research.logos.co/docs/rln.md

Rate Limiting Nullifier (RLN)

A privacy-preserving rate-limiting protocol for decentralised systems, powered by ZK.

---

This document summarises RLN's principles and provides reference materials for developers and researchers interested in privacy-preserving rate limiting.

Why RLN?

In decentralised systems, rate limiting must prevent spam without exposing identities or relying on central control.

RLN achieves this using zero-knowledge proofs and anonymous nullifiers, enabling fair participation that is privacy preserving, decentralised, and verifiable.

What is RLN?

RLN is a zero-knowledge protocol that enables rate limiting without revealing user identities.

It prevents spam in anonymous systems by allowing each user to generate exactly one valid proof per time window, named Epoch, while maintaining anonymity.

How RLN works

1. A user joins a group (for example, a Merkle tree).
2. Each message includes a proof and a nullifier.
3. The proof is verified with nullifiers.
4. If a nullifier is reused within a time window, it indicates spam.
5. The system detects abuse without revealing the sender's identity.

Core components:

Concept	Description
Nullifiers	A unique message or TX tag per message window
Rate limit window (Epochs)	Defines how often a proof can be valid
Membership proof	Confirms user is part of an authorized group by tree
Proof system	Zero-knowledge circuit (Groth16) by Zerokit
Secret	Extractable by an additional nullifier that exceeds the user's commitment
id-commitment	Commitment of the user message (TX) right for an epoch and secret.

---

Resources

Docs

• PSE RLN Notion
• RLNv3 Blogpost
• RLNv2 RFC
• RLNv1 RFC (begin here!)
• RLN github.io
• RLN in Waku
• RLN workshop

Implementations

• Zerokit
• RLN GitHub Repository (PSE)

Integrations / Use Cases

• Status Gasless L2: In Status Network, RLN serves as the cryptographic rate-limiting layer that enables secure and fair gasless transactions. Instead of traditional gas fees, users are limited by cryptographic proofs based on RLN. Each user can send only a fixed number of transactions per epoch; exceeding this limit makes their secret key recoverable. RLN uses Sparse Merkle Trees for scalable membership management, supporting millions of accounts. The system operates through a Prover–Verifier model: the Prover generates an RLN proof for each transaction, while the Verifier in the Sequencer validates it. This architecture allows Status Layer 2 to process gasless, privacy-preserving, and spam-resistant transactions efficiently. See the implementation here: rln.md
• Waku-rln-relay: In Logos Messaging, RLN is integrated into the gossip-based relay layer to enable privacy-preserving spam protection without relying on centralised moderation or heavy computational proof-of-work. The resulting protocol, WAKU-RLN-RELAY, limits the messaging rate of each peer through zero-knowledge proofs that verify group membership while keeping user identities private. If a participant exceeds the allowed message quota, their secret can be cryptographically revealed, resulting in a financial penalty, while honest peers who detect spammers are rewarded. This integration allows Logos Messaging to provide anonymous, decentralised, and spam-resistant messaging across heterogeneous networks. Check the rln.waku.org RLN Membership on Linea Sepolia testnet.
• Railgun: In the RAILGUN ecosystem, privacy is achieved fully on-chain through zero-knowledge cryptography, enabling users to interact privately with DeFi and smart contracts across Ethereum, BSC, Polygon, and Arbitrum without leaving their native chain. Since RAILGUN uses Logos Messaging as its communication layer, the same RLN-based anti-spam mechanisms described in the previous section apply here as well. This integration ensures that private transactions and messages remain secure, decentralised, and censorship-resistant while benefiting from Logos Messaging's efficient peer-to-peer messaging framework.
• The Graph: In the Graph ecosystem, Graphcast leverages Logos Messaging and RLN to enable real-time, spam-resistant, and privacy-preserving communication among Indexers. Instead of relying on costly on-chain broadcasts, Graphcast provides a peer-to-peer messaging layer where Indexers can exchange data such as subgraph integrity checks, query analytics, and coordination signals at near-zero cost. RLN ensures rate-limited, anonymous message delivery, preventing spam while maintaining low latency and privacy. Since Logos Messaging serves as the underlying communication protocol, the same RLN-based mechanisms described earlier apply, allowing The Graph network to scale coordination securely without incurring blockchain gas fees.

Talks and references

• Using RLN in a Peer to Peer Network | Aaryamann Challani | PROGCRYPTO
• 0xPARC RLN YT
• Rate-Limiting Nullifier | Rasul Ibragimov | PROGCRYPTO