Skip to content
OpenAdvisories

Product · matter-labs

era-compiler-solidity

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-45056

    `fold (xor (shl 1, x), -1) -> (rotl ~1, x)` misoptimization in zksolc

    zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an unsigned 64 bits number (`2^64-1`). This number is zero-extended to 256 bits o…

    matter-labs era-compiler-solidity
  • Medium 5.3
    CVE-2024-35229

    ZKsync Era evaluation order of Yul function arguments

    ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to version 1.3.10, there is a very specific pattern `f(a(),b()); check_if_a_executed_last()` in Yul that exposes a bug in evaluation order of Yul function arguments. This …

    matter-labs era-compiler-solidity
  • Medium 5.9
    CVE-2024-34704

    era-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization

    era-compiler-solidity is the ZKsync compiler for Solidity. The problem occurred during instruction selection in the `DAGCombine` phase while visiting the XOR operation. The issue arises when attempting to fold the expression `!(x cc y)` into `(x !cc y)`. To p…

    matter-labs era-compiler-solidity