ZK/SEC Research notes from zkSecurity
All posts
announcement

Ditch the Pump & Dump Drama: Your ZK Tech Hub Awaits

Today we're announcing the release of our new project, zkNews, a zero-knowledge link aggregator for the community. We're excited to bring you a platform where you can find all the latest news, research, and projects in the zero-knowledge space.

zknews

The zero-knowledge (ZK) space is exploding, and it can be tough to keep up with the latest developments. That's why we're thrilled to introduce zkNews – your one-stop shop for all things ZK.

What is zkNews?

zkNews is a zero-knowledge link aggregator designed specifically for the ZK community. It's your go-to source for:

  • Breaking news: Stay ahead of the curve with the most recent ZK announcements and breakthroughs.
  • In-depth research: Dive into the latest academic papers and technical discussions shaping the ZK landscape.
  • Cutting-edge projects: Discover new ZK tools, platforms, and applications pushing the boundaries of privacy and scalability.

Join the Beta!

We're launching zkNews in beta mode, and we want your feedback! Head over to https://news.zksecurity.xyz to start exploring. While we're in beta, access is limited to a smaller group of users, but we'll be expanding soon.

Your Feedback is Invaluable

We're committed to making zkNews the best resource for the ZK community. Tell us what you think! Share your suggestions, report any bugs, and let us know what kind of content you'd like to see more of.

Stay Tuned!

This is just the beginning. We have big plans for zkNews, including personalized recommendations, community features, and more. Follow us on twitter for updates and announcements.

Keep reading
Recommended

SoK: What don’t we know? Understanding Security Vulnerabilities in SNARKs

We've teamed up with some of the top minds in academia and industry to dive deep into the world of zero-knowledge proofs (ZKPs) and their vulnerabilities. Our new paper catalogues hundreds of ZK vulnerabilities, breaking down their root causes and offering strategies to sidestep these pitfalls. By digging into real-life SNARK implementations, we aim to bolster the security of these cutting-edge systems with actionable insights and recommendations. Curious about what makes ZKPs tick and how to keep them secure? You might find this study just what you need!

ZK/SEC · February 26, 2024

Listen to us on the latest episode of zeroknowledge.fm

Join our cofounder David Wong on the latest zk podcast as he dives into his compelling journey through cryptography, from his early days as a security consultant to his pivotal roles in major projects like Facebook's crypto initiatives and Mina. Get an insider's view on how we approach auditing in a Zero Knowledge context, the common pitfalls in ZK code, and how these insights shape our work. It's an engaging and informative chat for anyone fascinated by the world of cryptography and ZK technology!

ZK/SEC · August 30, 2023

The State of Security Tools for ZKPs

Zero-knowledge proofs (ZKPs) have come a long way from theory to real-world applications like blockchains and private transactions. We’ve been busy auditing various ZKP implementations and developing tools to improve circuit safety and security. In this blog post, we’ll explore how vulnerabilities can crop up in SNARK systems and the current state of tools designed to spot these issues. From circuit bugs to the often-overlooked frontend and backend layers, we cover how various analysis techniques and formal verification approaches are evolving to ensure robust ZKP systems. Dive in to discover the potential and current challenges in ZKP security!

ZK/SEC · June 02, 2024
More to explore

Variants of KZG: Part II, Multilinear Commitments with PST

In this blog post, we extend the ideas behind univariate KZG commitments to multilinear polynomials through the PST commitment scheme. We derive the multilinear quotient identity, explain how PST commits to and opens multilinear polynomials using a specialized multilinear setup and walk through its opening protocol. We conclude by examining the proof size, prover and verifier costs, and the limitations that motivate other multilinear polynomial commitment schemes.

Varun Thakore · July 28, 2026

Partnership with StarkWare

We're teaming up with StarkWare to enhance Ethereum's scalability using an exciting tool called the EVM adapter. This innovative open-source project takes proofs from the Stone Prover and makes them verifiable on Ethereum, showcasing the power of Cairo bootloader programs for Layer 2 scaling. By diving into our collaboration, you'll get a glimpse of StarkNet's ability to streamline transactions efficiently and how our joint efforts are driving this tech forward. Plus, our Stark Book offers a deeper technical dive for the curious minds!

ZK/SEC · April 05, 2024

Detecting boomerang values in zero-knowledge circuits using tag analysis

Ever wonder how zkApps ensure their execution is spot-on? This post digs into the idea of *boomerang values*, sneaky bugs that can crop up when zkApps mix in-circuit and out-of-circuit logic. We explore how these values disrupt your circuit's trustworthiness, especially when variables are reintegrated unverified. Plus, we share how tools like MIRAI's tag analysis can help spot these issues, making your zkApps more secure. Perfect for anyone into zero-knowledge applications or budding Rust enthusiasts looking for insights on taming complex bugs!

ZK/SEC · August 25, 2023