The Curious Engineer

All blogs / Security

ZK/SEC Quarterly

blog.zksecurity.xyz

Security Research & Advanced Cryptography

SecurityMathAI / ML

’23’24’25’26
Posts
140 from 30 May 2023 to 21 Oct 2026
Posting
weekly (59 in the last year)
Kind
company blog
Feed
https://blog.zksecurity.xyz/feed.xml

2026 48

  1. Zero Knowledge Episode 414: zkGolf, AI, Clean and Optimising ZK Circuits
  2. Checking the Checkers and Auditing the Ironwood FV
  3. Archetype x zkSecurity - Proof is in the Pudding: zkML
  4. Intro to Clean for Devs.
  5. Fiat-Shamir Bugs: How One Missing Line Breaks a Proof System
  6. Better Codes - and how they can be worse if you're not careful
  7. The Year Finding and Exploiting Bugs Became Cheap, and What to Do About It
  8. Variants of KZG: Part V, Multilinear Commitments with Mercury
  9. Variants of KZG: Part IV, Multilinear Commitments with Gemini
  10. Optimizing Cryptography with AI
  11. Introducing zkvmBlast: Differential Fuzzing for Ethereum's zkVMs
  12. Circom-Auditor: Open-Source Skills for Finding Vulnerabilities in Circom Code
  13. Variants of KZG: Part III, Multilinear Commitments with Zeromorph
  14. Variants of KZG: Part II, Multilinear Commitments with PST
  15. Threshold ECDSA: Building CGGMP from scratch
  16. zkao 2.0 is here
  17. Archetype x zkSecurity - Proof is in the Pudding: Groth16
  18. AI meets Cryptography 3: What AI Found in Bron Labs's bron-crypto
  19. Nine Years to Halve a Hash Function: RFC 9861 Is Out
  20. Bringing Aleo and Leo into zkao
  21. AI meets Cryptography 2: What AI Found in OpenVM's zkVM
  22. AI meets Cryptography 1: What AI Found in Cloudflare's CIRCL
  23. zk.golf: Fearless and Collaborative Optimization of Circuits
  24. New on mpcsec.org: An MPC Bug Tracker, Templates, and a Cleaner UI
  25. zkNews Is Now Open to Everyone
  26. Clean: From Verified Circuits to Verified zkVMs
  27. Announcing mpcsec.org: What Goes Wrong When You Implement MPC
  28. Sum-Check as an Algebraic Tensor Reduction: Part III
  29. Sum-Check as an Algebraic Tensor Reduction: Part II
  30. Breaking Jolt’s Verifier with an Unbound Uni-Skip Claim
  31. Notes and Proofs for Divisor Techniques
  32. Encrypted Mempools: Security Beyond Encryption
  33. On ZK Security, ZK Summit, and a Decade of Progress
  34. Powers-of-Funbenius
  35. Verifying Poseidon in Clean: Why the Last 'sorry' Is About Primality
  36. Groth16, Intuitively
  37. Soundness Failures in LaBRADOR Implementations from NTT -Friendly Rings
  38. The Final Form of Software Development
  39. Cryptography challenges @KalmarCTF 2026
  40. Sum-Check as an Algebraic Tensor Reduction: Part I
  41. Archetype x zkSecurity - Proof is in the Pudding: ZK on Bitcoin
  42. KZG vs IPA vs FRI: Picking the Right Polynomial Commitment Scheme
  43. The First ZK Exploits Happened, and They Weren't What We Expected
  44. When LLM Review Cryptography Papers
  45. zkao: Security That Compounds
  46. Optimistic One-Vote-Round Finality in BFT Consensus
  47. Lean4 formalization of
  48. Archetype x zkSecurity - Proof is in the Pudding: Privacy in Payment Networks

