Devcon Archive logo
Devcon Devconnect Forum Blog
  • Watch
  • Event
    Event: background logo
    • Devcon 7
    • Devcon 6
    • Devcon 5
    • Devcon 4
    • Devcon 3
    • Devcon 2
    • Devcon 1
    • Devcon 0
    • Devconnect ARG
  • Categories
    Categories: background logo
    • Cryptoeconomics
    • Devcon
    • Developer Experience
    • Coordination
    • Core Protocol
    • Layer 2s
    • Real World Ethereum
    • Cypherpunk & Privacy
    • Security
    • Applied Cryptography
    • Usability
  • Playlists

Suggested

Loading results..

View all

About Devcon —

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.

An intensive introduction for new Ethereum explorers, a global family reunion for those already a part of our ecosystem, and a source of energy and creativity for all.

  • Watch
  • Devcon
  • Devconnect
  • Forum
  • Blog

Get in touch

devcon@ethereum.org

Subscribe to our newsletter

Crafted with passion ❤️ at the Ethereum Foundation

© 2026 — Ethereum Foundation. All Rights Reserved.

devcon8 / training for constraining how to prevent circuit level bugs

  • YouTube
Training for Constraining: How to Prevent Circuit-Level Bugs preview
  • Details

Training for Constraining: How to Prevent Circuit-Level Bugs

Duration: NaN:NaN:NaN

Speaker: Levi Katyal Sledd, Vijay Singh

Type: Workshop

Expertise: No prior knowledge

Event: Devcon

Date: Nov 2026

Vulnerabilities from underconstrained circuits remain a live concern. At least four significant underconstrained-circuit bugs surfaced in 2026: Zcash's Orchard pool (a missing Halo2 copy constraint), OpenVM's pairing check (CVE-2026-46669), Scroll's ecPairing precompile, and three criticals in ZKsync Airbender, caught by formal verification. Unit testing is insufficient to catch underconstrained circuits, as true witnesses always pass verification. In this introductory workshop we first introduce arithmetic circuits and how they are used in modern SNARK-based systems. Then we will discuss real examples of underconstrained circuits, and what a false proof means in context. Participants will see an example of an underconstrained circuit and how to identify it by inspection. Then we'll demonstrate on an example circuit how methods of fuzzing and formal verification can find a missing constraint, and discuss how AI tools may assist in the search for circuit-level vulnerabilities.

Categories

ZKProving SystemsSecurityFormal Verification