Issues

• common.ak: legacy curve, pairing and field code is broken (unused by the verifiers)

  bug
  ADAOcommunity/zk#20 · Filter by author SamDelaney opened on Nov 9, 2026

• PLONK: generators has n_public + 1 entries (list.range is inclusive)

  enhancement
  ADAOcommunity/zk#19 · Filter by author SamDelaney opened on Nov 9, 2026

• Bulletproofs: generate_proof_deterministic is public despite being test-only

  bug
  ADAOcommunity/zk#18 · Filter by author SamDelaney opened on Nov 9, 2026

• Bulletproofs: verify trusts the generator vectors in the key it is given

  bug
  ADAOcommunity/zk#17 · Filter by author SamDelaney opened on Nov 9, 2026

• Bulletproofs: commit_value reduces the value mod r, so out-of-range and negative amounts match a valid range proof

  bug
  ADAOcommunity/zk#16 · Filter by author SamDelaney opened on Nov 9, 2026

• g1_affine_compress ignores y except for its sign bit, so different AffineProofs decode to the same proof

  bug
  ADAOcommunity/zk#15 · Filter by author SamDelaney opened on Nov 9, 2026

• PLONK: lagrange_inverses length is not checked, so a public input can be left unconstrained

  bug
  ADAOcommunity/zk#14 · Filter by author SamDelaney opened on Nov 9, 2026

• PLONK: number of public inputs is not checked against n_public

  bug
  ADAOcommunity/zk#13 · Filter by author SamDelaney opened on Nov 9, 2026
  1

• Groth16 and PLONK: public inputs are not range-checked, so x and x + r verify with the same proof

  bug
  ADAOcommunity/zk#12 · Filter by author SamDelaney opened on Nov 9, 2026

• Groth16: verify ignores public inputs beyond the verification key

  bug
  ADAOcommunity/zk#11 · Filter by author SamDelaney opened on Nov 9, 2026