Cairo and the Stwo prover
Language + VM + prover
Cairo and the Stwo prover: Language + VM + prover. Kind: Language + VM + prover. Arithmetisation / backend: Circle STARK (Mersenne-31). Setup: None. Maintained by: StarkWare. Licence: Apache-2.0. Status: Production at scale. Choose it when: Applications native to its ecosystem, and any workload wanting a battle-tested, setup-free STARK stack with mature native recursion.
What it is
A language for provable programs executed by its own VM and proved by a Circle STARK prover over a small field. Verification is available both natively and as a verifier written in Cairo itself and run on the Cairo VM, which is what makes recursion native.
Strengths and tradeoffs
- Among the longest-running production ZK stacks, proving blocks with settlement on Ethereum L1
- No trusted setup
- Recursive proving is native and well-exercised — the verifier runs on the VM it verifies
- Prover fully open-sourced under a permissive licence
- Strong gravitational pull toward its own ecosystem; general-purpose use is possible but not the main path
- Circle STARK proofs are large, so direct per-transaction L1 verification is impractical — the design intent is per-block aggregation
- A bespoke language with its own memory model, so no reuse of an existing toolchain ecosystem
Choose it whenApplications native to its ecosystem, and any workload wanting a battle-tested, setup-free STARK stack with mature native recursion.
Related pages
Sources cited on this page · 1
All 45 sources for §02 are listed on the section page →
Cite this page
MarketComp (2026). Cairo and the Stwo prover. The ZK Field Manual (Version 1.3). MarketComp. https://zkpick.com/frameworks/cairo-stwo/
@misc{zkfieldmanual-cairo-and-the-stwo-prover,
title = {Cairo and the Stwo prover — The ZK Field Manual},
author = {MarketComp},
year = {2026},
version = {1.3},
howpublished = {\url{https://zkpick.com/frameworks/cairo-stwo/}},
note = {Accessed: YYYY-MM-DD}
}