Zcash uses formally verified zero-knowledge circuits