World, the identity project formerly known as Worldcoin, open-sourced ProveKit, a zero-knowledge toolkit that lets users prove identity claims such as age or nationality without exposing the underlying personal data. ^[1][2] Brian Krebs reported on 2026-09-01 that a dark web service called Nexus is selling scans of more than 153 million US and Canadian driver's licenses, apparently taken from a breached identity-verification vendor, and that the FBI's New Orleans field office has opened an investigation. ^[3] World said ProveKit generates proofs locally on a user's phone or browser, rather than via delegated server computation, to reduce the risk of data exposure and keep personal information under the user's control. ^[4] World said ProveKit targets 128-bit post-quantum security, requires no trusted setup, uses the WHIR hash-based commitment scheme, and was independently audited by Least Authority. ^[5] ProveKit generates proofs locally on users' phones or browsers, and World says this keeps the underlying identity data inaccessible to World Foundation, Tools for Humanity, and other third parties. ^[6] ProveKit has been in development for roughly two years, supports Aztec's Noir programming language, and is designed to run on normal consumer hardware. ^[7] ProveKit v1 is primarily optimized for offchain verification, and World is developing ProveKit v2, which is expected to reduce proof sizes, proving times, and memory usage while making onchain verification more efficient. ^[8]