1 of 14

Anon Governance Wen?

2 of 14

StealthDrop

Aayush, Adhyyan, Nalin

Zero knowledge airdropping technology

Ideas/help from: @gubsheep, Yi Sun, 0xPARC community, @phated, Lakshman S, DC

3 of 14

Flow

Merkle Root

eligible addresses on the allowlist

proof of ownership of private key: sig(m)

Airdroppoor

yush.eth

0xad829...

Nullifier list

hash(sig)

coin

ZK:

4 of 14

5 of 14

ZK-SNARKs

6 of 14

Demo Video

Old demo live on stealthdrop.xyz/

100+ claims!

7 of 14

Exploit

Issue: Nondeterministic Signatures

(but what about deterministic ECDSA?)

Fix: Priv2pub or ....

8 of 14

Internals

9 of 14

Frontrunner Relayers

How do you actually claim, if it’s a fresh account with no gas?

Inspired by surrogeth, we pay frontrunners via community treasury!

Faucets get transactions into mempool, and frontrunners execute

10 of 14

Fixing circom2 witness generation ✅

11 of 14

zk-node-server

An optimized remote SNARK prover: �used by zk-pairing (demo tomorrow) ✅

12 of 14

Chunking zkeys - used by zk-reddit ✅

13 of 14

Zkey curve caching optimisation�Open PR 🚦

14 of 14

Repo

https://github.com/nalinbhardwaj/stealthdrop

Aayush

https://github.com/Divide-By-0/

https://twitter.com/yush_g

Adhyyan

https://github.com/Adhyyan1252

Nalin

https://twitter.com/nibnalin

https://github.com/nalinbhardwaj

Ideas/help from: @gubsheep, Yi Sun, 0xPARC community, @phated, Lakshman S, DC