---
id: 1749
title: "It pays to be Circomspect"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2022/09/15/it-pays-to-be-circomspect/"
published_at: "2022-09-15T04:00:43Z"
tags: ["vulnerability", "static-analysis", "blockchain", "zero-knowledge-proofs", "circomspect", "circom", "tornado-cash"]
phying_url: "https://phying.com/item/1749"
lang: en
---

# It pays to be Circomspect

## Summary

Trail of Bits open-sourced Circomspect, a static analyzer for Circom zero-knowledge circuits that would have caught the Tornado.cash deposit-forgery flaw, which boiled down to a two-character fix.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2022-09-15T04:00:43Z
- **Original:** https://blog.trailofbits.com/2022/09/15/it-pays-to-be-circomspect/
- **Phying News:** https://phying.com/item/1749