Succinct's mainnet Prover Network was left open to invalid proofs by an SP1 bug

A high-severity soundness bug in Succinct’s zero-knowledge proving system, SP1, exposed the company’s own mainnet Prover Network to invalid proofs. The network was the only deployment Succinct was aware of that was affected, according to a GitHub security advisory released Oct. 11. Native Rust verifiers in 6.0.0 through 6.8.0 could accept invalid proofs The advisory, filed as GHSA-p7v2-jjv3-8p8f, says a malicious prover could submit a proof for an invalid execution and the network’s verifier would accept it. The Prover Network accepted proofs from third-party provers. To take advantage of the bug, proofs had to be sent directly to SP1’s native Rust verifier. Core and Compressed proofs were exposed on that path.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.