2025 41

  1. New Challenge Alert: Complete Both to Join zkSecurity
  2. Learn Sumcheck, MLE, and HyperPlonk: An Interactive Tutorial with SageMath
  3. Faster Sumchecks: Part I
  4. Comparison of formal verification frameworks for arithmetic circuits
  5. Sigma dance: commit, challenge, respond
  6. Circle STARKs: Part IV, Arithmetizing Circles
  7. Proximity Gaps: What Happened and How Does It Affect our SNARKs
  8. Playing with LaBRADOR: Building Compact Lattice-based Proofs with Recursion
  9. Stay in Range: Deeper Into Bulletproofs
  10. Announcing the S-two Book
  11. Common Circom Pitfalls and How to Dodge Them, Part 2
  12. Why does FRI work?
  13. Unfolding the Bulletproofs Magic: A SageMath Deep Dive
  14. Breaking Down Bulletproofs: No Pairings, No Trusted Setup
  15. Archetype x zkSecurity - Proof is in the Pudding: The Other Dark Forest (Offchain Public Keys)
  16. Archetype x zkSecurity - Proof in the Pudding: Introduction to Data Availability (Sampling)
  17. Halo2's Elegant Transcript As Proof
  18. Kocher's Timing Attack: A Journey from Theory to Practice
  19. 𝒫𝔩𝔬𝔫𝒦: A Hands-On Deep Dive
  20. Circle STARKs: Part III, Circle FFT
  21. Uncovering the Query Collision Bug in Halo2: How a Single Extra Query Breaks Soundness
  22. Bug Hunt: Zero-Knowledge, Full-Paranoia, and the AI That Stares Back
  23. Archetype x zkSecurity - Proof is in the Pudding: TEEs with Intel TDX
  24. Uncovering the Phantom Challenge Soundness Bug in Solana's ZK ElGamal Proof Program
  25. Common Circom Pitfalls and How to Dodge Them, Part 1
  26. Proofs On A Leash: Post-Quantum Lattice SNARK With Greyhound
  27. Optimizing Barrett Reduction: Tighter Bounds Eliminate Redundant Subtractions
  28. Variants of KZG: Part I, Univariate
  29. Accelerating ZK Proving with WebGPU: Techniques and Challenges
  30. Introducing clean, a formal verification DSL for ZK circuits in Lean4
  31. Auditing Self: Collaborating with Celo on Privacy and Identity Infrastructure
  32. BitVM: Unlocking Arbitrary Computation on Bitcoin Through Circuit Abstractions
  33. Projects That Shaped Modern zkVMs, Part 1
  34. Archetype x zkSecurity (Whiteboard Session) - Proof is in the Pudding: GKR and How to Prove False Statements
  35. Looking for an internship in 2025?
  36. Circle STARKs: Part II, Circles
  37. A Gentle Introduction to the MPC-in-the-Head Transformation
  38. Uncovering and Fixing an Inflation Bug in Aleo
  39. Beyond L2s Maturity: A Formal Approach to Building Secure Blockchain Rollups
  40. Introducing bugs.zksecurity.xyz a knowledge base for ZK bugs
  41. An Introduction to Interactive Theorem Provers

2024 37

  1. A Technical Dive into Jolt: The RISC-V zkVM
  2. zkVM Security: What Could Go Wrong?
  3. Improving the Security of the Jolt zkVM
  4. Unveiling the Magic Behind Starknet: A Deep Dive into New Specifications
  5. Become a Halo2 Hero: Master Zero-Knowledge Proofs with Our New Course
  6. noname 3.0: Native Hints, Standard Library, Compiler Visualizer, And More!
  7. 10 Must-Read Papers That Shaped Modern Zero-Knowledge Proofs
  8. ZNARKs: SNARKs for The Integers
  9. Stone CLI: Making Cairo programming more accessible
  10. Archetype x zkSecurity (Whiteboard Session) - Proof is in the Pudding: zkTLS
  11. WE-KZG: Encrypt to KZG.
  12. zkHack x zkSecurity (Whiteboard Session) - What is Zero-Knowledge (like, actually)?
  13. Archetype x zkSecurity (Whiteboard Session) - Proof is in the Pudding: Arithmetization
  14. A challenge on the Jolt zkVM
  15. zkSecurity took part in judging the latest zkHack Montreal
  16. Reproducing and Exploiting ZK Circuit Vulnerabilities
  17. noname 2.0: Unlocking Numeric Generics, Folding Schemes, and a Playground
  18. Exploring Leo: A Primer on Aleo Program Security
  19. Verifying Cairo proofs on Ethereum
  20. Beyond the Whitepaper: Where BFT Consensus Protocols Meet Reality
  21. Renegade Audit: When ZK meets MPC
  22. FRIDA: Data-Availability Sampling from FRI
  23. zkSecurity x Bain Capital (Whiteboard Session): Unveiling the Power of Multi-Party Computation
  24. Circle STARKs: Part I, Mersenne
  25. The State of Security Tools for ZKPs
  26. noname meets Ethereum: Integration with SnarkJS
  27. Ditch the Pump & Dump Drama: Your ZK Tech Hub Awaits
  28. A Year of ZK Security
  29. ZPrize Came To An End! Who And How Did They Win $500,000?
  30. Public report of Lighter ZK circuits
  31. Partnership with StarkWare
  32. zkBank: you think you have what it takes to work at zkSecurity?
  33. Public report of Darkfi circuits and crypto audit
  34. SoK: What don’t we know? Understanding Security Vulnerabilities in SNARKs
  35. zkBitcoin: Use Zero-Knowledge Applications (zkapps) on Bitcoin
  36. Public report of Aleo's synthesizer
  37. Public report of Aleo's consensus (Bullshark)

2023 14

  1. Public report of Sui's zkLogin audit
  2. Public report of Reclaim protocol's ChaCha20 circuit
  3. Watch what we have to say about ZK security in the Node Guardians season 2 episode 1
  4. Listen to us on the latest episode of zeroknowledge.fm
  5. zkSecurity partners with ZPrize to make you win hundreds of thousands of dollars!
  6. You like Circom but you find it confusing? Introducing Circomscribe
  7. Detecting boomerang values in zero-knowledge circuits using tag analysis
  8. Public report of auditing Penumbra's circuits
  9. The zero-knowledge attack of the year might just have happened, or how Nova got broken
  10. noname: ZK app developers should be able to see down to the constraints
  11. wasmati: You should write your WebAssembly in TypeScript
  12. Do in secret. Assert in public. Don't under-constrain your prover's witness computation in ZK programs
  13. ZK programmability adds a whole new layer to worry about
  14. Private delegated computation is here, and there will be bugs!