proof

Quantitative researcher ahzam stated that he will join Proof as the head of quantitative research, working alongside Squid and the team to build a new type of market. ahzam mentioned that he has been working at VelocityDEX and Drift since early 2025, and in recent months the team has undergone a complete reconstruction of the exchange, where he was responsible for most of the exchange's economic models and program development. ahzam also indicated that he has been working on perpetual contracts almost every day for the past two years.ahzam noted that he has been paying attention to Proof since Squid began experimenting with conditional contracts, viewing it as a new asset class that combines perpetual contracts and prediction markets, with related work focusing on fair pricing and exchange design. ahzam stated that he will travel to London to attend Breakpoint. Proof is driven by Squid and is positioned as a conditional perpetual and multi-world market exchange; VelocityDEX is a perpetual contract exchange on Solana, renamed from Drift. ahzam's personal profile shows that he was previously a quantitative researcher at VelocityDEX and has worked at AsgardFi.

According to MTS, OpenAI's artificial intelligence model has proven half of a million-dollar Millennium Prize problem in the field of physics, supported by a review panel led by a Nobel Prize winner. MTS stated that this problem is the Yang-Mills problem. OpenAI first announced the relevant proof on October 26, stating that its model completed this work in September. The review panel is chaired by Nobel Prize winner David Gross, with members including Arthur Jaffe, who co-authored the official statement of the Millennium Prize problem.The relevant proof has been formally completed using the linearly verifiable computer language Lean. The Yang-Mills problem is one of the seven Millennium Prize problems established in 2000, each with a prize of one million dollars; the only one solved so far was completed by Grigori Perelman, who refused to accept the prize. MTS pointed out that to win the award, it is still necessary to prove the mass gap and meet the Clay Mathematics Institute's rules regarding publication and a two-year recognition period. X user Theo Jaffee stated that physicists have been able to handle quantum field theory and quantum Yang-Mills theory on an empirical level, but have always lacked a mathematical formalization of why this theory holds.

Scroll announced that it received a vulnerability bounty report on November 3, indicating that there was a vulnerability in the bundle proof validator deployed on the Ethereum mainnet, and it registered a fixed validator for batch version 10 on November 10. Scroll stated that it has confirmed that the vulnerability was not exploited on the mainnet.According to the report, the vulnerability could allow old valid proofs to be accepted for new public inputs, thereby allowing the final confirmation of any state root and withdrawal root. Exploiting this vulnerability requires having a permissioned prover role or enabling the forced batch mode after 7 days without final confirmation.Scroll stated that the forced mode was never enabled, and all 748 final confirmations during the period of the vulnerability used normal proofs, with previous versions of the validator unaffected.

AnomaPay disclosed on platform X that it has discovered an external security vulnerability in the RISC Zero proof system it uses, which may jeopardize user funds. To protect users and ensure the safety of funds, the risc0 validator behind Anoma has been suspended and will be upgraded by the RISC Zero team.AnomaPay stated that the funds deposited by users are safe, but they will be temporarily inaccessible until the Anoma protocol is upgraded to version V2, which includes the new security updates from RISC Zero. The upgrade is expected to take about two weeks. Although this downtime is not ideal, it is necessary to protect user funds. Users do not need to take any action; funds will be automatically migrated to V2 and access will be restored after the upgrade is completed.

Binance stated that the latest proof of reserves zero-knowledge proof has been generated, and users can verify their account balances to obtain at least 1:1 asset backing.

Binance released an update on the progress of the security incident recovery, stating that approximately 98% of the affected assets have been replenished. Binance will continue to purchase the remaining token assets through market and over-the-counter trading channels. Due to the low liquidity of the remaining 2% of tokens, the purchase is expected to take some time.Binance stated that it will bear the full loss of the stolen funds from this incident and has reserved more than 100% of the total required assets from its own funds.Additionally, Binance completed a new round of reserve proof snapshots on November 4 at 8:00, expanding the number of tokens covered from 10 in the previous round to 44. The complete zero-knowledge proof is expected to take about 50 to 60 hours to generate, at which point users holding tokens within the coverage range can independently verify whether their account balances have at least 1:1 sufficient reserve support.

Ethereum co-founder Vitalik Buterin warned at Devcon 8 that AI poses new threats to security and privacy, while also helping to discover vulnerabilities. He questioned the security of hardware wallets and cautioned against making cryptocurrency investments based on social media posts filled with bots and manipulated content.Vitalik called for the adoption of decentralized, verifiable technologies and zero-knowledge proofs to protect personal data, and suggested that businesses avoid collecting unnecessary information.

