ChainLight has discovered a soundness bug in the ZK circuit of the zkSync Era mainnet, and Matter Labs has deployed a fix.
On November 3rd, security company ChainLight disclosed that its researchers discovered a soundness bug in the ZK circuit of the zkSync Era mainnet on September 15th, and reported it on the 19th. The bug could potentially drain all tokens passed through cross-chain bridges, allowing malicious provers to generate proofs for invalidly executed blocks, which would be accepted by the verifier smart contracts on L1. Matter Labs has deployed a fix for the issue and awarded ChainLight 50,000 USDC as a reward.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Cardano Jumps 215% After Major Breakout and Sets Sights on Higher Targets
What’s Next for Chainlink? $19.25 on the Table if $16.60 Breaks
Bitcoin Could Reach $180,000 as VanEck Sees Strong Demand and Policy Shifts
Donald Trump Taps Crypto-Friendly Scott Bessent as Treasury Secretary