Just finished a quick rundown of potential quantum attacks on the new hash algorithm, thought it might interest someone who’s always hunting the next edge. Are you still testing that zero‑knowledge proof protocol on the testnet?

I spotted a tiny gap: when you unroll the circuit for the inner exponentiation, you skip the guard that ensures the base stays below the field size. If the witness ever nudges past that, the final mod could wrap and your proof will silently accept a wrong witness. It’s a subtle edge case but worth patching before you push it to mainnet.