Anthropic has open-sourced FlashProve, bringing the commonly used zkSNARK (zero-knowledge proof) technology from the cryptocurrency field into AI model inference.This technology was originally designed to prove the validity of blockchain transactions without disclosing transaction details. Anthropic aims to use it to solve another problem: when users pay a high price for an AI model's API, how can they know if the service provider has secretly switched to a cheaper model?FlashProve allows service providers to first generate encrypted fingerprints for the model weights and then provide mathematical proof for the inference results. Users do not need to obtain the model weights or rerun the model; they can check whether the specified output comes from the previously committed set of weights. Claude was also involved in the development and optimization of this system.Anthropic has already completed experiments on Meta's 400 billion parameter model Llama 4 Maverick. For every 1024 tokens of context processed, the generated proof is about 19 MB, and verification on a regular CPU takes about 17 seconds.However, currently, each proof can only verify one output token and cannot validate an entire response. The GPU computation time required to generate the proof is also about 70 to 95 times that of regular inference. Whether it can be used to identify API service providers that secretly switch models in the future will depend on when the cost of proof generation can be reduced.

According to The Block, the Aztec Foundation behind the Ethereum privacy Layer 2 network Aztec has launched the Tierra (Alpha V6) upgrade, which fixes security vulnerabilities from previous versions, including a critical vulnerability in V5, and introduces an AI-based security testing system.In terms of performance, the new version doubles the speed of generating privacy transaction proofs, taking only about 1 second on local devices; the time for Ethereum messages to reach Aztec has also been reduced from an average of about 2 minutes to as fast as 12 seconds, further enhancing cross-chain deposit and transaction efficiency. Aztec stated that due to the network's decentralized architecture, fixing critical vulnerabilities requires an upgrade of the entire network, and plans are currently underway to accelerate the deployment of future security updates.In terms of ecosystem, Aztec has recently relaunched the self-custody privacy wallet zk.money, and several applications are being launched or prepared for launch, including Galactica, which supports privacy AI inference, the privacy perpetual contract trading platform Nemi, the privacy browser wallet Nulo, and Xochi and Nyx, which support privacy payments and transactions. Meanwhile, Aztec has also released a new brand image and website, aiming to become the infrastructure platform for privacy applications.

The Ethereum Foundation stated that its technical core team is collaborating with humanitarian organizations to develop a proof of concept for a humanitarian aid coordination network based on Ethereum, combining decentralized identity with privacy payment rails.The solution utilizes technologies such as ERC-4337, privacy addresses, and Semaphore to keep personal data off-chain and verify credentials through zero-knowledge proofs without exposing the issuer; the relevant solution has completed performance testing on low-end Android devices, and the code has been open-sourced on GitHub.

According to Binance's announcement, the complete zero-knowledge proof for the reserve proof (PoR) snapshot on October 31 has been completed. Users holding BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC can use their verification tools to independently verify whether their account balances have at least 1:1 reserve support.Binance stated that it plans to take another snapshot on November 4, covering more tokens, and then generate a complete zero-knowledge proof, which is expected to take about 40 to 50 hours. The company previously mentioned that it has replenished approximately 95% of the affected assets, with the remaining approximately 5% of tokens having low liquidity and still being procured.Binance also plans to gradually resume withdrawals for more networks and assets tomorrow, with specific details to be announced once ready.

Binance stated that as part of ongoing security response measures, the platform has updated the Proof of Reserves (PoR) address list to include newly generated wallet addresses.All subsequent withdrawals will be processed uniformly through these new wallet addresses.

Binance co-founder He Yi responded to users on the X platform, stating that after the other altcoins are completed, reserve proofs will be provided for user verification.He Yi previously stated that Binance is in the process of supplementing other altcoin assets that have not yet been fully matched; the completed reserve proof snapshots involve 10 tokens, which are expected to be available for holders to verify after the complete zero-knowledge proof is generated.

Binance released the second progress announcement regarding the security incident, disclosing two key timelines. The announcement was made at 3:33 AM on October 31 (UTC+8).Binance stated that it plans to conduct the first proof of reserves snapshot within 12 hours after the announcement and will publish the results before November 2; at the same time, the technical team's goal is to gradually restore withdrawal services within approximately 34 hours, depending on the progress of security checks.Based on the announcement time, Binance plans to complete the first proof of reserves snapshot by 3:33 PM on October 31, with the goal of starting a phased restoration of withdrawal services by 1:33 PM on November 1.Binance previously stated that it has prepared over $6.34 billion in company funds, of which approximately $5 billion worth of affected token assets are in place, covering about 80% of the stolen assets, with the remaining portion being purchased through on-chain and off-chain channels. Additionally, approximately $3 billion of affected assets have been frozen on-chain.

