A. Shannon

@robertlufkinmd It's the Randle Cycle: youtube.com/watch?v=Pvjdgj…

If not sugar, then what is the cause?

@Armeanio @beampaywallet STARKS are definitly more difficult to implement, but possible, I have a working prototype already.

@upwindstrategy @beampaywallet Modular privacy stacks (Curve Trees + DHTuple + STARKs) are quite interesting to consider here. Primitives that let you build modular privacy are broadly powerful. Turn privacy as a token or feature into just privacy as common infrastructure.

Open source MIT licensed. Includes whitepaper , tests, and testnet spend scripts. Interesting for Ergo builders exploring advanced privacy. Curve Trees on Ergo. Privacy preserving set membership verification via eUTXO accumulator. First on chain Curve Tree impl on any eUTXO chain. Worth a look. 
github.com/a-shannon/ergo…

honestly quite far; curve trees haven't been implemented on-chain on any other eUTXO chain yet. Cardano doesn't have the 256-bit modular arithmetic opcodes we used (EIP-0050), and Bitcoin obviously can't do this at all. even on account-based chains most privacy implementations still rely on zk-SNARKs with trusted setups. this is trustless, no ceremony needed, just pure elliptic curve math on the native secp256k1 curve that Ergo already uses

@ergo_platform no trusted setup needed — unlike zk-SNARK approaches like Tornado Cash. it runs on Ergo's native secp256k1 curve, so it fits naturally into existing Sigma protocol flows testnet spend tx is live if anyone wants to verify: testnet.ergoplatform.com/en/transaction…

A Curve Tree is an algebraic accumulator that leverages the reciprocal-order relationship between two elliptic curves (secp256k1 and secq256k1) to build compact membership proofs. This repository implements on-chain verification of these proofs in ErgoScript, enabling privacy-preserving applications like: AUTCT (Anonymous Usage Tokens from Curve Trees) Privacy pools with membership/exclusion proofs Anonymous voting without identity disclosure Credential verification without revealing which credential

it slots in as a membership proof primitive. so for example you could combine it with ErgoMixer's proveDHTuple mixing to get both transaction unlinkability AND set membership proofs, prove you're in a valid UTXO set without revealing which output is yours the concrete use case is AUTCT (anonymous usage tokens), you prove you own a UTXO in a committed set to participate in DeFi or voting without doxxing your address. the verifier contract is a standalone ErgoScript box so any other protocol can consume the proof as a data input

@Armeanio Nice, curious how it composes with Ergo privacy pipelines?

eUTXO + accumulators is the right direction for privacy tech. Set membership verification without revealing the set, that's what the industry needs. How far behind is everyone else on thiseUTXO + accumulators is the right direction for privacy tech. Set membership verification without revealing the set, that's what the industry needs. How far behind is everyone else on this?

the current depth-3 tree handles 8 leaves at ~61k JIT cost per box, out of Ergo's ~1M per-box budget, so we're using about 6%. depth-5 (32 leaves) fits around ~115k, still tons of headroom. larger anonymity sets are very feasible the bottleneck is the secq256k1 fold: 255 iterations of projective double-and-add. the secp256k1 levels are basically free since Ergo handles those natively via GroupElement.expUnsigned

@Armeanio Curious how performance scales with Ergo privacy workflows?

@Armeanio Done! github.com/ergoplatform/e…

raised bounty to 500 ERG

Feel free to join, participate or just passively observe the Ergo Development channel on Telegram.

Ergo Platform outlined in BitcoinTalk thread (2017–2019) ambitious promises for a secure, efficient Proof-of-Work (PoW) blockchain focused on decentralized finance (DeFi), lightweight operations, and flexible governance. These were rooted in research backed features like sigma protocols, NiPoPoWs, and a "space-scarce economy." As of March 2026 (6.5+ years post mainnet launch on July 1, 2019), Ergo has delivered approximately 90% of these promises, with strong execution on core tech while adapting to real world challenges like market volatility and ecosystem growth. The remaining 10% of claims are being addressed with Lithos, Sigma Chains, and Matrix. These are active and ongoing developments.

As we move past the initial outline laid out in 2017, we move into an era sidechains, of privacy, off chain p2p systems, and monetary expansion on top of trust less systems working towards addressing real world needs and problems. Ultra light weight, trust minimized, and build on solid foundations. 2017 vision was started almost 9 years ago. In 2027 we will lay the vision for the next decade. Ergo is an open source community driven project for alternative finance. Take as much power over the ecosystem as you can.

With extended UTXO, contract templates, simple and powerful ErgoScript approach, and GPU-based Proof-of-work in the core, Ergo is primed as a foundation layer for agentic economies. Power is in composability of simple tools!

A few UTXO projects pushing more or less similar goals to improve confirmation latency, and throughput. Ergo development is competing with teams way above its marketcap. Cardano Leios Bitcoin Cash Tailstrom Ergo Martix

22 days until the #Ergo block reward drops to 3 ERG. I’ve been here since the early days when it was 75 ERG per block. No hype. No VC money. No shortcuts. Just pure PoW, brilliant minds, and a community that never left. What a time to be alive.

Big if true github.com/ergoplatform/s… , means arbitrary bulletproofs (and much more) based generic ZK proofs can be efficiently verified on Ergo

@CryptoDomF @Adrian42121244 It is. Indeed.

"Ergo is the best environment for agenticFi" 👀

@chepurnoy @minno1081 In fact much more and even better, I’ll let you know soon about my latest findings.