Audit log

Every state-changing event for Light Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-06-01 13:20:05Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,599,818

   sig

   22LtspGSidL2…aJCPw3decopyexplorer ↗

   hash

   877qjUT5uoev…8qheWJa6copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (22832 B) ▸

   {"actor":"system:backfill","investigation_id":"fa89a22c-e13a-4966-93ed-efd15257403c","kind":"publish","page_slug":"light-protocol","published_at":"2026-06-01T13:20:05.595Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Light Protocol","sections":[{"content":"Light Protocol is a zero-knowledge compression infrastructure layer built on Solana, marketed under the brand ZK Compression. The technology allows Solana application developers to opt-in to compressing on-chain state, reducing account storage costs by up to 5,000x for token accounts and approximately 160x for program-derived accounts (PDAs) compared to standard Solana accounts. The protocol maintains Solana L1 security, performance, and composability by anchoring compressed state roots on-chain and validating state transitions via ZK validity proofs. ZK Compression was publicly co-developed with Helius Labs and launched on Solana mainnet and devnet in June 2024. The company operating the project is Luminous Labs Lda, headquartered in Lisbon, Portugal. The project describes itself as a 'public goods lab' and has open-sourced its core codebase on GitHub.","heading":"Overview and Background","severity":"low","sources":[{"credibility":2,"name":"Light Protocol and Helius Labs introduce ZK Compression — The Block","type":"news_article","url":"https://www.theblock.co/post/301368/light-protocol-and-helius-labs-introduce-zk-compression-to-further-scale-solana-apps"},{"credibility":1,"name":"Light Protocol GitHub repository","type":"official","url":"https://github.com/Lightprotocol/light-protocol"},{"credibility":2,"name":"ZK Compression documentation — zkcompression.com","type":"official","url":"https://www.zkcompression.com/welcome"},{"credibility":2,"name":"Solana launches ZK Compression — Invezz","type":"news_article","url":"https://invezz.com/news/2024/09/19/solana-launches-zk-compression-technology-aiming-to-reduce-developer-costs-by-1000x/"}]},{"content":"The project's public face is co-founder Swen Schäferjohann, who holds the title of Co-Founder and Managing Director at Luminous Labs. He has spoken publicly at Solana Breakpoint 2024 and 2025, maintains a LinkedIn profile, and has authored several technical Medium posts under his real name. A second co-founder is referred to informally as 'Joe' in at least one public narrative account and described as a childhood friend of Schäferjohann; this individual's full surname has not been confirmed in Tier 1 or 2 sources reviewed. The company entity Luminous Labs Lda is registered in Portugal and appears in job listings under the combined 'Luminous Labs (Light Protocol)' branding on the Solana Network Opportunities job board. Overall team identity is substantially disclosed for a protocol at this stage, with key leadership publicly named and accessible. The pseudonymous second co-founder represents a minor transparency gap.","heading":"Team Transparency","severity":"low","sources":[{"credibility":2,"name":"Swen Schäferjohann LinkedIn — Luminous Labs","type":"official","url":"https://www.linkedin.com/in/swen-schaeferjohann/"},{"credibility":2,"name":"ZK Compression: Solana's Revolutionary Scaling Solution — Solana Compass","type":"news_article","url":"https://solanacompass.com/learn/Lightspeed/the-next-era-of-solana-scaling-swen-schaferjohann"},{"credibility":2,"name":"Luminous Labs (Light Protocol) job board — jobs.solana.com","type":"other","url":"https://jobs.solana.com/companies/luminous-labs-light-protocol"},{"credibility":2,"name":"A Vision for Light Protocol — Swen Schäferjohann, Medium","type":"official","url":"https://medium.com/@swen.schaeferjohann/a-vision-for-light-protocol-5fd7a5837bfa"}]},{"content":"Light Protocol has raised a total of $4.2 million USD across two rounds. A pre-seed round was led by Advanced Blockchain AG and dLab. A seed round closed in October 2022 for approximately $4.2 million, led by Polychain Capital, with participation from Hypersphere, Solana Ventures, Dao5, Asymmetric, Anagram, and Ecco Capital. Notable angel investors included Balaji Srinivasan, Algod Trading, The Crypto Dog, Steve Vassallo, Michelle Lai, Jules de Smit, Yonatan Ben-Shimon, and Norbert Bodziony. The lead investor Polychain Capital is one of the most established institutional crypto venture firms. Solana Ventures' participation is