The Signing Round
FROST threshold signing in four stages — DKG, Commit, Sign, Aggregate. Adjust t-of-n to see how many parties must collaborate, and how many an attacker must compromise, to produce a valid Schnorr signature.
Lab
142 explorable, interactive pieces — every concept we write about, made tangible.
FROST threshold signing in four stages — DKG, Commit, Sign, Aggregate. Adjust t-of-n to see how many parties must collaborate, and how many an attacker must compromise, to produce a valid Schnorr signature.
Walk through the EigenAI challenge protocol: from encrypted request and deterministic execution to the on-chain byte-equality check that slashes a cheating operator or clears a frivolous watcher.
Constraint cost per Transformer operation in a ZK circuit — without and with lookup arguments. Softmax (275→30), LayerNorm (150→20), and GELU (400→40) dominate the budget until Lasso/LogUp replace in-circuit transcendental approximations with table lookups. Tap a row to inspect.
ERC-7683 cross-chain intent lifecycle: from signed deposit to solver repayment. Click each stage to see the contract call, struct fields, and timing. Across fills $14B+ at median 8 seconds — the 2-hour optimistic challenge window is where solver capital is locked.
Proving an agent's top-k retrieval is real costs a sort over every scanned candidate, unless you prove a boundary instead. Drive top-k and the corpus preset; watch the in-circuit comparison count split into the flat boundary proof and the sort tax you skip, anchored to V3DB's measured 22x.
Drive the Proof-of-Learning trap: a logged training trajectory, audited top-Q by re-execution against a tolerance δ. Forge the run and it still passes — the forger tuned every interval under δ for 3% of training cost. Tighten δ to catch it and the honest node fails first.
In decentralized RL the rollout worker acts with a policy several steps behind the trainer. Staleness g = broadcast time / step cadence. Pick a model and link, toggle sparse deltas, and watch g cross INTELLECT-2's demonstrated 4-step budget — full 32B weights blow right past it.
Epoch ring: 32 slot pillars show the chain's heartbeat. White sphere = chain tip, amber = agent's last read, green = finalized. The arc between them is the state window AI agents must hedge against.
Before/after bar chart comparing four survivability metrics (MDD, CVaR, Delegation Gap, Attack Success) with and without SAE execution controls, from arXiv 2603.10092.
How much of a reasoning model's output is actually thinking? For three model tiers at three task difficulties, stacked bars show thinking tokens dwarfing output — then a scheme matrix shows which verification schemes can see the thinking and which attest to the answer alone.
When does calling an LLM pay off? Pick a task complexity, model tier, and expected profit per decision: the lognormal token distribution — anchored to the paper's 30× variance finding — shows the fraction of invocations that beat break-even. Drag profit up until the green zone dominates.
How much does it cost to shift a TWAP oracle? Drag pool TVL, TWAP duration, and price spike factor to see the round-trip manipulation cost alongside the 30-min TWAP shift — for both Uniswap v2 arithmetic and v3 geometric accumulators. Anchored to live on-chain pool data.