News Heat Trend
Project Overview
Succinct is building a decentralized prover network so that anyone can build blockchain applications and infrastructure secured by cryptographic truth, not trust. Succinct unifies the proof supply chain, providing highly available proof generation infrastructure with best-in-class pricing, for rollups, coprocessors and other applications using zero-knowledge proofs.
Consensys Cryptographers Propose Divide-and-Pair Method to Accelerate Elliptic Curve Subgroup Membership Check
This method has been integrated into the open-source library gnark-crypto. The library currently runs on Besu, Linea, go-ethereum, as well as gnark-based systems such as Succinct and Lighter. The related paper has been accepted by the IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) and will be published at CHES 2027.
Mainnet could accept invalid proofs as Succinct's SP1 discloses high-severity vulnerability
a high-severity reliability vulnerability has been disclosed in Succinct's zero-knowledge proof system SP1. The vulnerability was disclosed on October 11 via GitHub advisory GHSA-p7v2-jjv3-8p8f, affecting SP1 native Rust verifier versions 6.0.0 through 6.8.0, potentially allowing the mainnet Prover Network to accept invalid proofs: a malicious prover could submit a proof of invalid execution, and the network verifiers would still accept it. The cause of the vulnerability is that the verifier only reads the data's label (declared dimension) and does not verify whether the actual number of stored elements equals the product of the dimensions; an attacker could forge the label to make an invalid proof pass. Groth16 and Plonk checks that use fixed-shape wrap proofs are unaffected, and the on-chain Solidity verifier is also secure. Succinct released fix version 6.8.1 on September 24, which has been deployed to mainnet; this version adds deserialization length validation. The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users who run the native Rust verifier themselves and accept untrusted proofs need to upgrade to 6.8.1.
Succinct launches the iPhone app Zcam, enabling encrypted signature verification for photos and videos.
According to Cointelegraph, cryptography firm Succinct has launched Zcam, an iPhone camera app that enables real-time cryptographic signing of photos and videos upon capture, thereby verifying content authenticity and reducing risks associated with AI-generated or tampered content. The app hashes the original image data and signs it using a key generated within Apple’s Secure Enclave, then embeds the signature, capture metadata, and attestation information into the file in accordance with the C2PA standard. Succinct states that Zcam can be applied in scenarios such as journalism, insurance claims, and identity verification; however, its SDK has not yet undergone security audit and is not production-ready.
Paradigm-Backed Project Succinct Launches Anti-AI Spoofing Camera App ZCAM
Succinct Labs, backed by Paradigm, has launched the iPhone camera app ZCAM, which uses cryptographic technology to generate a "digital fingerprint" for photos and videos, addressing the risk of forgery brought by AI-generated content (AIGC).ZCAM can sign images at the moment of capture, creating an immutable record and binding the content to the capture device. This allows users to independently verify whether the footage comes from a genuine device, has been tampered with, or was generated by AI.Unlike solutions that rely on AI detection, Succinct chooses to start at the device hardware level, generating a unique cryptographic signature for each shot. The company states that existing AI detection tools are prone to failure, whereas this approach enhances the reliability of authenticity verification.Similar projects include World, which reduces risks by distinguishing between real people and AI identities.
Related news
Consensys Cryptographers Propose Divide-and-Pair Method to Accelerate Elliptic Curve Subgroup Membership Check
This method has been integrated into the open-source library gnark-crypto. The library currently runs on Besu, Linea, go-ethereum, as well as gnark-based systems such as Succinct and Lighter. The related paper has been accepted by the IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) and will be published at CHES 2027.
Mainnet could accept invalid proofs as Succinct's SP1 discloses high-severity vulnerability
a high-severity reliability vulnerability has been disclosed in Succinct's zero-knowledge proof system SP1. The vulnerability was disclosed on October 11 via GitHub advisory GHSA-p7v2-jjv3-8p8f, affecting SP1 native Rust verifier versions 6.0.0 through 6.8.0, potentially allowing the mainnet Prover Network to accept invalid proofs: a malicious prover could submit a proof of invalid execution, and the network verifiers would still accept it. The cause of the vulnerability is that the verifier only reads the data's label (declared dimension) and does not verify whether the actual number of stored elements equals the product of the dimensions; an attacker could forge the label to make an invalid proof pass. Groth16 and Plonk checks that use fixed-shape wrap proofs are unaffected, and the on-chain Solidity verifier is also secure. Succinct released fix version 6.8.1 on September 24, which has been deployed to mainnet; this version adds deserialization length validation. The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users who run the native Rust verifier themselves and accept untrusted proofs need to upgrade to 6.8.1.
Binance will remove certain trading pairs and USDP collateral for leverage on September 11.
Binance announced that Binance Margin will remove certain leveraged trading pairs and collateral on September 11, 2026, at 14:00 (UTC+8). The affected cross-margin leveraged trading pairs include API3/USDC, COOKIE/USDC, PROVE/USDC, QNT/USDC, SHELL/USDC, and TLM/USDC; the affected isolated-margin leveraged trading pairs include COOKIE/USDC, PROVE/USDC, SHELL/USDC, and TLM/USDC; USDP will be removed as collateral for cross-margin leverage and Unified Trading Accounts.
Succinct launches the iPhone app Zcam, enabling encrypted signature verification for photos and videos.
According to Cointelegraph, cryptography firm Succinct has launched Zcam, an iPhone camera app that enables real-time cryptographic signing of photos and videos upon capture, thereby verifying content authenticity and reducing risks associated with AI-generated or tampered content. The app hashes the original image data and signs it using a key generated within Apple’s Secure Enclave, then embeds the signature, capture metadata, and attestation information into the file in accordance with the C2PA standard. Succinct states that Zcam can be applied in scenarios such as journalism, insurance claims, and identity verification; however, its SDK has not yet undergone security audit and is not production-ready.
Paradigm-Backed Project Succinct Launches Anti-AI Spoofing Camera App ZCAM
Succinct Labs, backed by Paradigm, has launched the iPhone camera app ZCAM, which uses cryptographic technology to generate a "digital fingerprint" for photos and videos, addressing the risk of forgery brought by AI-generated content (AIGC).ZCAM can sign images at the moment of capture, creating an immutable record and binding the content to the capture device. This allows users to independently verify whether the footage comes from a genuine device, has been tampered with, or was generated by AI.Unlike solutions that rely on AI detection, Succinct chooses to start at the device hardware level, generating a unique cryptographic signature for each shot. The company states that existing AI detection tools are prone to failure, whereas this approach enhances the reliability of authenticity verification.Similar projects include World, which reduces risks by distinguishing between real people and AI identities.