity Prizelean Ethereum Part 4: leanVM, a Custom VM for Signature Aggregationlean Ethereum Part 5: Devnets & Upgrade Coordination with Will and Raúllean EthereumLean Consensus R&D ProgressLean Proof AssistantIsabelle Proof AssistantEthereum Foundation     Applications to attend the zkSummit14 on May 7 in Rome, Italy are open! This edition will be more intimate with limited spots — we recommend applying early at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://youtu.be/Ul2bs8INF0k In this episode Nico Mohnblatt chats with Will Corcoran and Raúl Kripalani from the Ethereum Foundation. This is part 5 in the 6-part leanEthereum miniseries, shifting focus from the cryptographic primitives and LeanVM stack to the real-world integration happening through devnets, specs, and cross-team coordination. They dive into the human coordination layer, how independent teams align on post-quantum signatures, SNARK aggregation, and protocol changes, plus the networking upgrades needed for larger payloads. Raúl explains the shift from today's libp2p stack to a purpose-built Eth P2P next-gen version optimised for Ethereum's workloads, including better broadcast layers, erasure coding, and control planes to handle bandwidth competition between execution and consensus layers. Related Links lean Ethereum Part 1: Introduction with Justin Drakelean Ethereum Part 2: PQ Signatures and Poseidon with Dmitry and Benediktlean Ethereum Part 3: Security of PQ SNARKs and an update about the Proximity Prizelean Ethereum Part 4: leanVM, a Custom VM for Signature Aggregationlean EthereumLean Consensus R&D ProgressEthereum Foundation     Applications to attend the zkSummit14 on May 7 in Rome, Italy are open! This edition will be more intimate with limited spots — we recommend applying early at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://youtu.be/YWkyvTrwtQU   In this episode of the lean Ethereum miniseries, Nico Mohnblatt speaks with Thomas Coratger and Emile from the Ethereum Foundation about the design and implementation of LeanVM, a minimal zkVM created to support post-quantum signature aggregation on Ethereum’s consensus layer. They explain why the team chose a VM architecture over fixed circuits and how LeanVM takes inspiration from Cairo with just 4 opcodes and 2 precompiles to keep the instruction set extremely small and make formal verification easier. The conversation also covers LeanVM implementation choices like using Plonky3 and WHIR for efficient proving on CPUs, benchmarks for aggregation speed, and the role of Python specs in testing client interop. They share ongoing efforts to optimize low-level primitives and invite community input on the project.   Related Links lean Ethereum Part 1: Introduction with Justin Drakelean Ethereum Part 2: PQ Signatures and Poseidon with Dmitry and Benediktlean Ethereum Part 3: Security of PQ SNARKs and an update about the Proximity Prizelean EthereumLean Consensus R&D ProgressCairo zkVMWHIR: Reed–Solomon Proximity Testing with Super-Fast VerificationMinimal zkVM for Lean Ethereum by Emile Repos leanEthereum github organizationleanSig repo (optimized Rust implementation of XMSS for Ethereum usage)leanSpec repo (the Python spec of the lean consensus)WHIR repoPlonky3 repoleanVM     Applications to speak at zkSummit14 close this Sunday March 15! This edition will be more intimate with limited spots — we recommend applying early. Apply at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://youtu.be/v8SGKS3T-3A In this episode, Nico Mohnblatt speaks with Giacomo Fenzi from EPFL and Antonio Sanso from the Ethereum Foundation. For this 3rd instalment of the lean Ethereum miniseries, they talk about the theory and security behind post-quantum SNARKs. They dive into the hash-based proof systems underpinning LeanVM, multilinear approaches like sumcheck, and how these fit into Ethereum's post-quantum upgrades. They cover the $1M Proximity Prize and the recent wave of papers on proximity gaps, correlated agreement, and list decoding. From negative results near the Elias bound to breakthroughs beyond the Johnson bound for certain codes, the discussion explores how new results slightly degrade conjectural security, why the 128-bit threshold still matters, and what it means to move from conjectural to provable security in large-scale systems like Ethereum. Related Links lean Ethereum Part 1: Introduction with Justin Drakelean Ethereum Part 2: PQ Signatures and Poseidon with Dmitry and Benediktlean EthereumLean Consensus R&D ProgressleanSig ImplementationPoseidon2: A Faster Version of the Poseidon Hash FunctionOn Proximity Gaps for Reed–Solomon CodesProximity Gaps in Interleaved CodesOn Reed–Solomon Proximity Gaps ConjecturesOptimal Proximity Gaps for Subspace-Design Codes and (Random) Reed-Solomon CodesAll Polynomial Generators Preserve Distance with Mutual Correlated Agreement Additional Resources Soundcalc GitHubProximity prizeOn the Distribution of the Distances of Random WordsSmall-field hash-based SNARGs are less sound than conjectured by Fenzi and SansoWHIR: Reed–Solomon Proximity Testing with Super-Fast VerificationSTIR: Reed–Solomon Proximity Testing with Fewer QueriesLinear-Time Accumulation SchemesTensorSwitch     Applications to speak at zkSummit14 are now open! This edition will be more intimate with limited spots — we recommend applying early. Apply at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://www.youtube.com/watch?v=xh8hbz1nqxQ In this episode, Nico Mohnblatt speaks with Benedikt Wagner and Dmitry Khovratovich, cryptography researchers at the Ethereum Foundation, for the second instalment of the lean Ethereum miniseries. They explore leanSig, a hash-based multi-signature scheme designed as a post-quantum replacement for BLS in Ethereum consensus. The conversation walks through how one-time signatures and Merkle trees can be combined to support long-lived validators, and why SNARK-based aggregation is needed in a post-quantum setting. The talk touches on key tradeoffs like signature size versus verification speed, encoding challenges behind their At the Top of the Hypercube work, and the role of Poseidon as the core hash function. Related Links lean Ethereum Part 1: Introduction with Justin Drakelean EthereumLean Consensus R&D ProgressleanSig ImplementationPoseidon2: A Faster Version of the Poseidon Hash FunctionAt the Top of the Hypercube – Better Size-Time Tradeoffs for Hash-Based SignaturesHash-Based Multi-Signatures for Post-Quantum EthereumTechnical Note: LeanSig for Post-Quantum EthereumAborting Random Oracles: How to Build them, How to Use themThe Billion Dollar Merkle Tree Poseidon: A New Hash Function for Zero-Knowledge Proof SystemsPoseidon Cryptanalysis Initiative     Applications to speak at zkSummit14 are now open! This edition will be more intimate with limited spots — we recommend applying early. Apply at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://www.youtube.com/watch?v=Dad2UonQ9Ag&feature=youtu.be In this episode, Nico Mohnblatt sits down with Justin Drake from the Ethereum Foundation to kick off a miniseries on lean Ethereum, a bold vision to rethink Ethereum’s consensus, data, and execution layers. Justin outlines how post-quantum cryptography, faster finality, and enshrined zkEVMs fit together into a cohesive redesign. At the heart of it is leanVM, an ultra-minimal zkVM built to aggregate hash-based signatures and recursively verify proofs, potentially turning post-quantum migration into a scalability win. They also explore formal verification efforts, the shift from conjectured to provable proximity gaps, Poseidon2 as a hash candidate, and how this work could set a post-quantum standard not just for Ethereum, but for other blockchains as well. This episode sets the stage for deeper dives in coming episodes. Related Links Ethproofslean EthereumLean Consensus R&D ProgressPoseidon2: A Faster Version of the Poseidon Hash Functiongithub.com/leanEthereum/leanSpecgithub.com/leanEthereum/leanMultisig     Applications to speak at zkSummit14 on May 7 in Rome, Italy are now open! This edition will be more intimate with limited spots — we recommend applying early. Apply at www.zksummit.com zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

