The Frozen Heart vulnerability in PlonK
Summary: Trail of Bits disclosed a class of vulnerability it calls Frozen Heart, caused by insecure implementations of the Fiat-Shamir transformation that let malicious users forge proofs for random statements. This installment shows how the flaw works in PlonK, affecting Dusk Network's plonk, Iden3's SnarkJS, and ConsenSys' gnark, all of which failed to include the public inputs in their Fiat-Shamir challenge calculations.
Key Takeaway: A malicious prover can pick public input values that depend on the challenge zeta, letting them skip the copy-constraint checks and trick the verifier into accepting a forged proof - and SnarkJS does not return an error on the zeroed-out polynomial the attack relies on.
Read the original at Trail of Bits Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026