SNARKs produce compact proofs that are cheap to verify, making them ideal for on-chain use.

The main drawback of SNARKs is their reliance on a trusted setup ceremony, which introduces a security assumption.