Peter Manohar 2. Why is it important for zkSNARKs to be succinct for Zerocash? The zkSNARKs must be succinct for efficiency reasons. These proofs are being stored permanently on the blockchain, so if they are long then the blockchain will be massive, which would make the Zerocash protocol infeasible. Succinctness also ensures that proofs can be verified in a short amount of time. This is again important for efficiency reasons, because it means that nodes do not have to spend long amounts of time verifying the proofs in the blockchain. If the proofs took a long time to verify (say on the order of hours or days), then the Zerocash protocol would be too inefficient to be deployed in practice. 3. Why does anonymity still hold in Zerocash even if the trusted setup is corrupted? Anonymity still holds because the zkSNARK construction used is still zero-knowledge even if the public parameters in the trusted setup are corrupted. Namely, the trust in the public parameters is necessary to ensure the soundness of the proofs (i.e., that false statements cannot be proved), but it is not tied to the zero-knowledge properties of the zkSNARK, so it does not affect ledger indistinguishability.