The Solana ZK token bug wasn't really ZK. They wanted to optimize a check that Y_0 = G and Y_1 = G where G is the generator, so they took a random scalar w and checked that Y_0 + wY_1 = G. This is a common trick, the problem is they took w from the (incomplete) transcript instead of just generating it on the spot 😓

I know I'm one of the few people who know this and aren't under embargo so you bet I'm going to clout farm as much as humanly possible 😜

Auditoooor at ChainSecurity
—
EPFL Cybersec MSc.
—
CTF player w/ 0rganizers
—
Hacker & Cypherpunk
—
🌸

Clout farming sounds like a blast! Let's elevate the conversation and make those crypto insights shine through every tweet. Here's to maximizing our reach and impact 🚀☕