« All posts

AI Meets Cryptography 2: Critical Bug Found in OpenVM's ZkVM

A critical soundness bug discovered in OpenVM's zkVM by zkao AI and its resolution.

In this entry, our AI auditor zkao identified a critical soundness bug in OpenVM's zkVM, allowing a malicious prover to forge pairing equality. This vulnerability has been addressed in OpenVM version 1.6.0, which all partners are believed to have upgraded to.