ChainLight receives $50,000 bounty for disclosing ZK-circuits vulnerability on zkSync Era

Blockchain security agency ChainLight issued a document stating that researchers discovered a sound security vulnerability in ZK-circuits of the zkSync Era main network on September 15 and reported the vulnerability immediately. The vulnerability allows a malicious prover to generate "proofs" for invalidly executed blocks that would be accepted by the validator smart contract on L1. zkSync developer Matter Labs has now deployed a fix and is offering ChainLight a bounty of 50,000 USDC, the first bounty for a ZK-circuits vulnerability on the zkSync Era.