ring0 is currently in active development. Follow our progress. Read the docs

Ring0Ring0

Section I

Introduction

Why ring0 Exists and What It Solves

Every other chain forces one painful trade: speed, safety, or openness. ring0 refuses the trade. Four pillars on one post-quantum foundation, so proving, storage, networking, and privacy reinforce each other instead of fighting.

trilemma

The Scalability-Security-Decentralization Trilemma

Ethereum is safe but slow. Solana is fast but centralized. For over a decade the industry has treated that as a law of nature: pick two, pay for the third.

It is not a law. It is the consequence of one decision nobody went back to question — that every machine on the network must re-run every transaction in order to know it happened. If verifying means repeating, then the slowest honest machine sets the speed of the whole network. Raise the hardware requirements and you go faster, but you thin out who is allowed to participate. Keep them low and you stay open, but you stay slow. That is not a trilemma. That is one bad assumption wearing three costumes.

ring0 breaks the loop by breaking the assumption. Producers execute and prove. Validators only check the proof. Nobody re-runs anything.

heterogeneous architecture

Heterogeneous Architecture via ZK Proofs

Not every machine on a network has to do the same job. That is obvious everywhere except in blockchain, where identical work has been confused with fairness for fifteen years.

Producers do the heavy lifting. They execute the transactions and generate a proof that they executed them correctly. Validators receive that proof and check it on an ordinary machine. Checking costs a fraction of doing, and the gap between those two costs is where all of the capacity comes from.

Decentralization was never about everyone performing the same work. It is about anyone being able to catch a lie. A cheap check does that better than an expensive repetition, because more people can afford to run it.

five improvements

Five Design Improvements

Five places where the industry settled, and then spent a decade optimizing around the thing it had settled for.

None of these is a tweak. Each replaces a component borrowed from a design older than the problem it is now being asked to solve. State came from hash trees built for a different job. Execution came from prime-field cryptography that has nothing to do with how a processor actually works. Networking came from flooding the room and hoping. We replaced all five, and the numbers below are what came out the other side.

  • State: MLE-DB removes per-access hash-path verification from the state proof
  • Execution: Jolt Pro GR runs on native 64-bit arithmetic, so proofs generate faster
  • Networking: RLNC spreads coded data to make better use of bandwidth
  • Privacy: HSS-CoFHE proves over private data with a 3,506× speedup
  • Commitments: BaseFold needs no trusted setup, transparent from day one

butterfly duality

The Butterfly Duality

Most chains treat privacy and proof as enemies. Add privacy and the proof gets harder. Make the proof faster and privacy gets in the way. So privacy arrives late, bolted on, as a separate system with its own assumptions and its own way of breaking.

The butterfly duality is the observation that they are the same operation. The core computation that proves a transaction is honest and the core computation that keeps it private differ in one thing: whether the values you feed it are random or structured. One operator, one analysis, two disciplines.

Build both on that ground and they stop fighting, because they are no longer two things.

four pillars

The Six Pillars of Ring0

Six pillars, one foundation. That second half is the whole point.

Every chain is a stack of parts, and normally each part comes from a different mathematical world. The proof system speaks one language, the database another, the privacy layer a third. Every boundary between them is a translation, and every translation costs time and opens a seam. Attacks live in seams. So does latency.

ring0 has no seams because it has no translations. All six pillars run on the same arithmetic.

  • MLE-DB: state storage in the form the prover consumes
  • Jolt Pro GR: zero-knowledge execution, no trusted setup
  • APEX: parallel execution across atomicity zones
  • RLNC: coded networking
  • HSS-CoFHE: private collaborative proving
  • CHITA: archival storage that proves files stay recoverable

contributions

Key Contributions

What ring0 puts on the table. These are built and measured, and the core claims are machine-checked rather than argued.

  • The first L1 with its entire cryptographic stack on one mathematical foundation
  • MLE-DB: about 2,929× lower state-access cost in the model at N=2^20, B=10^6; not a whole-block speedup
  • HSS-CoFHE: private proving at a 3,506× speedup
  • Parallel execution across zones at >1.1M TPS
  • Every core claim machine-checked