ZK/SEC Research notes from zkSecurity
All posts
announcement

Ditch the Pump & Dump Drama: Your ZK Tech Hub Awaits

Today we're announcing the release of our new project, zkNews, a zero-knowledge link aggregator for the community. We're excited to bring you a platform where you can find all the latest news, research, and projects in the zero-knowledge space.

zknews

The zero-knowledge (ZK) space is exploding, and it can be tough to keep up with the latest developments. That's why we're thrilled to introduce zkNews – your one-stop shop for all things ZK.

What is zkNews?

zkNews is a zero-knowledge link aggregator designed specifically for the ZK community. It's your go-to source for:

  • Breaking news: Stay ahead of the curve with the most recent ZK announcements and breakthroughs.
  • In-depth research: Dive into the latest academic papers and technical discussions shaping the ZK landscape.
  • Cutting-edge projects: Discover new ZK tools, platforms, and applications pushing the boundaries of privacy and scalability.

Join the Beta!

We're launching zkNews in beta mode, and we want your feedback! Head over to https://news.zksecurity.xyz to start exploring. While we're in beta, access is limited to a smaller group of users, but we'll be expanding soon.

Your Feedback is Invaluable

We're committed to making zkNews the best resource for the ZK community. Tell us what you think! Share your suggestions, report any bugs, and let us know what kind of content you'd like to see more of.

Stay Tuned!

This is just the beginning. We have big plans for zkNews, including personalized recommendations, community features, and more. Follow us on twitter for updates and announcements.

Keep reading
Recommended

SoK: What don’t we know? Understanding Security Vulnerabilities in SNARKs

We've teamed up with some of the top minds in academia and industry to dive deep into the world of zero-knowledge proofs (ZKPs) and their vulnerabilities. Our new paper catalogues hundreds of ZK vulnerabilities, breaking down their root causes and offering strategies to sidestep these pitfalls. By digging into real-life SNARK implementations, we aim to bolster the security of these cutting-edge systems with actionable insights and recommendations. Curious about what makes ZKPs tick and how to keep them secure? You might find this study just what you need!

ZK/SEC · February 26, 2024

Listen to us on the latest episode of zeroknowledge.fm

Join our cofounder David Wong on the latest zk podcast as he dives into his compelling journey through cryptography, from his early days as a security consultant to his pivotal roles in major projects like Facebook's crypto initiatives and Mina. Get an insider's view on how we approach auditing in a Zero Knowledge context, the common pitfalls in ZK code, and how these insights shape our work. It's an engaging and informative chat for anyone fascinated by the world of cryptography and ZK technology!

ZK/SEC · August 30, 2023

The State of Security Tools for ZKPs

Zero-knowledge proofs (ZKPs) have come a long way from theory to real-world applications like blockchains and private transactions. We’ve been busy auditing various ZKP implementations and developing tools to improve circuit safety and security. In this blog post, we’ll explore how vulnerabilities can crop up in SNARK systems and the current state of tools designed to spot these issues. From circuit bugs to the often-overlooked frontend and backend layers, we cover how various analysis techniques and formal verification approaches are evolving to ensure robust ZKP systems. Dive in to discover the potential and current challenges in ZKP security!

ZK/SEC · June 02, 2024
More to explore

A challenge on the Jolt zkVM

Last weekend, we had a blast crafting challenges for a CTF event at the MOCA Italian hacker camp. One cryptography challenge, "2+2=5," involved the Jolt zkVM and a RISC-V program. In this post, we share the ins and outs of the challenge, the clever use of a modified Jolt library, and how we managed to prove an invalid execution without triggering verification alarms. Get ready to dive into the world of Jolt and pick up some nifty insights on exploiting cryptographic systems like a true hacker.

Giorgio Dell'Immagine · September 24, 2024

Sum-Check as an Algebraic Tensor Reduction: Part II

In this part of our series, we start introducing the algebraic language needed to formalize sum-check as a tensor reduction. We start with the basics of rings and modules. Rings generalize fields by dropping the requirement that every non-zero element has a multiplicative inverse. Modules then generalize vector spaces by allowing scalars to come from a ring instead of a field. In this post, we’ll use plenty of examples to make these ideas concrete and build intuition along the way.

Marco Besier · May 10, 2026

Introducing bugs.zksecurity.xyz a knowledge base for ZK bugs

We're thrilled to introduce our new site, [bugs.zksecurity.xyz](https://bugs.zksecurity.xyz/), a hub for exploring past vulnerabilities in ZK circuits. Dive into our growing catalog of documented bugs and learn how we've reproduced some with comprehensive scripts. Discover evaluations of prominent security tools like Circomspect and Picus, and see where they shine or stumble. We're calling on the community to join us in expanding this invaluable resource, whether by adding bugs, reproducing them, or improving our platform. Let's collaborate to elevate ZK security together!

Stefanos Chaliasos · February 17, 2025