Least Authority primary sources — 2026-04-30

Project status in this pass

• No canonical standalone company whitepaper or litepaper surfaced.
• The clearest current source of truth is the official site, the cryptographic-expertise and ZKAPs pages, the MoonMath Manual materials, and the public GitHub organization.

Primary-source snapshots

1) Official homepage

• URL: https://leastauthority.com/
• Key excerpt:
  • The homepage says Least Authority delivers security consulting, audits and reviews of cryptographic protocols and distributed-system architectures, and privacy-enhancing product development.
  • It explicitly links to published audits, cryptographic expertise, MoonMath Manual, ZKAPs, Winden, Destiny, and PrivateStorage.
  • The page also says the firm has more than 160 published security audits and highlights work with organizations including Polygon, World, Ethereum, MetaMask, Mina, Tezos, Protocol Labs, and Stacks.

2) Published audits page

• URL: https://leastauthority.com/security-consulting/published-audits/
• Key excerpt:
  • The page is sparse in readable extraction but clearly states that Least Authority encourages transparency about security and maintains a list of reports that consulting clients have chosen to publish.
  • Even this thin page is useful because it confirms a deliberate public-audit posture rather than only private consulting work.

3) Cryptographic expertise page

• URL: https://leastauthority.com/security-consulting/cryptographic-expertise/
• Key excerpt:
  • The page says Least Authority provides cryptographic research, protocol audits, and implementation support.
  • It lists deep experience across zkSNARKs, Plonk-ish systems, STARKs, elliptic curves, MPC threshold signatures, consensus mechanisms, zkEVMs, and formal verification tools for cryptography.
  • It frames the firm as a partner for novel or first-time cryptographic protocol implementations, not only standard smart-contract audits.

4) ZKAPs product-development page

• URL: https://leastauthority.com/product-development/zkaps/
• Key excerpt:
  • The page says Least Authority created Zero Knowledge Access Passes (ZKAPs) to address privacy-preserving access control issues in Tahoe-LAFS during development of PrivateStorage.
  • It explains that ZKAPs adapt Privacy Pass from proof-of-humanness into proof-of-payment and references separate Payment Server and ZKAP Authorizer components.
  • This is strong evidence of first-party cryptographic product development rather than consultancy-only activity.

5) MoonMath Manual pages

• URLs:
  • https://leastauthority.com/community-matters/moonmath-manual/
  • https://github.com/LeastAuthority/moonmath-manual
  • Supporting API: https://api.github.com/repos/LeastAuthority/moonmath-manual
• Key excerpt:
  • The MoonMath Manual is described as a resource for understanding zk-SNARKs from beginner to expert level.
  • The official page says readers can work through pen-and-paper exercises to build the smallest possible fully functional cryptographic stack for zk-SNARK internals.
  • The GitHub repo description repeats that it is a resource for anyone interested in understanding and unlocking the potential of zk-SNARKs.
  • This is unusually strong public education infrastructure for a security consultancy and a meaningful part of Least Authority’s ecosystem footprint.

6) GitHub organization

• URL: https://github.com/LeastAuthority
• Supporting API: https://api.github.com/orgs/LeastAuthority/repos?per_page=100
• Key excerpt:
  • The GitHub organization is verified for leastauthority.com.
  • Pinned repos include moonmath-manual, winden, and destiny.
  • The broader repos listing includes more recent protocol and infrastructure work such as near-intents, near-one-btc-bridge, near-one-btc-light-client, midnight-dapp-connector-api, midnight-node, zcash-trees, and public uptime repositories.
  • This supports the view that Least Authority’s operating surface spans education, apps, protocol work, and live operational infrastructure.

7) PrivateStorage page

• URL: https://private.storage/
• Key excerpt:
  • The page says PrivateStorage offers end-to-end encrypted cloud storage with no user accounts and a privacy-enhancing payment system called storage-time.
  • It says payment is separated from storage behavior and that files are client-side encrypted before upload.
  • This matters because it shows the practical environment in which Least Authority’s ZKAPs and privacy engineering work are deployed.

Working conclusion

Least Authority is best cataloged as cryptographic security and privacy infrastructure with consulting, implementation, and education layers. The combination of published audits, deep zero-knowledge and MPC expertise, first-party privacy-preserving product development, MoonMath Manual, and a broad public GitHub footprint makes it substantially richer than a generic audit or consulting firm.