Skip to content
Circuit Breaker: The Missing Constraint That Compromised RISC Zero’s zkVM
hackenproof.com | blog | #bug-bounty | #web3 | #vulnerability-research | #cryptography | #vulnerability | #zkvm | #zero-knowledge-proofs | #risc-zero | #riscv
Summary
How a missing constraint in RISC Zero's rv32im circuit let a malicious prover forge results for 3-register RISC-V instructions like remu and divu in risc0-zkvm 2.x.
- Published
- Collected