consistent with this being a core Solana infrastructure bet. No additional rounds beyond $4.2 million total have been confirmed in available sources as of mid-2026. The funding level is modest relative to comparable ZK infrastructure projects, though the team describes it as a public goods initiative. No token generation event (TGE) for a native Light Protocol governance or utility token has been announced or confirmed in reviewed sources; the 'Lighter (LIT)' token referenced in some search results is an unrelated Ethereum L2 perpetual exchange.","heading":"Funding and Backers","severity":"low","sources":[{"credibility":2,"name":"Announcing our $4.2M Raise — Swen Schäferjohann, Medium","type":"official","url":"https://medium.com/light-protocol-writings/announcing-our-4-2m-raise-3f19f5d3f66f"},{"credibility":2,"name":"Solana-based Privacy Infrastructure Light Protocol Raises $4.2M — TokenInsight","type":"news_article","url":"https://tokeninsight.com/en/news/solana-based-privacy-infrastructure-light-protocol-raises-4.2m-led-by-polychain-capital"},{"credibility":2,"name":"Investing in Light Protocol — Advanced Blockchain AG","type":"other","url":"https://www.advancedblockchain.com/portfolio/light-protocol"},{"credibility":2,"name":"Light Protocol — Tracxn funding profile","type":"other","url":"https://tracxn.com/d/companies/light-protocol/__-WHynAS459VTfHO2F_OH7Z5EZ2CDz81eoL4bwsNZH0A/funding-and-investors"}]},{"content":"Light Protocol's core on-chain programs have undergone multiple independent security audits. For the ZK Compression v1 release (August–September 2024): OtterSec conducted Programs audit #1, Neodyme conducted Programs audit #2 (completed August 15, 2024), and Zellic conducted Programs audit #3 (completed August 28, 2024). For ZK Compression v2 and subsequent work (2024–2025): Accretion and HashCloak reviewed v2 components, OtterSec reviewed the Zerocopy module (March 2025), and OtterSec reviewed the CPI Context Refactor (December 2025). The Groth16 ZK circuits used by the protocol were formally verified by Reilabs, which provides mathematical-level soundness assurance beyond standard code audit. Certora conducted a security assessment of the Light Token (CToken) extension in March 2026, identifying security issues that were addressed by the team; the full report is available on Certora's website. The project operates a live bug bounty program on Immunefi launched September 12, 2024, with a maximum critical bounty of $50,000 (calculated at 10% of funds at risk, minimum $10,000) covering 17 in-scope assets. KYC is required for all payouts. A security disclosure policy (SECURITY.md) is maintained in the GitHub repository. Important caveat: the team explicitly states that auxiliary tooling including light-sdk-macros and light-sdk are in active development and remain unaudited, representing residual risk for integrators relying on those components.","heading":"Security Audits and Formal Verification","severity":"medium","sources":[{"credibility":2,"name":"Security page — zkcompression.com","type":"official","url":"https://www.zkcompression.com/references/security"},{"credibility":2,"name":"Light Protocol Bug Bounty — Immunefi","type":"official","url":"https://immunefi.com/bug-bounty/light-protocol/information/"},{"credibility":1,"name":"Security Assessment — Certora (Light Protocol Extension)","type":"research","url":"https://www.certora.com/reports/light-extension"},{"credibility":2,"name":"Light Protocol GitHub — README security section","type":"official","url":"https://github.com/Lightprotocol/light-protocol/blob/main/README.md"}]},{"content":"ZK Compression relies on Groth16 zk-SNARK circuits, which require a trusted setup ceremony. The team maintains documentation of the trusted setup ceremony in the GitHub repository; however, public details about the number of participants and ceremony process are not summarized in available secondary sources reviewed. A compromised trusted setup would theoretically allow silent minting of compressed tokens without on-chain evidence — a systemic risk common to all Groth16-based systems. The Reilabs formal verification of the circuits addresses the correctness of the circuit logic but does not eliminate trusted setup risk. The protocol is described as being in active development (version 0.23.0 released March 2026 for ZK Compression V2 production use). Integrators working directly with Solana's Geyser streaming infrastructure (used by RPC providers and indexers) encountered a significant infrastructure scaling issue: because Light Protocol compresses millions of balances into approximately 10 MB Merkle tree