| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/consensys/gnark | < 0.9.1 | 0.9.1 |
A a third party may derive a valid proof from a valid initial tuple {proof, public_inputs}, corresponding to the same public inputs as the initial proof. This vulnerability is due to randomness being generated using a small part of the scratch memory describing the state, allowing for degrees of freedom in the transcript. Note that the impact is limited to the PlonK verifier smart contract.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free