Moulds

Arithmetization targets, orange = recursive STARKs compressed with SNARK

Screenshot 2025-05-23 at 11.24.48 AM.png

| EVM | bottom-up circuit approach - PSE et. al. zkEVM; polys via Halo2 table - Polygon zkEVM; polys via PIL
Top-down VM approach: - zkSync's Register machine; polys via execution trace | | --- | --- | | RISCV | Risc0; DEEP-FRI; polys via [?] SP1: Plonky3 | | WASM | zkWASM ;polys via [?] update Fluent; polys via [?] | | Custom VMs | - Cairo CPU; polys of execution trace

Maiden VM; polys of execution trace
Nexus zkVM: baked-in IVC, CCS arithmetization
OlaVM: STARK-based, small field (Goldi), seems alt Aztec. No public details
TritonVM: rustic DSL WIP targeting custom VM | | LLVM IR | Valida IR→ISA→polys powdr IR→PIL→polys nil zkLLVM: trace-specific verifier |
Powdr (circuit compiler)
Jolt
zkMIPS / ZKM

Ingredients

Untitled

Cake-independent primitives

Lookup variants

commitment schemes:

accumulators
PCs: KZG, FRI, DEEP-{FRI,ALI}, STIR
Sumcheck
Hash functions
{M,V}erkle trees

Mixers

Untitled

Preprocessing, distribution, ..

Folding schemes
Distribution protocols

Toppings

Untitled

test tools; cake-indpendent finishing touches, accessories, ..

Verifier auto-generators
Constraint optimizers
Utilities: eg zETH (compiles revm to RISCV which is them emulated and proven in zkVM)
MSM optimizations
github.com/ed255/polyexen-demo
EVM Prover by Polygon

Cakes

Untitled

Full zkSNARKing instantiations

| PSE+ zkEVM, polys from Halo2 table

Polygon zkEVM, polys via PIL
Risc0 zkVM emulates RISC-V compiled onto from Rust/C/C++
zkWASM (halo2 & lookups)
Fluent (reduced WASM, no conditionals or branching, circuits not open sourced yet, uses `extern C` for crypto)
- zkSync's Register machine- Cairo CPU- Maiden VM
heavily-custome-made App-specific zkSNARKs (zcash, Mina)

Pastries

Untitled

Standalone zkDapps aka App-specific zkSNARK instatntiations aka ad-hoc intent eg zkDapps implemented with DSL (Zcash, Summa, RLN, ..