PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Specialized Zero-Knowledge Proof failures

blog.trailofbits.com | blog | #cryptography | #vulnerability-disclosure | #blockchain | #zero-knowledge
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits discloses two bugs in special-purpose zero-knowledge proof code that let attackers "prove" impossible statements — producing invalid group signatures that could enable denial-of-service attacks against threshold-signature blockchains like THORChain and Binance.
Published
Collected

Related coverage

blog · certik.com
What Is a Zero-Knowledge Virtual Machine (zkVM)?
A zkVM combines zero-knowledge proofs with virtual machines to prove a program ran correctly without re-execution or exposing internal data, enabling scalable, privacy-preserving computation.
research · certik.com
Inside CertiK's Independent Security Research on Besu
CertiK's chaos-engineering-style testing against a private multi-node Besu testnet uncovered five resource-exhaustion vulnerabilities, patched in Besu 26.7.1 and credited in Besu's release notes.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · blog.trailofbits.com
We beat Google’s zero-knowledge proof of quantum cryptanalysis
Trail of Bits forged a zero-knowledge proof beating Google's quantum cryptanalysis results by exploiting memory safety and logic bugs in its Rust zkVM prover code, demonstrating zkVM security risks.
blog · blog.trailofbits.com
The cryptography behind electronic passports
How electronic passports use cryptography to block forgery, eavesdropping, and cloning, where legacy protocols like BAC fall short, and what this means for zero-knowledge identity proofs.
Back