diff --git a/README.md b/README.md
index 6d1999a..96f77a6 100644
--- a/README.md
+++ b/README.md
@@ -25,17 +25,17 @@ deliberate future change so provenance stays byte-checkable).
 `toolchain.env` is the single source of truth:
 
 ```
-NARGO_VERSION=1.0.0-beta.20
-BB_VERSION=5.0.0-nightly.20260324
+NARGO_VERSION=1.0.0-beta.25
+BB_VERSION=5.2.0
 ```
 
 Install exactly those:
 
 ```sh
 curl -L https://raw.githubusercontent.com/noir-lang/noirup/main/install | bash
-noirup --version 1.0.0-beta.20
+noirup --version 1.0.0-beta.25
 curl -L https://raw.githubusercontent.com/AztecProtocol/aztec-packages/master/barretenberg/bbup/install | bash
-bbup --version 5.0.0-nightly.20260324
+bbup --version 5.2.0
 ```
 
 The pins matter because the whole chain is deterministic in the toolchain:
diff --git a/circuits/dyaka-noir-token/Nargo.toml b/circuits/dyaka-noir-token/Nargo.toml
index 49cdfe5..80f6aaf 100644
--- a/circuits/dyaka-noir-token/Nargo.toml
+++ b/circuits/dyaka-noir-token/Nargo.toml
@@ -6,4 +6,4 @@ compiler_version = ">=1.0.0"
 
 [dependencies]
 sha256 = { tag = "v0.3.0", git = "https://github.com/noir-lang/sha256" }
-keccak256 = { git = "https://github.com/noir-lang/keccak256", tag = "v0.1.0" }
+keccak256 = { git = "https://github.com/noir-lang/keccak256", tag = "v0.1.3" }
diff --git a/toolchain.env b/toolchain.env
index 5adb558..aeb905b 100644
--- a/toolchain.env
+++ b/toolchain.env
@@ -8,5 +8,5 @@
 # Install with:
 #   noirup --version "$NARGO_VERSION"
 #   bbup   --version "$BB_VERSION"
-NARGO_VERSION=1.0.0-beta.20
-BB_VERSION=5.0.0-nightly.20260324
+NARGO_VERSION=1.0.0-beta.25
+BB_VERSION=5.2.0