Bitcoin Zero-Knowledge Proof Breakthrough: BABE Protocol Reduces Costs by Over 1000 Times

YieldWhisperer · 2026-01-18T06:52:14+00:00

Professor David Tse from Stanford has launched the BABE zero-knowledge proof verification protocol designed for the Bitcoin ecosystem, reducing costs by over 1000 times. Its innovations include simplified witness encryption and a new Argo MAC obfuscation primitive, significantly improving computational efficiency. BABE is scheduled to go live in 2026, aiming to enhance the scalability of the Bitcoin system and reduce costs.

YieldWhisperer

2026-01-18 06:52:14

Abstract generation in progress

【Bitcoin Push】Stanford University professor and Babylon co-founder David Tse officially launched BABE (BAbylon-BErkeley)—a set of Groth16 zero-knowledge proof verification protocols designed specifically for the Bitcoin ecosystem. How impressive is this? It is over a thousand times cheaper in initialization and storage costs compared to the current optimal solutions.

On the technical level, the team introduced two major innovations. First is the witness encryption technology based on linear pairings, which simplifies the complex multiple pairing operations in Groth16 verification into a single scalar multiplication on the BN254 elliptic curve. Sounds abstract? The core idea is: less computation, faster verification.

The second is the introduction of a new Argo MAC obfuscation primitive. This tool further transforms scalar multiplication into vector homomorphic MAC, achieving truly efficient computation. The combination of these two technologies yields remarkable results.

David Tse revealed that BABE is scheduled to go live with the Babylon Trustless Bitcoin Vault alpha test network in February 2026. The goal is clear: to provide lower-cost, more scalable zero-knowledge proof verification capabilities within the Bitcoin system. This development is significant for the growth of Bitcoin sidechains and layer-two solutions.

BTC-0.19%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

10 Likes

Reward
10
10
Repost
Share

Comment

0/400

TestnetNomad

· 01-20 19:17

A thousandfold cost reduction, this time Babylon is really here to shake things up --- David Tse's approach is truly different; someone has finally simplified the complexity of zero-knowledge proofs --- Wait, can scalar multiplication on BN254 really be this fast? I need to run some data to verify --- Another milestone in the Bitcoin ecosystem; the progress speed is a bit outrageous --- Finally, someone has seriously reduced the cost of zero-knowledge proofs; previous efforts were just theoretical innovations --- Groth16 optimized to this extent, it feels like Bitcoin scaling has taken a step forward

View OriginalReply0

DAOdreamer

· 01-20 14:35

A thousand times cost reduction? If that's true, it's unbelievable. It feels like one of those things that look good on paper but can't be practically implemented. David Tse is really impressive this time, but is there still room for optimization with BN254? It feels like it's almost fully squeezed out. Zero-knowledge proofs have always been hyped; let's see when they can truly be implemented on the mainnet. The BABE protocol sounds good, but does such a breakthrough happen every week? I'm overwhelmed. How do you verify linear pairing? Has anyone run the code? With such complex stuff, how much does an audit cost?

View OriginalReply0

MemeTokenGenius

· 01-20 01:08

A thousand times cheaper? How bad does it have to be to achieve that... But David Tse's moves are indeed different. --- Zero-knowledge proofs are trying new tricks. Is the spring of the Bitcoin ecosystem here? --- Another bunch of math geniuses are brainstorming here. Let’s see if it can really be a thousand times cheaper. --- Replacing multi-pairings with scalar multiplication—this idea has some potential. --- Babylon’s projects are more and more impressive, but I just can’t understand them haha. --- Cost reduced by a thousand times, but the question is, who will actually use it? --- Stanford + Bitcoin—this combo always seems to lead to big events.

View OriginalReply0

CryptoWageSlave

· 01-18 21:05

Wow, a thousandfold reduction in costs. Bitcoin ecosystem is really about to take off this time. Brother David Tse is at it again, doing something new—playing with ZK is truly impressive. Zero-knowledge proofs are finally less expensive; this is the future of on-chain technology, right? By the way, how quickly will this technology be implemented? Or is it still just at the paper stage with PPTs? Running this on BN254, what's the performance ceiling?

View OriginalReply0

BoredApeResistance

· 01-18 07:22

A thousandfold cost reduction? Isn't this just another theoretical technical boast? --- Simplifying Groth16 to scalar multiplication, it looks really impressive, but can it actually run in deployment? --- David Tse is working on something new again; writing a paper is one thing, making it work is another. --- I don't quite understand how significant the impact of zero-knowledge proofs is on the Bitcoin ecosystem. --- A thousandfold optimization sounds incredible; such numbers usually mean the benchmark was set very poorly. --- It's another Stanford project; these folks just publish papers, but how many are actually usable? --- The BN254 stuff is no longer new; it's just well-packaged.

View OriginalReply0

Layer2Observer

· 01-18 07:21

A thousandfold cost optimization sounds very attractive, but one thing needs to be clarified—what baseline plan is this benchmarked against? Before analyzing from the source code level, it's important to understand the specific parameters of this comparison; otherwise, the numbers can be very misleading.

View OriginalReply0

WalletDoomsDay

· 01-18 07:15

A thousandfold cost optimization? If that's true, the Bitcoin ecosystem is really taking off. --- Groth16 has been simplified again, David Tse is really pushing things forward. --- Wait, can the BABE protocol really be used on-chain, or is it just a paper project? --- Bitcoin ZK proofs are finally showing some movement; those previous schemes were indeed too expensive. --- Replacing multi-pairings with scalar multiplication sounds quite reasonable. Who has tried it out and how does it perform? --- Babylon has been quite active recently in zero-knowledge proofs; need to keep an eye on it. --- A thousandfold cost difference—if it can really be productized, that would be a big deal. --- Focusing on BN254, the Stanford team definitely has some ideas.

View OriginalReply0

BearMarketSurvivor

· 01-18 07:12

Damn, a thousand times? If that really happens, Bitcoin will take off. --- David Tse is at it again. Simplifying pairing operations is indeed impressive. --- Reducing costs with zero-knowledge proofs is truly a necessity, but implementation still depends. --- The curve BN254 is so smooth and sleek, quite interesting. --- Both Stanford and Babylon—this setup outperforms many projects. --- Storage costs a thousand times cheaper—sounds unbelievable. Dare to try on mainnet? --- It looks flashy, but how many scenarios can actually use Bitcoin L1 verification? --- Groth16 has finally been figured out. No more pitfalls this time, haha. --- The costs are cut so drastically; on-chain ZK verification could really become affordable for everyone in the future. --- Not bad, but I’m more concerned about when it can be practically used.

View OriginalReply0

MemeCoinSavant

· 01-18 07:09

ngl the 1000x cost reduction is insane but like... we've seen these "revolutionary" zkproof claims before, have we not? thesis update: we're basically watching the asymptotic approach to bitcoin scalability nirvana (p < 0.05)

Reply0

AirdropHunterKing

· 01-18 07:06

Wow, a thousand times cheaper? If that's true, the gas fees in the Bitcoin ecosystem would have to plummet. Bro, I need to take a closer look to see if I have the qualification to invest.

View OriginalReply0