Succinct’s SP1 Flaw Could Let Mainnet Accept Invalid Proofs

A high-severity flaw in Succinct’s SP1 zero-knowledge virtual machine could let the mainnet Prover Network accept invalid proofs, creating a security risk for projects that rely on its Rust verifier. The bug affects SP1’s native Rust verifier versions 6.0.0 through 6.8.0. A malicious prover could submit a proof for an invalid execution, while a network verifier could still accept it. The verifier checked a data label describing a value’s dimensions but failed to confirm that the stored element count matched the dimensions’ product. Succinct released version 6.8.1 on Sept.

Source: TokenPost