Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH LayerZero 研究员揭示 Poseidon 哈希函数的结构弱点
@LayerZero_Core 的研究团队发表了两篇论文，指出了 Poseidon 这一在零知识证明系统中广泛使用的密码学哈希函数存在的结构性弱点。这些发现进一步加剧了业界对这一支撑区块链行业重要基础设施的基础原语的审视力度。
Poseidon 的功能与研究发现
Poseidon 是一种专为在零知识证明中低成本运行而设计的哈希函数。其主要任务是将数据转换为固定的数字指纹，使得从特定输入推导出特定输出在计算上不可行。
该算法于 2019 年首次推出，旨在为 SNARKs、STARKs 和 Bulletproofs 等零知识证明系统提供高效的密码学哈希支持，其核心目标是最小化电路复杂度和计算开销。
@LayerZero_Core 的研究员 Giuseppe Vitto 指出，在某些条件下，哈希输出是可以被引导的。这一发现揭示了该函数在特定配置下的行为存在结构性局限。不过，LayerZero 澄清称，这些结果并未破坏 Poseidon 在任何现有实时系统中的部署状态。
In addition, another paper by Bhati, Tariq, and Ashur published in the IACR ePrint archive in August 2026 describes a related approach: a generalized S-box skipping gadget. This method absorbs the initial rounds without increasing the number of polynomials of Poseidon's system and restricts the subspace of the constrained solution to a bounded, low-order form, thereby transforming a computationally infeasible polynomial system into a manageable form. A classifier with the probability of Poseidon's multi-round operations is implemented.
Ethereum Foundation's strategic adjustment
The release of LayerZero's research comes at a time when scrutiny within the industry is intensifying. The Ethereum Foundation (@ethereumfndn) has adjusted its plans for the use of Poseidon in its quantum security strategy. Researcher Justin Drake pointed out in an August 13 announcement that SHA and BLAKE are potential alternatives.
This shift was not triggered by actual cracking of the deployed Poseidon parameter. Conversely, with the advancement of binary-domain SNARK systems such as Binius and Flock, the efficiency of proving standard hashes has become high enough that Ethereum no longer requires SNARK-friendly hash functions that are optimized for legacy proof constraints.
This announcement concerns Ethereum's future Layer 1 architecture, rather than immediately removing Poseidon from existing applications. Because of this roadmap decision, Rollups, virtual machines and other projects that already use this feature do not need to replace Poseidon.
Eigen Labs 创始人兼首席执行官 Sreeram Kannan 指出，与其他后量子方法相比，SHA 和 BLAKE 具有实用优势，因为它们已知的攻击向量较少。多年的公开审查应使其比未经充分测试的替代方案能更快地部署。
目前，LayerZero 的发现尚未构成完全的实际破解。但结合 Ethereum 基金会的战略转向以及全行业的密码分析计划，这项研究强化了更广泛的重新评估：即 Poseidon 的设计余量是否仍足以满足高价值应用的需求。
