highLogic errorEVM-Solidity
Brevis Pico ZKVM: ro[config.log_blowup] is not checked to be zero in recursive verifier
- Payout
- $0
- Protocol
- Brevis Pico ZKVM
- Disclosed
- Sep 29, 2025
- Source
- sherlock
Brevis Pico's recursive FRI verifier drops a soundness check that exists in the upstream SP1 implementation: it never asserts that ro[config.log_blowup] equals zero in the extension field. Because that check is absent, a malicious prover can construct FRI fold …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.