{
  "type": "question",
  "question": "What is the most common vulnerability in ZK systems?",
  "answer": "Underconstrained circuits. The great majority of exploitable findings in production ZK code are not breaks of the cryptography but circuits that accept witnesses which do not correspond to a correct execution — a missing range check, an unconstrained intermediate signal, an unchecked division, an unenforced boolean. The proof is valid; it simply proves a weaker statement than the designers intended. See Section 03.",
  "url": "https://zkpick.com/faq/what-is-the-most-common-vulnerability-in-zk-systems/",
  "markdown": "https://zkpick.com/md/faq/what-is-the-most-common-vulnerability-in-zk-systems.md",
  "section": {
    "number": "03",
    "url": "https://zkpick.com/audit/"
  },
  "updated": "2026-09-12",
  "version": "1.3",
  "canonical": "https://zkpick.com/faq/what-is-the-most-common-vulnerability-in-zk-systems/",
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "authors": [
    "MarketComp"
  ]
}