ShippethEthereum releases, writing, news and network upgrades
Everything731Releases618Articles49Advisories64

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Security advisories and exploited vulnerabilities

Privacy & ZK. Privacy and proving systems.

64 items match, 41 of them low signal.

The stream

Newest first
Sun 11 October
SP1 V6 Native Rust Verifier: Mismatched Tensor Lengths (opens in a new tab) · SP1 (Succinct) Security High
Thu 8 October
UltraHonk native verifier throws or aborts on a recursive pairing accumulator with a point at infinity (opens in a new tab) · Aztec Security Medium
Thu 8 October
UltraHonk native verifier accepts proofs whose recursive pairing accumulator has one point at infinity (opens in a new tab) · Aztec Security High
Tue 19 May
Load Store Forwarding incorrectly eliminates stores that are read through an IfElse, making Brillig silently return zero instead of correct values (opens in a new tab) · Noir Security High
Tue 14 April
handle_terminator mishandles Jmp in mem2reg when argument alias set is unknown, causing unsound load propagation (opens in a new tab) · Noir Security High
Tue 14 April
add_array_aliases misses “hidden” nested references in MakeArray analysis, enabling unsound mem2reg store elimination (opens in a new tab) · Noir Security High
Tue 14 April
Unsafe usage of `assert_always_fail` (opens in a new tab) · Noir Security High
Tue 14 April
Repeat-load / known-load incorrectly eliminated across call that mutates memory via indirect reference (opens in a new tab) · Noir Security High
Tue 14 April
Array only used in while condition not cloned (opens in a new tab) · Noir Security Critical
Tue 14 April
Can pop from an empty slice (opens in a new tab) · Noir Security Critical
Tue 14 April
Heap corruption in foreign call results with nested tuple arrays (opens in a new tab) · Noir Security Critical CVE-2026-41197
Sat 11 April
SP1 V6 Recursion Circuit Row-Count Binding Gap (opens in a new tab) · SP1 (Succinct) Security High CVE-2026-40323
Tue 3 March
ECDSA blackbox functions should not be pure as they have side effects (opens in a new tab) · Noir Security High
Tue 3 March
`convert_slice_push_back` doesn't update length (opens in a new tab) · Noir Security High
Tue 3 March
Unsafe usage of `read_array` (opens in a new tab) · Noir Security High
Tue 3 March
Slice operations create incorrect element_type_sizes array (opens in a new tab) · Noir Security Critical
Tue 3 March
RemoveIfElse incorrectly tracks slice sizes (opens in a new tab) · Noir Security Critical
Tue 3 March
Index in `convert_slice_pop_back` incorrectly calculated (opens in a new tab) · Noir Security Critical
Wed 7 January
Missing `get_inputs_vec` inputs for AES128Encrypt (opens in a new tab) · Noir Security High
Mon, 1 December 2025
Soundness bug allowing proof forgery when casting from Field to u128 (opens in a new tab) · Noir Security Critical
Tue, 3 June 2025
Vulnerability in Plonky3, Insufficient checks in the Rust verifier and embedded allocators (opens in a new tab) · SP1 (Succinct) Security High
Wed, 15 January 2025
Missing verifier checks and fiat-shamir observations (opens in a new tab) · SP1 (Succinct) Security High
Mon, 28 October 2024
Insufficient range checks of BabyBear arithmetic (opens in a new tab) · SP1 (Succinct) Security High

Also collected

Per-package monorepo tags, releases that carry little weight, and publications that post several times a day
Checkpoint with over 72 blocks pushed via the escape hatch and proven halts the L2 (opens in a new tab) · Aztec Security Low
Incorrect conditional mutable reference assignment in Brillig (opens in a new tab) · Noir Security Medium
Arrays may be indexed out-of-bounds (opens in a new tab) · Noir Security Medium
`CallGraph::from_ssa` is a potential footgun (opens in a new tab) · Noir Security Low
Insufficient observation of cumulative sum (opens in a new tab) · SP1 (Succinct) Security Medium