Succinct SP1 Discovers High Severity Vulnerability, Mainnet May Accept Invalid Proofs

Succinct's zero-knowledge proof system SP1 has revealed a high-severity reliability vulnerability. This vulnerability was disclosed on October 11 via GitHub announcement GHSA-p7v2-jjv3-8p8f, affecting SP1's native Rust verifier versions 6.0.0 to 6.8.0, which may allow the mainnet Prover Network to accept invalid proofs. Malicious provers can submit proofs of invalid executions, which the network verifiers will still accept. The vulnerability arises because the verifier only reads the labels of the data and does not check whether the actual number of stored elements equals the product of the dimensions, allowing attackers to forge labels to pass invalid proofs. The Groth16 and Plonk checks using fixed-shape wrap proofs are unaffected, and the on-chain Solidity checker is also safe. Succinct released a fix in version 6.8.1 on September 24, which has been deployed to the mainnet; this version adds deserialization length checks. The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users running the native Rust verifier and accepting untrusted provers need to upgrade to version 6.8.1.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.