• Dapps:16.23K
  • Blockchains:78
  • Active users:66.47M
  • 30d volume:$303.26B
  • 30d transactions:$879.24M
DeFi audit: ZK projects lead in the number of critical vulnerabilities

DeFi audit: ZK projects lead in the number of critical vulnerabilities

user avatar

by Elena Ryabokon

a year ago


DeFi audits of projects based on zero-disclosure proof-of-concept (ZK) technology were twice as likely to reveal critical bugs compared to other projects, according to The Block citing a Veridise report.

The company's experts analyzed 1,605 vulnerabilities identified in 100 audits. On average, they found 16 issues per audit, with ZK projects having a higher rate of 18 bugs.

In terms of critical vulnerabilities, 55% (11 out of 20) of ZK projects contained such issues, compared to 27.5% (22 out of 80) for other projects.

Experts noted that the security of ZK solutions is “just more complicated” because of the complex cryptographic designs and the innovative nature of the protocols. Veridise co-founder and CEO John Stevens explained that designing a ZK scheme requires precise reasoning about the semantics of the operations in the witness generator. When these constructs are incorrectly encoded due to constraints, errors occur.According to Stevens : “It makes sense that there are more errors in these schemas because they are very different from the typical programming paradigm”.

Overall, the most common vulnerabilities found in the audits were logic errors (385), maintainability (355) and data validation (304). These categories accounted for 65% of all issues identified.

Veridise emphasized that insufficient maintainability is not a security vulnerability in the strict sense, but poor code writing practices are “one step away from creating critical vulnerabilities.”

For the ZK protocols, a specific problem was “insufficiently bounded loops”, which had a 90% probability of causing a serious error. This occurs when arithmetic scheme constraints do not provide sufficient conditions to verify the correctness of the computation. Veridise noted that such conditions do not exist in traditional smart contracts.

This means that an attacker could create a proof that tricks the checker into accepting a false statement as true, seriously undermining the integrity of the protocol.

Recall, ForkLog talked about the development of ZK protocols in 2024 in an exclusive piece.

0

Rewards

chest
chest
chest
chest

More rewards

Discover enhanced rewards on our social media.

Other news

Algorand (ALGO) Aiming for $0.50: Current Trend Analysis

chest

Algorand (ALGO) price changes after a long decline. Current analysis indicates bullish trends and potential support levels.

user avatarGiorgi Kostiuk

Explore Potential Altcoins: BlockDAG, Chainlink, XRP, and Cardano

chest

Overview of BlockDAG, Chainlink, XRP, and Cardano, their features and relevance in the market.

user avatarGiorgi Kostiuk

WLFI Token Prepares for Trading with $16 Billion Market Valuation

chest

The WLFI token, tied to a DeFi initiative, is set to debut on exchanges with a valuation of $16 billion. Negotiations for exchange listings are ongoing.

user avatarGiorgi Kostiuk

Latest News on Pi Network, Binance Coin, and BlockDAG in the Crypto Space

chest

An overview of the current state of Pi Network, Binance Coin, and BlockDAG in the cryptocurrency market.

user avatarGiorgi Kostiuk

Crypto News: BlockDAG, Mantle, and Ethereum Show Growth

chest

BlockDAG partners with Seattle Seawolves, while price predictions for Mantle and Ethereum turn positive.

user avatarGiorgi Kostiuk

BlockDAG Launches with 7-Day Access Window, VeChain Stays Flat, Pi Coin Drifts

chest

BlockDAG offers unique early access to coins upon launch as VeChain and Pi Coin stabilize at their levels.

user avatarGiorgi Kostiuk
dapp expert logo
© 2020-2025. DappExpert. All rights reserved.
© 2020-2025. DappExpert. All rights reserved.

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.