{
  "type": "question",
  "question": "Which proof system is cheapest to verify on Ethereum?",
  "answer": "Groth16 is the cheapest widely deployed option: a constant-size proof of three group elements verified with a fixed pairing check, at a cost that does not grow with circuit size. PLONK-family verifiers are somewhat more expensive but remove the per-circuit ceremony. FRI-based STARK proofs are considerably larger and more expensive to verify on-chain, which is why STARK-based systems that settle on Ethereum typically wrap the STARK in a final SNARK before submitting it. See Section 01.",
  "url": "https://zkpick.com/faq/which-proof-system-is-cheapest-to-verify-on-ethereum/",
  "markdown": "https://zkpick.com/md/faq/which-proof-system-is-cheapest-to-verify-on-ethereum.md",
  "section": {
    "number": "01",
    "url": "https://zkpick.com/proof-systems/"
  },
  "updated": "2026-09-12",
  "version": "1.3",
  "canonical": "https://zkpick.com/faq/which-proof-system-is-cheapest-to-verify-on-ethereum/",
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "authors": [
    "MarketComp"
  ]
}