{
  "slug": "zkbugs",
  "name": "zkbugs",
  "tagline": "The ZK-specific vulnerability benchmark and knowledge base",
  "maintainer": "zkSecurity",
  "url": "https://github.com/zksecurity/zkbugs",
  "repo": "https://github.com/zksecurity/zkbugs",
  "category": "benchmarks",
  "targets": [
    "Circom",
    "ZK DSLs",
    "139 catalogued vulnerabilities"
  ],
  "approach": "Reproducible vulnerable circuits with direct and full-codebase evaluation modes; public knowledge base at bugs.zksecurity.xyz",
  "license": "Open source",
  "status": "Active",
  "summary": "zkbugs is zkSecurity's benchmark and knowledge base of zero-knowledge circuit vulnerabilities (139 catalogued across ZK DSLs), with reproducible cases used to score zk-skills at 66 of 70 in direct mode and 40 of 56 on full codebases. The companion site bugs.zksecurity.xyz is the public ZK bug tracker.",
  "details": [
    "It is the only ZK-specific benchmark, and its two modes make the difficulty gap between template-level and repository-level detection visible."
  ],
  "strengths": [
    "Only ZK benchmark.",
    "Two difficulty modes.",
    "Public knowledge base."
  ],
  "limits": [
    "Circom-heavy.",
    "Known bugs may be in training data."
  ],
  "fit": [
    "Score any ZK tool on it and report both modes."
  ],
  "references": [
    [
      "zkbugs repository",
      "https://github.com/zksecurity/zkbugs"
    ],
    [
      "ZK Bug Tracker",
      "https://bugs.zksecurity.xyz"
    ],
    [
      "zkbugs website post",
      "https://blog.zksecurity.xyz/posts/zkbugs-website/"
    ]
  ],
  "category_name": "Benchmarks and research",
  "page": "https://agentsast.com/tools/zkbugs/",
  "updated": "2026-09-13"
}