We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·18d ago·5 min read
AI Meets Cryptography 2: What AI Found in OpenVM's ZkVM
TL;DR
A critical soundness bug was discovered in OpenVM's zkVM by an AI auditor named zkao, which allows malicious actors to forge pairing equality. The bug, identified as CVE-2026-46669, was promptly fixed in version 1.6.0 of OpenVM.
✦ Why It Matters
Engineers should consider integrating advanced AI auditing tools like zkao to identify vulnerabilities in complex systems.
Key Takeaways
- Update OpenVM to version 1.6.0 to mitigate risks.
- Consider AI tools for auditing complex cryptographic systems.
- Understand the implications of soundness bugs in zkVMs.
- Stay informed about vulnerabilities in libraries you use.
How It Works
The AI auditor zkao utilized advanced models to analyze OpenVM's zkVM, identifying a critical bug in the pairing check. This bug arose from a failure to validate that a scaling factor was constrained to the correct subfield, allowing for forgery of pairing checks.
The AI's ability to synthesize knowledge from both implementation and academic literature enabled it to uncover this complex vulnerability.