According to a security advisory published by Consensys on November 9, a high-risk validation bypass vulnerability was discovered in gnark, the company's zero-knowledge proof software, with a CVSS severity score of 7.5. The flaw affects versions 0.16.0 through 0.16.4 and could allow attackers to forge signature validations and blockchain computation results in certain environments. The vulnerability stems from inadequate verification of cryptographic operations in BLS12-381 and BW6-761 algorithms. Consensys has released version 0.16.5 with a fix and noted no evidence of active exploitation to date.

View Source

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.