accounts, any single compressed token transfer causes retransmission of the entire tree account through Geyser. At peak load, this single program accounted for over half of all Geyser streaming traffic across Triton's infrastructure (multiple Gbps). Triton One addressed this by excluding Light Protocol's programs from Yellowstone raw Geyser streaming in favor of the dedicated Photon indexer. This incident reflects a real-world infrastructure load concern, though it did not involve any fund loss or user harm.","heading":"ZK and Smart Contract Technical Risk","severity":"medium","sources":[{"credibility":2,"name":"Light Protocol Excluded from Yellowstone Streaming — Triton One blog","type":"research","url":"https://blog.triton.one/light-protocol-program-excluded-from-yellowstone-streaming/"},{"credibility":2,"name":"ZK Compression documentation overview","type":"official","url":"https://www.zkcompression.com/welcome"},{"credibility":1,"name":"Certora Security Assessment — Light Extension (March 2026)","type":"research","url":"https://www.certora.com/reports/light-extension"}]},{"content":"Upon the June 2024 ZK Compression announcement, a significant public debate emerged within the broader Ethereum and Solana communities over whether the technology constitutes a Layer 2 rollup in substance. Critics, notably Ethereum investor Ryan Berckmans and ZKsync founder Alex Gluchowski, argued that ZK Compression shares features with Ethereum validity rollups and Ethereum's planned statelessness with Verkle trees, and that marketing it as a native L1 primitive rather than an L2 was misleading. Berckmans called the framing 'unethical BS' in an X post. Helius Labs co-founder Mert Mumtaz countered that Solana's decoupling of compute and data is architecturally distinct from Ethereum's approach. This debate does not constitute evidence of fraud, misappropriation, or user harm; it reflects a technical and philosophical disagreement about terminology and architecture between competing ecosystems. Light Protocol and Helius Labs have maintained that the design preserves L1 security properties without requiring trust in a separate sequencer.","heading":"Controversy: L2 Framing Debate","severity":"low","sources":[{"credibility":2,"name":"Solana's ZK Compression Ignites Controversy — The Defiant","type":"news_article","url":"https://thedefiant.io/news/blockchains/zk-compression-scaling-on-solana-ignites-controversy"},{"credibility":2,"name":"Light Protocol Brings ZK Compression, Sparking Fierce Debate — Solana Floor","type":"news_article","url":"https://solanafloor.com/news/light-protocol-brings-zk-compression-solana-sparking-debate"}]},{"content":"No SEC enforcement actions, CFTC proceedings, DOJ indictments, OFAC designations, or civil litigation involving Light Protocol, Luminous Labs Lda, or co-founder Swen Schäferjohann have been identified in available sources. The project does not appear on any U.S. or EU sanctions list reviewed. The protocol is positioned as infrastructure software rather than a financial product, which typically carries lower regulatory exposure than exchange or token issuance projects. No native governance token has been confirmed; the absence of a TGE reduces securities-law risk in the near term. The company's domicile in Portugal places it under EU jurisdiction for data protection and potentially the EU's Markets in Crypto-Assets (MiCA) framework as it matures.","heading":"Regulatory and Legal Standing","severity":"low","sources":[{"credibility":2,"name":"Light Protocol official website","type":"official","url":"https://lightprotocol.com/"}]},{"content":"No hacks, exploits, or fund-loss incidents have been identified for Light Protocol or ZK Compression in reviewed sources as of mid-2026. The March 2026 Certora audit of the CToken extension identified security issues, which the team addressed; the specific severity classifications are in the full Certora PDF report linked from their website. The Geyser streaming exclusion by Triton One (see ZK/Smart Contract Risk section) is a notable infrastructure event but did not involve financial loss. The bug bounty on Immunefi has been live since September 2024 with no publicly disclosed paid critical bounties reported in available sources.","heading":"Incidents and Security History","severity":"low","sources":[{"credibility":2,"name":"Light Protocol Bug Bounty — Immunefi","type":"official","url":"https://immunefi.com/bug-bounty/light-protocol/information/"},{"credibility":1,"name":"Certora Security Assessment — Light Extension","type":"research","url":"https://www.certora.com/reports/light-extension"}]},{"content":"Light