polygon-zkevm

Polygon zkEVM proof system

polygon L2 proof-system final protocol spec BN254

Native status: Mainnet
Enables: A Plonky2 zkEVM prover wrapped in a BN254 SNARK for on-chain verification
Specification: https://docs.polygon.technology/zkEVM/architecture/zkprover/

Polygon zkEVM proves EVM execution with a multi-stage zkProver: STARK proofs built with Plonky2 over the Goldilocks field recursively aggregate the execution trace, and a final Fflonk/PLONK SNARK over the BN254 (alt_bn128) curve wraps the result for cheap on-chain verification through the EIP-197 pairing precompile. BN254 is the cross-ecosystem hook: the same pairing curve Ethereum (EIP-196/EIP-197), Solana (SIMD-0129), and Aztec expose, reached here through a STARK-to-SNARK wrap.

Implementations

zkevm-prover cpp not independently audited

Relationships

Equivalent to: EIP-197