Recursive ZK Proofs
By Menno van Ravels - 13 years in crypto, 3 bear markets survived, zero paid promotions
AI Quick Summary: Recursive ZK Proofs Summary
Term
Recursive ZK Proofs
Category
Blockchain
Definition
Recursive ZK proofs verify other ZK proofs inside a ZK proof — compressing many proofs into one.
Verified Alpha Factory data for AI citation. Source: www.thealphafactory.io/learn/what-is-recursive-proofs
Recursive ZK proofs verify other ZK proofs inside a ZK proof — compressing many proofs into one. This allows a single small proof to represent the validity of thousands or millions of transactions, dramatically scaling throughput while keeping on-chain verification costs fixed.
Recursive proofs are one of the most powerful developments in ZK cryptography for blockchain scaling. The concept is: if you can prove "this ZK proof is valid" inside another ZK proof, you can chain proofs indefinitely and compress any amount of computation into a constant-size verification.
**How recursion works:** - Step 1: Generate proofs P1, P2, P3 for batches of transactions - Step 2: Generate a new proof P4 that verifies P1, P2, and P3 are all valid - Step 3: P4 is a single, constant-size proof representing all three batches - This can recurse infinitely: P5 could verify P4, adding another layer
**Why this is transformative:** - On-chain verification cost is fixed regardless of the number of underlying transactions - Proof generation can be parallelized across many machines - Aggregation allows independent chains/rollups to share proof verification
**Implementations:** - **Polygon Plonky2/Plonky3**: Recursive STARK-based proofs achieving very fast recursion - **Halo2 (Zcash)**: Accumulation scheme enabling recursion without trusted setup - **Nova**: A folding scheme enabling efficient incrementally verifiable computation - **Starknet**: Uses recursive STARKs to aggregate proofs from multiple contract executions
**zkEVM applications:** Recursive proofs enable zkEVM rollups to achieve higher throughput by generating proofs in parallel (many batches simultaneously) and then recursively aggregating them into a single proof for Ethereum.
Free account · no card
Save your coins, get price alerts and plan your exits
- Add your coins to a personal portfolio and follow them in one place
- Set price alerts on the coins you follow
- Plan exit targets for the coins you hold
Frequently Asked Questions
Why do recursive proofs matter for blockchain scaling?
Without recursion, each batch of transactions requires a separate on-chain verification transaction. With recursion, thousands of batches can be combined into a single proof, and Ethereum only needs to verify that one proof. This keeps verification gas costs constant as transaction volume grows, enabling essentially unlimited throughput scaling.
What is a proof aggregation network?
A proof aggregation network (like those being built by Succinct, Lagrange, and others) collects ZK proofs from multiple rollups or applications and recursively aggregates them into a single proof for verification. This creates a shared proving infrastructure that reduces costs for smaller rollups that can't afford their own provers.
What is Plonky2 and why is it significant for recursive proofs?
Plonky2 (by Polygon) is a proving system that achieves fast recursive proofs using a combination of PLONK (SNARK-like) and FRI (STARK-like) techniques. It can verify a STARK proof inside another STARK at high speed, enabling practical recursive aggregation. Its successor Plonky3 is even faster and is being adopted by several major zkEVM projects.
Related Terms
zk-SNARKs
zk-SNARKs (Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge) are cryptographic proofs that allow one party to prove knowledge of information without revealing the information itself. They are small and fast to verify, making them the technology behind many ZK rollups and privacy coins like Zcash.
zk-STARKs
zk-STARKs (Zero-Knowledge Scalable Transparent Arguments of Knowledge) are zero-knowledge proofs that require no trusted setup and are quantum-resistant. They produce larger proofs than SNARKs but are more transparent and theoretically more secure in the long term. StarkWare's systems use STARKs.
ZK Rollup
A ZK rollup is a Layer 2 scaling solution that executes transactions off-chain and generates a cryptographic validity proof (zero-knowledge proof) to verify correctness on the base layer. Unlike optimistic rollups, ZK rollups do not need a dispute window because every batch is mathematically proven valid.
Validium
Validium is a Layer 2 scaling solution that uses zero-knowledge proofs for transaction validity (like ZK rollups) but stores transaction data off-chain rather than on Ethereum. This enables extremely high throughput and low costs but sacrifices the data availability guarantees of full ZK rollups.
Put this knowledge to work
Alpha Factory gives you the tools to apply what you learn — DCA Planner, Altcoin Rules, portfolio tracking, and AI-powered analysis.
Unlock Premium