Protocol enjoys a broadly positive reputation within the Solana developer community. ZK Compression is co-developed with Helius Labs, one of Solana's most prominent RPC and developer-tooling companies. The protocol is cited as a core primitive in the Solana ecosystem's scaling roadmap and was featured at Solana Breakpoint 2024. Multiple Tier 1 crypto venture firms (Polychain Capital, Solana Ventures, Hypersphere) backed the seed round. The project's GitHub repository is active and open source. Solana Compass, Blockworks, and The Block have covered the protocol in depth with largely neutral-to-positive framing. The main reputation risks identified are: (1) the infrastructure bandwidth concern raised by Triton One; (2) the L2 labeling controversy; and (3) the unaudited SDK components. None of these represent misconduct allegations.","heading":"Reputation and Ecosystem Standing","severity":"low","sources":[{"credibility":2,"name":"ZK Compression Keynote: Breakpoint 2024 — Helius blog","type":"news_article","url":"https://www.helius.dev/blog/zk-compression-keynote-breakpoint-2024"},{"credibility":2,"name":"Light Protocol project review — Solana Compass","type":"news_article","url":"https://solanacompass.com/projects/light-protocol"},{"credibility":2,"name":"ZK Compression — Blockworks Lightspeed newsletter","type":"news_article","url":"https://blockworks.co/news/lightspeed-newsletter-zk-compression-solana-data-storage"}]}],"sources_used":[{"credibility":1,"name":"Light Protocol GitHub repository","type":"official","url":"https://github.com/Lightprotocol/light-protocol"},{"credibility":2,"name":"Light Protocol official website","type":"official","url":"https://lightprotocol.com/"},{"credibility":2,"name":"ZK Compression documentation — zkcompression.com","type":"official","url":"https://www.zkcompression.com/welcome"},{"credibility":2,"name":"ZK Compression security page — zkcompression.com","type":"official","url":"https://www.zkcompression.com/references/security"},{"credibility":2,"name":"Light Protocol and Helius Labs introduce ZK Compression — The Block","type":"news_article","url":"https://www.theblock.co/post/301368/light-protocol-and-helius-labs-introduce-zk-compression-to-further-scale-solana-apps"},{"credibility":2,"name":"Solana's ZK Compression Ignites Controversy — The Defiant","type":"news_article","url":"https://thedefiant.io/news/blockchains/zk-compression-scaling-on-solana-ignites-controversy"},{"credibility":2,"name":"Light Protocol Brings ZK Compression, Sparking Fierce Debate — Solana Floor","type":"news_article","url":"https://solanafloor.com/news/light-protocol-brings-zk-compression-solana-sparking-debate"},{"credibility":2,"name":"Announcing our $4.2M Raise — Swen Schäferjohann, Medium","type":"official","url":"https://medium.com/light-protocol-writings/announcing-our-4-2m-raise-3f19f5d3f66f"},{"credibility":1,"name":"Security Assessment — Certora Light Protocol Extension","type":"research","url":"https://www.certora.com/reports/light-extension"},{"credibility":2,"name":"Light Protocol Bug Bounty — Immunefi","type":"official","url":"https://immunefi.com/bug-bounty/light-protocol/information/"},{"credibility":2,"name":"Light Protocol Excluded from Yellowstone Streaming — Triton One","type":"research","url":"https://blog.triton.one/light-protocol-program-excluded-from-yellowstone-streaming/"},{"credibility":2,"name":"Investing in Light Protocol — Advanced Blockchain AG","type":"other","url":"https://www.advancedblockchain.com/portfolio/light-protocol"},{"credibility":2,"name":"Solana-based Privacy Infrastructure Light Protocol Raises $4.2M — TokenInsight","type":"news_article","url":"https://tokeninsight.com/en/news/solana-based-privacy-infrastructure-light-protocol-raises-4.2m-led-by-polychain-capital"},{"credibility":2,"name":"ZK Compression Keynote Breakpoint 2024 — Helius blog","type":"news_article","url":"https://www.helius.dev/blog/zk-compression-keynote-breakpoint-2024"},{"credibility":2,"name":"Light Protocol project review — Solana Compass","type":"news_article","url":"https://solanacompass.com/projects/light-protocol"},{"credibility":2,"name":"ZK Compression — Blockworks Lightspeed newsletter","type":"news_article","url":"https://blockworks.co/news/lightspeed-newsletter-zk-compression-solana-data-storage"},{"credibility":2,"name":"Swen Schäferjohann LinkedIn","type":"official","url":"https://www.linkedin.com/in/swen-schaeferjohann/"},{"credibility":2,"name":"Luminous Labs (Light Protocol) job board — jobs.solana.com","type":"other","url":"https://jobs.solana.com/companies/luminous-labs-light-protocol"},{"credibility":1,"name":"GitHub