Question 1

What was the SP1 vulnerability?

Accepted Answer

A soundness bug in SP1's native Rust verifier that let a malicious prover get a proof for an invalid execution accepted.

Question 2

Which SP1 versions are affected and which one fixes it?

Accepted Answer

Versions 6.0.0 through 6.8.0 are affected, and version 6.8.1 fixes it.

Question 3

Do SP1 users need to take any action?

Accepted Answer

Requesters on Succinct's mainnet Prover Network need no changes. Teams running a separate native Rust verifier that takes proofs from untrusted provers should upgrade to 6.8.1.

Succinct

SP1 bug exposed Succinct’s own Prover Network

One sharp brief.
Every day.

Succinct

SP1 bug exposed Succinct’s own Prover Network

One sharp brief.Every day.

One sharp brief.
Every day.