Binance Co-CEO Richard Teng stated that Binance has reserved over $6.34 billion in company funds to compensate for the stolen assets, of which $5 billion is held in affected tokens, including USDC, USDT, BTC, ETH, and BNB. The remaining portion is being purchased through market and over-the-counter channels. He reiterated that the affected wallets are Binance's own hot wallets, and customer funds have not been used; the vast majority of user assets are stored in cold wallets.Regarding the details of the attack, Teng mentioned that this attack was not the work of a single individual and that the methods used were complex. Preliminary investigations pointed to an infected laptop, and subsequent investigations uncovered other points of breach. The attackers employed a self-destruct mechanism, destroying tools and traces while attacking, which increased the difficulty of tracking. The attackers also exploited the known EIP-7702 protocol to gain on-chain execution authorization for the hot wallet, which had not gone through Binance's normal approval controls. As a result, Binance suspended withdrawal services to investigate, rebuild, and retest the entire infrastructure.In terms of follow-up arrangements, Binance is rebuilding the withdrawal service and will only re-enable it after strict testing, aiming to restore withdrawals before the Sunday deadline in approximately 40 hours. Binance is also conducting a comprehensive security review of terminals, cloud platforms, key management, and signatures. Binance plans to release a complete proof of reserves (PoR) report by Monday at the latest and hopes to provide preliminary results before that. Additionally, Binance is collaborating with law enforcement, blockchain intelligence companies, token issuers, and other exchanges to track, freeze, and recover the stolen funds.

Binance CEO He Yi stated that Binance's SAFU fund and the cryptocurrencies held by Binance include a large amount of assets such as BTC and ETH. Currently, they are completing the Proof of Reserves (POR) by fully matching all stolen altcoins through OTC and on-exchange purchases. After the purchases are completed, they will update everyone with the information again.

According to CoinDesk, its review of the proof of reserves data from Binance shows that the wallet emptied in the attack was the reserve wallet used by Binance to prove that user assets are fully supported 1:1. The reserve report released by Binance on October 1 included the attacked "Binance 14" hot wallet, which at the time held approximately 1.26 billion USDT and 89,475 ETH, involving a total of 37 types of assets.The report stated that on October 1, Binance's ETH reserve ratio was exactly 100%, and the USDC reserve ratio was 108.26%. Approximately 204,500 ETH was stolen, accounting for about 5.6% of its ETH reserves, which could result in the ETH reserve ratio dropping to around 94%; the stolen assets such as ENA, UNI, PEPE, and AAVE accounted for about 7% to 15% of Binance's corresponding holdings, and the reserve ratios for USDC and some altcoins may also fall below 100%.Binance and co-CEO He Yi stated that user funds are safe, and user balances will be fully reimbursed. CoinDesk pointed out that Binance's next reserve snapshot will take place on November 1, at which time it will be possible to see if the stolen assets have been replenished. Binance has not yet responded to CoinDesk's request for comment.

Succinct's zero-knowledge proof system SP1 has revealed a high-severity reliability vulnerability. This vulnerability was disclosed through GitHub announcement GHSA-p7v2-jjv3-8p8f, affecting SP1's native Rust verifier versions 6.0 to 6.8.0, allowing the mainnet Prover Network to potentially accept invalid proofs: malicious provers can submit proofs of invalid executions, and the network verifiers will still accept them.The cause of the vulnerability is that the verifier only reads the labels of the data (declaration dimensions) without verifying whether the actual number of stored elements equals the product of the dimensions, allowing attackers to forge labels to pass invalid proofs. The Groth16 and Plonk checks using fixed-shape wrap proofs are unaffected, and the on-chain Solidity checker is also safe. Succinct released the fixed version 6.8.1 on September 24, which has been deployed to the mainnet; this version adds deserialization length checks.The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users running the native Rust verifier and accepting untrusted provers need to upgrade to 6.8.1.

According to CoinDesk, Cardano founder Charles Hoskinson stated that he is personally developing a new programming language for the Cardano network and collaborating with Input Output Global engineer Lucas Rosa. Lucas Rosa is a co-creator of Aiken, one of Cardano's main smart contract languages. Hoskinson posted on the X platform that this will be the first programming language to combine user transaction completion intentions with cryptographic proofs.It is reported that the language will support three tools: transaction intent, data with carry proofs, and Groth16 proofs. Transaction intent allows users to specify the goals they want to achieve, while leaving the specific steps to the application, for example, traders can request that a token be exchanged for another only when the final price meets certain conditions, without specifying the exact path.Data with carry proofs can attach cryptographic evidence to information, proving that it complies with specific rules, allowing other applications to verify without recalculating. Groth16 is a widely used proof system that can generate small-sized, fast-verifying proofs, demonstrating that conditions have been met without exposing private data.With the combination of the three, developers can build applications that coordinate transactions, check complex conditions, and pass verified information between services, ultimately verified by Cardano with a small proof. Currently, Cardano developers mainly use Haskell-based Plutus and Aiken to write smart contracts, while Input Output Global, founded by Hoskinson, has its own privacy blockchain Midnight with its language Compact. The name, public code, and release date of this new language have not yet been announced.

Ethereum research forum researcher Pierre proposed a faster, aggregatable, and quantum-resistant privacy pool solution.This solution ports a Tornado Cash-like privacy pool to the hash-based SNARK system Flock, which may possess post-quantum security, and uses SHA-256. The solution replaces large circuits with small "single compression" circuits.