Succinct's SP1 software has been found to have a high-severity vulnerability; a patch has been released by the company.

Succinct's zero-knowledge proof system, SP1, has been found to have a high-severity vulnerability affecting versions 6.0.0 to 6.8.0 of the native Rust validator, potentially causing the mainnet Prover Network to accept invalid proofs. The vulnerability was discovered by Vitalis Salis, and Succinct released a patch, version 6.8.1, on September 24th and deployed it to the mainnet. Users who run their own native Rust validators and accept untrusted proofs need to upgrade to version 6.8.1.