repo for zero knowledge recovery

Open sourcing a piece of code he personally wrote the bulk of, with a few features added by others.

The repo began right after the second Fly hack, exploring the zero knowledge primitives being added by the July 2026 Cardano fork.

The repo builds a Groth16 proof that your 24 seed words derive a given derivation path, effectively a second Fly recovery app.

Along the way he inadvertently solved a WASM problem, in a codebase of Go, Haskell, Rust, and Python with over 650 commits.

He held the repo back for responsible disclosure, but since others have published on the second Flight incident, he wants more eyeballs on it.

The proof is demonstrated in preview network transactions that lock ada and then regenerate a Groth16 proof to recover it, with property based testing.

The circuit may be one of the most comprehensive Groth16 circuits ever created for Cardano, at depth K22 and about 3.6 million parameters.

You can run a multi party computation ceremony to generate your own proof, and even run the whole thing in the browser via WASM.

It is not production code, since he does not write production code, but it shows how to do zero knowledge and MPC on Cardano, with help from Stefan Contu, Ruslan at Emurgo, and Giuliano.

The repo is rare Charles written code, part of over 4,000 contributions in 2026 across 65 repos.