risczero.com/blog
🔗
RISC Zero’s Path to The First Formally Verified RISC-V zkVM

The lion’s share of security defects in ZK software come from circuits: one of the big reasons to use a zkVM like RISC Zero’s is to make it simple to secure your application, because you can write your application in a high level language like Rust and don’t have to write your own circuits. Unfortunately, you still have to trust that we got ours right. Circuits encode a computation as a set of constraints, a bunch of equations that describe the relationship between inputs and outputs for the computation.