News linked to both this project and an event.
This method has been integrated into the open-source library gnark-crypto. The library currently runs on Besu, Linea, go-ethereum, as well as gnark-based systems such as Succinct and Lighter. The related paper has been accepted by the IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) and will be published at CHES 2027.
a high-severity reliability vulnerability has been disclosed in Succinct's zero-knowledge proof system SP1. The vulnerability was disclosed on October 11 via GitHub advisory GHSA-p7v2-jjv3-8p8f, affecting SP1 native Rust verifier versions 6.0.0 through 6.8.0, potentially allowing the mainnet Prover Network to accept invalid proofs: a malicious prover could submit a proof of invalid execution, and the network verifiers would still accept it. The cause of the vulnerability is that the verifier only reads the data's label (declared dimension) and does not verify whether the actual number of stored elements equals the product of the dimensions; an attacker could forge the label to make an invalid proof pass. Groth16 and Plonk checks that use fixed-shape wrap proofs are unaffected, and the on-chain Solidity verifier is also secure. Succinct released fix version 6.8.1 on September 24, which has been deployed to mainnet; this version adds deserialization length validation. The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users who run the native Rust verifier themselves and accept untrusted proofs need to upgrade to 6.8.1.
According to Cointelegraph, cryptography firm Succinct has launched Zcam, an iPhone camera app that enables real-time cryptographic signing of photos and videos upon capture, thereby verifying content authenticity and reducing risks associated with AI-generated or tampered content. The app hashes the original image data and signs it using a key generated within Apple’s Secure Enclave, then embeds the signature, capture metadata, and attestation information into the file in accordance with the C2PA standard. Succinct states that Zcam can be applied in scenarios such as journalism, insurance claims, and identity verification; however, its SDK has not yet undergone security audit and is not production-ready.
Succinct Labs, backed by Paradigm, has launched the iPhone camera app ZCAM, which uses cryptographic technology to generate a "digital fingerprint" for photos and videos, addressing the risk of forgery brought by AI-generated content (AIGC).ZCAM can sign images at the moment of capture, creating an immutable record and binding the content to the capture device. This allows users to independently verify whether the footage comes from a genuine device, has been tampered with, or was generated by AI.Unlike solutions that rely on AI detection, Succinct chooses to start at the device hardware level, generating a unique cryptographic signature for each shot. The company states that existing AI detection tools are prone to failure, whereas this approach enhances the reliability of authenticity verification.Similar projects include World, which reduces risks by distinguishing between real people and AI identities.