
We found the same Fiat-Shamir bug in six independent zkVMs. The result: an attacker can bypass the cryptography entirely and prove mathematically impossible statements (like minting $1M out of thin air). Full breakdown ↓
Michele Orrù
270 posts


We found the same Fiat-Shamir bug in six independent zkVMs. The result: an attacker can bypass the cryptography entirely and prove mathematically impossible statements (like minting $1M out of thin air). Full breakdown ↓



MASSIVE rewrite of my Verification Theatre paper now on ePrint with added: - Three new bugs that are *inside* libcrux's verified core, - Comparison to Amazon's verified LibCrypto components, - Many additional sections, discussion, details! Go read it! eprint.iacr.org/2026/192

Introducing a new standards lab for generic zk-SNARKs, in collaboration with Linux Foundation Decentralized Trust (@lfdecentralized). Join us on 14 Jan for our first virtual meetup, along with Mary Maller, @srinathtv, @mmaker, and myself: meetup.com/lfdt-sf/events…









did you forget about Bulletproofs? hope not coz here's some more high-level intuitions





