Live › vulnerability › CVE-2026-62334
OpenVM's generated Halo2 Solidity verifier wrapper can be tricked into treating a crafted proof as valid when the first four proof bytes match another exposed function selector. An attacker who submits such proof data can get arbitrary app commitments and public values accepted by applications that rely on the wrapper.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 20:25 UTC. All times on this page are UTC.
Applications that use the generated OpenVM Solidity verifier wrapper to accept proofs on-chain are exposed, because the wrapper's verify function trusts a successful self-call as proof acceptance. Teams that only run OpenVM proving off-chain, or that do not use the generated Solidity wrapper, are not affected by this specific flaw.
No product ranges from the sources yet.
OpenVmHalo2Verifier contract.1.7.0 in the 1.x line and the 2.0 and 2.1 prereleases.1.7.02.0.0-rc.32.1.0-previewEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, OpenVmHalo2Verifier.verify constructs raw proof calldata from user-controlled proofData, performs a staticcall to address(this), and treats a successful call as proof acceptance. If the first four proof bytes match another external selector exposed by the wrapper, dispatch can invoke a successful non-verifier function instead of the generated Halo2 fallback verifier. Applications using the generated Solidity wrapper can consequently accept arbitrary app commitments and public values without checking the proof suffix, accumulator, app commitments or public values. This issue is fixed in versions 1.7.0, 2.0.0-rc.3 and 2.1.0-preview.
This page as .md · .json · in your agent: get_signal("CVE-2026-62334")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.