Coordinated disclosure of vulnerabilities affecting Girault, Bulletproofs, and PlonK

Summary: Trail of Bits publicly disclosed critical vulnerabilities, dubbed Frozen Heart, that break the soundness of multiple zero-knowledge proof implementations including PlonK and Bulletproofs by exploiting insecure Fiat-Shamir transformations that let malicious users forge proofs for random statements. The firm notified ZenGo, ING Bank, SECBIT Labs, Adjoint Inc., Dusk Network, Iden3, ConsenSys and the Bulletproofs authors on March 18, 2022, and as of April 12, 2022 ZenGo, Dusk Network, Iden3 and ConsenSys had patched, ING Bank had deleted its vulnerable repository, and the Bulletproofs authors had corrected their paper, while SECBIT Labs and Adjoint Inc. could not be reached.
What you should know: The flaw traces back to a mistake in the original Bulletproofs academic paper itself, and Trail of Bits says these Fiat-Shamir errors are incredibly pervasive across the zero-knowledge ecosystem - so any proof system you rely on may have inherited the same defect from its documentation.

Read the original at Trail of Bits Blog ↗