The Secret Ingredient That Makes ZK Anonymity Actually Work

A field guide to nullifiers in ZK applications: what they are, the properties that make them work, how Tornado Cash, Zcash, Penumbra and others implement them, and the vulnerability classes that show up when nullifier design goes wrong.