zkCraft (with zkFuzz): Prompt-guided LLM mutation oracle on top of the zkFuzz circuit fuzzer
================================================================================

zkFuzz is a mutation fuzzer that finds disagreements between witness generation and constraints in Circom circuits (85 bugs across 452 circuits, 59 zero-days, 39 confirmed) without any LLM. zkCraft adds a prompt-guided LLM as the oracle that proposes mutation patterns, making it the clearest example of LLM plus fuzzing for ZK.

Maintainer: Academic (Takahashi et al.)
Website: https://arxiv.org/abs/2602.00667
Category: Cryptography and ZK specialists
Targets: Circom, Noir (preliminary)
Approach: LLM proposes mutation patterns; zkFuzz's trace-constraint consistency test supplies ground truth
Access: Open source
Status: Research (zkFuzz at IEEE S&P 2026; zkCraft 2026 preprint)
Strengths: Ground truth from execution, so no hallucinated findings. | Strong published bug counts. | Open source.
Limits: Circom focus; Noir preliminary. | Cannot prove absence of bugs. | Research maintenance cadence.
Firms using it: none listed
Sources: https://arxiv.org/abs/2602.00667 | https://arxiv.org/abs/2504.11961 | https://github.com/Koukyosyumei/zkFuzz

Source page: https://agentsast.com/tools/zkcraft/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13