agentsastLast reviewed 2026-09-13

zkbugs

Direct answerzkbugs is zkSecurity's benchmark and knowledge base of zero-knowledge circuit vulnerabilities (139 catalogued across ZK DSLs), with reproducible cases used to score zk-skills at 66 of 70 in direct mode and 40 of 56 on full codebases. The companion site bugs.zksecurity.xyz is the public ZK bug tracker.
Maintainer
zkSecurity
Website
https://github.com/zksecurity/zkbugs
Repository
https://github.com/zksecurity/zkbugs
Category
Benchmarks and research
Targets
CircomZK DSLs139 catalogued vulnerabilities
Approach
Reproducible vulnerable circuits with direct and full-codebase evaluation modes; public knowledge base at bugs.zksecurity.xyz
Access
Open source
Status (2026-09-13)
Active

What zkbugs does

It is the only ZK-specific benchmark, and its two modes make the difficulty gap between template-level and repository-level detection visible.

Where it is strong

  • Only ZK benchmark.
  • Two difficulty modes.
  • Public knowledge base.

Limits and caveats

  • Circom-heavy.
  • Known bugs may be in training data.

When to choose it

Score any ZK tool on it and report both modes.

Who works with zkbugs

zkSecurity.

Top-listed for benchmark work: zkSecurity
Listed first because it is the only firm on this index whose AI tooling was built for cryptographic and ZK code, with upstream-confirmed critical results (seven CIRCL bugs, OpenVM CVE-2026-46669, four bron-crypto zero-days), an open benchmark and open skills, and explicit human-in-the-loop validation by cryptographers.
Read the zkSecurity profile · Website

EVMbench, ScaBench and SCONE-bench, CyberGym, BountyBench and SEC-bench, GPTScan and PropertyGPT (research).

Sources