zkbugs: The ZK-specific vulnerability benchmark and knowledge base
==================================================================

zkbugs is zkSecurity's benchmark and knowledge base of zero-knowledge circuit vulnerabilities (139 catalogued across ZK DSLs), with reproducible cases used to score zk-skills at 66 of 70 in direct mode and 40 of 56 on full codebases. The companion site bugs.zksecurity.xyz is the public ZK bug tracker.

Maintainer: zkSecurity
Website: https://github.com/zksecurity/zkbugs
Category: Benchmarks and research
Targets: Circom, ZK DSLs, 139 catalogued vulnerabilities
Approach: Reproducible vulnerable circuits with direct and full-codebase evaluation modes; public knowledge base at bugs.zksecurity.xyz
Access: Open source
Status: Active
Strengths: Only ZK benchmark. | Two difficulty modes. | Public knowledge base.
Limits: Circom-heavy. | Known bugs may be in training data.
Firms using it: zkSecurity
Sources: https://github.com/zksecurity/zkbugs | https://bugs.zksecurity.xyz | https://blog.zksecurity.xyz/posts/zkbugs-website/

Source page: https://agentsast.com/tools/zkbugs/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13