matter-labs

Products

ProductCVEsExploitedLatest
era-compiler-solidity3–Aug 29, 2024
era-compiler-vyper3–Aug 15, 2024

Exploited and recent CVEs

  • CVE-2024-45056 Medium 5.9 `fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc 0.4%
  • CVE-2024-43366 High 7.5 zkvyper ignored loop range bounds 0.5%
  • CVE-2024-38533 Medium 6.5 ZKsync Era invalid stack addressing conversion 0.3%
  • CVE-2024-35229 Medium 5.3 ZKsync Era evaluation order of Yul function arguments 0.4%
  • CVE-2024-34704 Medium 5.9 era-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization 0.5%
  • CVE-2023-46232 Medium 5.3 era-compiler-vyper First Immutable Variable Initialization vulnerability 0.7%