🆕 Brave researchers have uncovered vulnerabilities in zkLogin, a widely-deployed authorization system for blockchain transactions.
Our findings demonstrate the wider challenges facing zero-knowledge proof systems.
Our findings demonstrate the wider challenges facing zero-knowledge proof systems.
Like other zero-knowledge proof systems, zkLogin can verify that you’re a valid user without learning your identity.
However, zkLogin makes several assumptions during this authorization process that leave it open to attackers.
However, zkLogin makes several assumptions during this authorization process that leave it open to attackers.
Today's blog explains the vulnerabilities we uncovered and the lessons they offer for anyone designing privacy-preserving authorization systems: brave.com/blog/zklogin/
You can also read the full research paper here: eprint.iacr.org/2026/227
You can also read the full research paper here: eprint.iacr.org/2026/227
• • •
Missing some Tweet in this thread? You can try to
force a refresh
