---
id: 5664
title: "Unverified evaluations in Dusk’s PLONK"
source_domain: osec.io
source_url: "https://osec.io/blog/unverified-evaluations-dusk-plonk/"
published_at: "2026-04-30T12:00:00Z"
tags: ["web3", "vulnerability-research", "vulnerability", "blockchain", "zero-knowledge", "plonk", "dusk", "soundness"]
phying_url: "https://phying.com/item/5664"
lang: en
---

# Unverified evaluations in Dusk’s PLONK

## Summary

OtterSec finds a critical soundness flaw in dusk-plonk: the verifier never validated four prover-supplied polynomial commitments, enabling forged proofs and minting DUSK from nothing.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2026-04-30T12:00:00Z
- **Original:** https://osec.io/blog/unverified-evaluations-dusk-plonk/
- **Phying News:** https://phying.com/item/5664