The Far Orchard

CACTF2026

Task: honor all 8 Far-Seals in a halo2 (Zcash Orchard/Pallas) ZK membership circuit plus EIP-712/Solidity gate; nullifier uniqueness protects against replay. Solution: the variable-base scalar-mul base point g_d is an unanchored witnessed point, so one real Merkle leaf yields unlimited distinct valid nullifiers — forged 8 proofs with a custom halo2 prover, collected 8 signed honor receipts, and called honorSeal x8.