The Last Challenge Attack: Exploiting Fiat-Shamir to Attack a Plonk Verifier
OpenZeppelin · 14:48
OpenZeppelin found a soundness bug in Linea's PLONK verifier, called the "last challenge attack." The verifier computed the final Fiat-Shamir challenge u by hashing only some earlier challenges instead of the full pro...