Number of verifiers
AggregationShows if recursive proof aggregation is used.
YesTrusted setupShows if a trusted setup is used anywhere in the proving stack.
YesList of verifiers
| Name | Verifier | Verification status | Last used | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ScrollVerifierV0 | 0x585D…AD2D | Not verified Verification was not performed for this verifier. | 62 days ago | |||||||||||||||||||||||
Verifier 0x585D…AD2DLast used 62 days agoDescription Halo2 + KZG verifier using calldata for DA. Corresponds to version v0.9.5 of the circuits.
| ||||||||||||||||||||||||||
| ScrollVerifierV1 | 0x4b28…b247 | Not verified Verification was not performed for this verifier. | Today | |||||||||||||||||||||||
Verifier 0x4b28…b247Last used Today
| ||||||||||||||||||||||||||
Description
Scroll utilizes the Halo2 proof system but modified to use KZG commitments instead of IPA commitments. The scheme makes use of the alt_bn128’s field. The prover code can be found here.
The protocol makes use of proof aggregation. Documentation for the aggregation architecture can be found here. The system doesn’t implement data compression yet.
The final proof is not wrapped in a different proof system. The CRS used is the powersOfTau25_hez_final and the instructions to regenerate the verification keys can be found here.
The differences between the zkEVM and the EVM are listed here. The source code of the base circuit can be found here and the source code of the aggregation circuits can be found here.
The system utilizes two verifiers, one to be used with calldata as DA (v0.9.5) and the other with blobs as DA (v0.10.3).
List of required tools
| Tool name | Version | Tool docs |
|---|---|---|
| Custom tool | v0.10.3 | More informationMore info |