Fourteen thousand dollars. That is what one contested dispute could cost on Bitcoin's older verification method, BitVM2, in its unhappy path.
BitVM3 fixed that by moving verification off-chain into a garbled circuit. Cheaper on-chain, but each circuit is forty two gibibytes, heavy enough to quietly exclude smaller participants.
Babylon's BABE is the next attempt in that same chain, keeping the on-chain savings while cutting storage and setup cost by roughly three orders of magnitude, per the actual eprint paper.
The paper was accepted into CCS 2026, a real peer reviewed security venue. That means the math was checked, not that it has been tested under real adversarial money yet.
Every version in this lineage fixed one bottleneck and quietly relocated the cost somewhere else. I do not think BABE is the last version of that pattern either.
@BabylonLabs_io #baby $BABY
BitVM3 fixed that by moving verification off-chain into a garbled circuit. Cheaper on-chain, but each circuit is forty two gibibytes, heavy enough to quietly exclude smaller participants.
Babylon's BABE is the next attempt in that same chain, keeping the on-chain savings while cutting storage and setup cost by roughly three orders of magnitude, per the actual eprint paper.
The paper was accepted into CCS 2026, a real peer reviewed security venue. That means the math was checked, not that it has been tested under real adversarial money yet.
Every version in this lineage fixed one bottleneck and quietly relocated the cost somewhere else. I do not think BABE is the last version of that pattern either.
@BabylonLabs_io #baby $BABY