Paste a published Merkle-sum-tree root (hash + sum) and an inclusion proof for one leaf. The node independently recomputes both the hash chain and the sum chain from the leaf to the root over the pasted proof path, rejecting any negative balance or any value exceeding a declared MAX_BALANCE domain bound anywhere along it, the mitigation Summa's own circuit applies with a RangeCheckChip against the Merkle-sum-tree negative-balance-cancellation attack described in Maxwell's eprint 2022/043 §4.1, applied here at the application layer instead of inside a ZK circuit. Verify-only: reports inclusion and local sum-consistency, never a solvency claim.
Summa MSTProof-of-ReservesMerkle Sum TreeZero PIIClient-side only
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data - use synthetic or anonymised inputs only.
⚠ The leaf identifier field must be an opaque, already-hashed account identifier - never a raw username, account number, or email.
Scope & reliance
This tool verifies a SHA-256 Merkle sum tree, not Summa's own Poseidon-hashed production circuit output - it is a from-scratch, non-ZK reimplementation of the documented pattern (Apache-2.0 OR MIT, pattern only, no code vendored), not an interop layer with any specific vendor's published root. Inclusion + local range-check passing means this leaf, and the values along its path, are internally consistent and non-negative - it is NOT a statement that every other leaf in the tree is well-formed, and it is NEVER a statement that the reserve is solvent. All balance/sum arithmetic uses BigInt; MAX_BALANCE is a verification parameter you control, not the thing being verified.