PLONK allows a single trusted setup to support a universal circuit, unlike Groth16's per-circuit setup.

Many zkEVM projects use PLONK-based proving systems due to their flexibility and efficient on-chain verification costs.