PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security Audit of Monero Bulletproofs

blog.quarkslab.com | research | #security-audit | #cryptography | #blockchain | #zero-knowledge-proof | #monero | #bulletproof
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's audit of Monero's Bulletproof implementation — non-interactive zero-knowledge range proofs expected to cut transaction fees by 70-80%; several issues found, some possibly critical.
Published
Collected

Related coverage

research · blog.quarkslab.com
Security Audit of Particl Bulletproof and MLSAG
Quarkslab's assessment of Particl's Bulletproof (non-interactive zero-knowledge proof) and MLSAG (ring signature) implementations for confidential transactions; both found sound and paper-conformant.
blog · hackenproof.com
Security State 2022: Near Ecosystem
HackenProof surveyed 515 NEAR ecosystem projects and found only about a quarter rely on audits or bug bounties, noting the ecosystem's low entry barrier attracts many GameFi and NFT projects.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.quarkslab.com
Workflow of a zkSync Era transaction: from generation to finalization
A walkthrough of a zkSync Era transaction's lifecycle from generation to finalization: how the ZK Rollup executes transactions and proves their execution on Ethereum with zero-knowledge proofs.
research · blog.quarkslab.com
Security Audit of dalek libraries
Quarkslab's cryptographic and security assessment of the Rust dalek libraries (subtle, curve25519-dalek, bulletproofs) used by the Tari protocol; only minor issues found, with usage recommendations.
research · blog.quarkslab.com
Security Audit of Monero RandomX
Quarkslab's review of Monero's RandomX proof-of-work algorithm, covering areas left uncovered by three earlier audits; only minor inconsistencies found, mainly affecting alternative configurations.
Back