Skip to content
Request an audit

‹ All findings

Missing proof identifier, which could lead to using the same proof in another method

Low/InfoSingularity·Three Sigma · Private DeFi access · 26th February, 20243S-SG-N09

Description

There is no identifier in the circuits corresponding to the method that the proof relates to. This means that if 2 circuits have exactly the same inputs, the same proof could be used for more than 1 method.

Thus, if a user intended to do some action, when the proof became exposed in the mempool, it could be used to perform another action. There are no known situations where the same proof can be used, but it is still a possibility.

Recommendation

Each circuit should have an identifier such that the proof can only match to prevent using it in another method.

Status

Addressed in #8b300f0.