More ZK bugs about zk-bug-tracker HOT 5 OPEN

This is great, thank you!! Will go through and add them once I get a chance.

from zk-bug-tracker.

Took a dive into the Timing attacks paper, but after some research it looks like they may not be that serious?
https://forum.zcashcommunity.com/t/churning-zcash-for-maximum-anonymity-and-privacy/40705/2

Likely going to add the EEA-OASIS and Arkworks bugs. Still need to take a look into the remaining 3.

from zk-bug-tracker.

Please also add Tornado Cash which was a classical missing constraint but the problem is https://crypto.stackexchange.com/q/103262

from zk-bug-tracker.

Below are a few that I found. Don't know if they qualify for this project because they are bugs in the EC libraries rather than in circuits.

• blst: Modular inverse incorrect result
• blst: Inverse modulo hangs on i386 if input is 0 or multiple of modulo
• blst Using non-standard 'dst' parameter branches on uninitialized memory
• blst: NULL pointer dereference if msg is empty and aug is non-empty
• blst: NULL pointer dereference if point multiplier is zero-stripped
• blst: Branching on uninitialize memory
• blst: blst_fr_eucl_inverse incorrect result
• blst: blst_fp_is_square incorrect result on ARM
• Herumi mcl: Incorrect results with dst larger than 255 bytes
• Herumi mcl: map-to-curve incorrect result if both inputs are equivalent
• Herumi mcl: Incorrect result for G1 multiplication by Fp
• kilic-bls12-381: Fr FromBytes does not reduce value if value is modulus
• arkworks-algebra: multi_scalar_mul incorrect result if scalar exceeds curve order
• Constantine: Incorrect reduction of BigInt
• Constantine: BLS12-381 HashToCurve G1 incorrect result

from zk-bug-tracker.

Here are other zk bugs other security researchers found, I want to list here, please merge it if you think they are awesome:

• zksync zkevm: https://medium.com/chainlight/uncovering-a-zk-evm-soundness-bug-in-zksync-era-f3bc1b2a66d8 (Underconstrained)
• aztec connector: https://hackmd.io/@aztec-network/claim-proof-bug & https://medium.com/immunefi/aztec-multiple-spend-error-bugfix-review-20074581d224 (underconstrained)

from zk-bug-tracker.