Succinct Patches SP1 Rust Verifier Flaw Affecting Versions Through 6.8.0

Photo: TokenPost
Succinct patched a flaw in SP1’s native Rust verifier that could allow invalid execution proofs to pass validation when proof data was inconsistent, affecting releases 6.0.0 through 6.8.0. The fix is included in SP1 version 6.8.1. Along affected verification paths, the software now checks that a tensor’s stored length equals the product of its declared dimensions and checks the tensor’s shape. These checks address inconsistencies that could cause separate verification steps to process mismatched data. The issue involved Core and Compressed proofs submitted directly to the vulnerable Rust verifier.
Source: TokenPost







