ZK Bug Tracker

Open Source

0xPARC's community-maintained catalog of real ZK vulnerabilities found in the wild and in audits, organized by bug class.

About

The ZK Bug Tracker is a public repository maintained by 0xPARC that documents actual zero-knowledge security bugs: under-constrained circuits, nondeterministic circuits, frozen-heart Fiat-Shamir issues, bad trusted setups, and more, each with real-world examples and references. It is the closest thing the ZK field has to a shared vulnerability taxonomy and is standard reading for auditors scoping a ZK engagement. Because it links each bug class to concrete incidents, it doubles as a checklist when reviewing new circuits.

Categories

Audit Tooling

Chains

generic

Related Tools

Quick Info

Pricing
free
Open Source
Yes
Last validated
Jul 2026