On November 3rd, security company ChainLight disclosed that its researchers discovered a soundness bug in the ZK circuit of the zkSync Era mainnet on September 15th, and reported it on the 19th. The bug could potentially drain all tokens passed through cross-chain bridges, allowing malicious provers to generate proofs for invalidly executed blocks, which would be accepted by the verifier smart contracts on L1. Matter Labs has deployed a fix for the issue and awarded ChainLight 50,000 USDC as a reward.
Welcome Back
Click “Sign in” to agree to Cointime’s Terms of Service and acknowledge that Cointime’s Privacy Policy applies to you.
Join CoinTime
Already have an account?
Click “page.Sign up” to agree to Cointime’s <a class="underline" href="#term-of-service">Terms of Service</a> and acknowledge that Cointime’s a class="underline" href="#privacy-policy">Privacy Policy</a> applies to you.
Sign in with email
Sign up with email
Your email
Check your inbox
Click the link we sent to to sign in.
Click the link we sent to to sign up.
ChainLight has discovered a soundness bug in the ZK circuit of the zkSync Era mainnet, and Matter Labs has deployed a fix.
-
Wechat scan to share
Recommended for you
-
Odos DAO: Phishing email attacks related to the "ODOS Loyalty Program" have appeared, reminding users to be vigilant
Odos DAO posted on X platform, stating that they have noticed phishing email attacks related to the "ODOS Loyalty Program" in the community and reminded users to be cautious. Odos DAO and ODOS will not send emails to users. All official communication is only conducted through verified Twitter accounts. Do not click on any suspicious links. -
Report: 165 security incidents have occurred in the Web3 field so far in 2024, with losses exceeding US$2.3 billion
According to a report summarizing key security trends in 2024 by Cyvers, Web3 network threats will increase sharply in 2024, resulting in losses of over 2.3 billion US dollars and a total of 165 security incidents. Although the loss amount is 40% higher than in 2023 (1.69 billion US dollars), it is still 1.42 billion US dollars lower than in 2022 (3.78 billion US dollars). It is worth noting that 1.3 billion US dollars of stolen funds were recovered this year. -
Phishing ad links impersonating Virtuals Protocol appear in Google search results
according to Scam Sniffer, there are currently phishing ads impersonating Virtuals Protocol appearing in Google search results. If users click on these links to connect their wallets and sign transactions, these fraudulent ads may steal users' assets. Users should be careful to identify and prevent theft. -
Scam Sniffer: zkPass's X account was hacked and a fake airdrop message was published
Scam Sniffer posted on X platform that zkPass's X account was hacked and false airdrop messages were released, reminding the community to be cautious. -
Australia launches task force to tighten regulation of crypto ATMs
On December 6th, Australia established a special task force to strengthen the management of encrypted ATMs. The task force aims to ensure that digital currency exchanges (DCEs) that provide cryptocurrency ATM services comply with minimum standards. This measure is intended to implement strong measures to prevent these machines from being used for fraud, deception, or criminal transactions. -
Avalon Labs: Coordinated attacks against multiple projects in the Bitcoin ecosystem discovered, legitimate platforms were mistakenly reported as phishing sites
Avalon Labs has discovered a coordinated attack against multiple projects in the Bitcoin ecosystem, where legitimate platforms are being wrongly reported as phishing sites. They have reported this inappropriate behavior to Cloudflare and are actively working with them to address and resolve these malicious claims. -
Russia sentences Hydra market founder to life in prison
Stanislav Moiseev, founder of the online black market and cryptocurrency mixing service Hydra, has been sentenced to life imprisonment by a Russian court. -
Scam Sniffer releases November phishing report: $9,380,000 stolen, 9,208 victims
Scam Sniffer released its November phishing report, which resulted in a total of $9,380,000 stolen and 9,208 victims, including: -
SlowMist publishes over 4,000 DEXX victim addresses and corresponding attacker addresses on the EVM chain
Yu Xian disclosed that SlowMist has published the addresses of more than 4000 victims and corresponding attacker addresses on the EVM (ETH/BSC/BASE) chain's DEXX. Last week, more than 8600 Solana addresses related to attackers were announced. The data comes from the official DEXX and submissions from thousands of victims. -
The claim rate of ZK airdrop tokens is 86%, and the total claim volume exceeds 3.17 billion
The latest data from Dune shows that currently 3,178,010,067 ZK tokens have been claimed in the airdrop, accounting for 86.48% of the total airdrop amount (3,675,000,000 ZK).
Daily Must-Read
-
Uniswap Labs, UNI holders could make $468M a year from new L2: DeFi Report
-
Avalanche Foundation to buy back nearly 2M AVAX sold to Terra in 2022
-
Gold Fever Hits Costco: 77% of Stores Sell Out Amid Soaring Demand for Bullion
-
$500M Bitcoin Buried in Landfill: Man Sues City After Decade-Long Battle for Recovery
-
Former BAYC creative director Jeff Nicholas joins Meta’s Reality Labs
-
Why is Solana's Dogwifhat (WIF) memecoin crashing?
All Comments