https://www.youtube.com/watch?v=JbskOlf7oA0 In this episode, Anna Rose and Nico Mohnblatt kick-off a new six-part video miniseries exploring lean Ethereum. Lean Ethereum is a proposal initiated by the EF that weaves zero-knowledge cryptography and post-quantum upgrades throughout Ethereum’s stack. They discuss why the topic deserves a deeper series, what listeners can expect from upcoming episodes, and how this new video-first format will differ from the podcast’s usual style. The conversation previews key themes like hash-based signatures, formal verification, proximity gaps, and the broader goal of future-proofing blockchain protocols with minimal cryptographic assumptions. They also share details about the upcoming zkSummit14 and how the community can get involved. Related Links Ethproofslean EthereumLean Consensus R&D ProgressPoseidon2: A Faster Version of the Poseidon Hash Function     Applications to speak at zkSummit14 on May 7 in Rome, Italy are now open! This edition will be more intimate with limited spots — we recommend applying early. Apply at www.zksummit.com   zkMesh+ live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript

There’s no full-length episode this week, but we wanted to highlighting a new bonus segment available exclusively to zkMesh+ subscribers. In this, we revisit last week’s conversation with Ian Miers, Assistant Professor of Computer Science at the University of Maryland.  Ian dives deeper into: The renewed cultural focus on privacyThe evolving narrative around ZcashHis recent research on reducing nullifier state growth without relying on traditional pruning Join zkMesh+ as a paid subscriber to get access to this and all our extra members-only perks. https://zkmesh.substack.com/subscribe We return next week with a 6-part series on Lean Ethereum… stay tuned!

In this episode, Anna Rose and Nico Mohnblatt welcome back Ian Miers, Assistant Professor of Computer Science at the University of Maryland, to continue the conversation from a previous episode and dig deeper into his latest work like zk-Promises, zk-Cookies, and Cryptographic Personas. These ZK tools aim to build social networks that protect user privacy while maintaining integrity, like anonymous moderation and reputation systems without central databases. Ian explains how they differ from traditional creds but share ideas around proving attributes securely. The conversation explores real-world applications, such as banning bad actors without de-anonymizing them, setting rules in private group chats, and creating self-sovereign identities that persist over time. Ian also touches on challenges like stolen accounts, trolling, age checks, and how these primitives could shape future online interactions.   Related Links Ian Miers: Academic profile and publicationszk-creds: Flexible Anonymous Credentials from zkSNARKs and Existing Identity Infrastructurezk-promises: Anonymous Moderation, Reputation, and Blocking from Anonymous Credentials with Callbackszk-Cookies: Continuous Anonymous Authentication for the WebCryptographic Personas: Responsible Pseudonyms Without De-AnonymizationZexe: Enabling Decentralized Private ComputationZerocoin to zk-creds: Modern ZK History with Ian Miers     zkMesh+ is live! Subscribe for zkMesh+ and catch the latest State of ZK 2025 report.     **If you like what we do:** * Find all our links here! @ZeroKnowledge | Linktree * Subscribe to our podcast newsletter * Follow us on Twitter @zeroknowledgefm * Join us on Telegram * Catch us on YouTube   **Support the show:** * Patreon * ETH - Donation address * BTC - Donation address * SOL - Donation address * ZEC - Donation address Read transcript