releases — Lightprotocol/light-protocol","type":"official","url":"https://github.com/Lightprotocol/light-protocol/releases"}],"summary":"Light Protocol is a Solana-native ZK compression infrastructure layer developed by Luminous Labs Lda, a Portugal-based company co-founded in 2021 by Swen Schäferjohann. The protocol reduces on-chain state storage costs by up to 99% using zero-knowledge proofs and has undergone multiple independent security audits including formal circuit verification. No fraud allegations, regulatory actions, or fund-loss incidents have been identified; primary risk signals are inherent ZK/smart-contract complexity, partially unaudited SDK tooling, and infrastructure scaling concerns raised by Solana node operators.","timeline":[{"date":"2021-07-01","event":"Light Protocol founded by Swen Schäferjohann and co-founder 'Joe' with initial focus on ZK privacy for Solana.","source":"Solana Compass — ZK Compression scaling solution explained","source_url":"https://solanacompass.com/learn/Lightspeed/the-next-era-of-solana-scaling-swen-schaferjohann"},{"date":"2022-10-17","event":"$4.2M seed round closed, led by Polychain Capital with Hypersphere, Solana Ventures, Dao5, Asymmetric, Anagram, Ecco Capital, and angel investors including Balaji Srinivasan.","source":"Medium — Swen Schäferjohann seed round announcement","source_url":"https://medium.com/light-protocol-writings/announcing-our-4-2m-raise-3f19f5d3f66f"},{"date":"2022-01-01","event":"Team pivots during bear market from pure privacy focus toward ZK-based state compression as a Solana scaling primitive.","source":"Solana Compass — ZK Compression scaling solution explained","source_url":"https://solanacompass.com/learn/Lightspeed/the-next-era-of-solana-scaling-swen-schaferjohann"},{"date":"2024-06-21","event":"ZK Compression launched on Solana mainnet and devnet in partnership with Helius Labs, introducing 5,000x cost reduction for compressed token accounts.","source":"The Block — Light Protocol and Helius Labs introduce ZK Compression","source_url":"https://www.theblock.co/post/301368/light-protocol-and-helius-labs-introduce-zk-compression-to-further-scale-solana-apps"},{"date":"2024-06-21","event":"L2 labeling controversy erupts; Ethereum investor Ryan Berckmans and ZKsync founder Alex Gluchowski publicly challenge ZK Compression's architectural framing as a native L1 primitive.","source":"The Defiant — ZK Compression Ignites Controversy","source_url":"https://thedefiant.io/news/blockchains/zk-compression-scaling-on-solana-ignites-controversy"},{"date":"2024-08-15","event":"Neodyme completes Programs audit #2 for ZK Compression v1.","source":"zkcompression.com security page","source_url":"https://www.zkcompression.com/references/security"},{"date":"2024-08-28","event":"Zellic completes Programs audit #3 for ZK Compression v1.","source":"zkcompression.com security page","source_url":"https://www.zkcompression.com/references/security"},{"date":"2024-09-12","event":"Light Protocol bug bounty program goes live on Immunefi with up to $50,000 maximum bounty for critical vulnerabilities.","source":"Immunefi — Light Protocol Bug Bounty","source_url":"https://immunefi.com/bug-bounty/light-protocol/information/"},{"date":"2024-10-01","event":"ZK Compression v1 presented at Solana Breakpoint 2024 conference.","source":"Helius blog — ZK Compression Keynote Breakpoint 2024","source_url":"https://www.helius.dev/blog/zk-compression-keynote-breakpoint-2024"},{"date":"2025-03-01","event":"OtterSec completes Zerocopy audit; Accretion and HashCloak complete ZK Compression v2 component reviews.","source":"zkcompression.com security page","source_url":"https://www.zkcompression.com/references/security"},{"date":"2025-12-01","event":"Light Token Program announced at Breakpoint 2025. OtterSec and Certora conduct audits of CPI Context Refactor and Light Token extension respectively.","source":"zkcompression.com security page","source_url":"https://www.zkcompression.com/references/security"},{"date":"2026-03-03","event":"Certora publishes security assessment of Light Protocol Extension (CToken program), identifying security issues subsequently addressed by the team.","source":"Certora — Security Assessment Light Protocol Extension","source_url":"https://www.certora.com/reports/light-extension"},{"date":"2026-03-24","event":"Version 0.23.0 released for production use with ZK Compression V2.","source":"GitHub releases — Lightprotocol/light-protocol","source_url":"https://github.com/Lightprotocol/light-protocol/releases"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision eb4a4193-b1ea-41ee-a906-8a0a829a8b1dcopy