Skip to content
Request an audit

‹ All findings

Reusing the same rho and pubKey in different deposits leads to lost tokens

Crit/HighSingularity·Three Sigma · Private DeFi access · 26th February, 20243S-SG-C07

ReportSource

Description

The nullifier is formed from rho and the schnorr pubKey.

This means that depositing with different assets and amounts will still have the same nullifier, leading to the inability to move the following deposits with the same rho and pubKey. Check the poc here for details.

Recommendation

Either enforce the nullifier uniqueness (via unique rho and pubkey combination) or use the note as nullifier.

Status

Addressed in #8b300f0.