zksecurity / zkbugs

Reproduce ZKP vulnerabilities
MIT License
42 stars 1 forks source link

Automate the exploit generation process #7

Open StefanosChaliasos opened 3 months ago

StefanosChaliasos commented 3 months ago

ie when using smt or sage to find a solution that passes some manual oracle produce the witness.json file automatically

StefanosChaliasos commented 2 months ago

In some bugs, the sage script is not that useful. We should make sage scripts to produce the malicious witness given some hints.

StefanosChaliasos commented 2 months ago

Most probably, we will be better off using CVC5 with modulo arithmetic theory.

Relevant papers: