Sponge Trouble: When Poseidon Gets Absorbed in Its Own Bugs
| | | | |

Sponge Trouble: When Poseidon Gets Absorbed in Its Own Bugs

ByNabih Benazzouz

Poseidon Sponge Bugs in ArkWorks Avoiding Cryptographic Failures in Hashing We found two subtle yet impactful bugs in the ArkWorks library’s implementation of the Poseidon Sponge. This discovery highlights the complexity and precision required in cryptographic implementations. In this article, we’ll first explain what Poseidon Sponge is, how it works, and then delve into the…

gnark zkp consensus OOM cryptography
| | | |

Uncovering an Out of Memory Vulnerability in Gnark: How We Discovered CVE-2024-50354

ByPatrick Ventuzelo

Uncovering an Out of Memory Vulnerability in Gnark How We Discovered CVE-2024-50354 Last month (october 2024), LambdaClass and Fuzzinglabs teams discovered an Out of Memory (OOM) vulnerability within the Gnark library, one of the most popular Go library for zk-SNARKS. During the deserialization of Verifying Keys, we can trigger a fatal error that can lead…

aligned layer fuzzinglabs security audit bugs vulnerability eigen layer assessment
| | |

Aligned Layer Security Assessment Completed

ByPatrick Ventuzelo

SECURING THE FUTURE OF ZK PROOFS & ETHEREUM SCALABILITY In-Depth Audit of Aligned Layer’s Smart Contracts and Batch Processing At FuzzingLabs, we recently completed a comprehensive security audit of Aligned Layer, a decentralized network designed to provide fast, efficient, and low-cost verification of zero-knowledge (ZK) and validity proofs on the Ethereum blockchain. This post summarizes the key…