[Succinct's SP1 System Exposed with High-Severity Vulnerability, Potentially Allowing Invalid Proofs on Mainnet] Odaily reports that Succinct's zero-knowledge proof system, SP1, has been found to have a high-severity reliability vulnerability. Disclosed on October 11th via GitHub announcement GHSA-p7v2-jjv3-8p8f, the vulnerability affects SP1's native Rust validator versions 6.0.0 to 6.8.0, potentially causing the mainnet Prover Network to accept invalid proofs: a malicious prover could submit an invalid proof, which the network validator would still accept. The vulnerability stems from the validator only reading the data's labels (declared dimensions) and not verifying whether the actual number of stored elements equals the dimension product. An attacker could forge labels to pass an invalid proof. Groth16 and Plonk checks using fixed-shape wrap proofs are unaffected, and the on-chain Solidity checker remains secure. Succinct released a patched version 6.8.1 on September 24th, which has been deployed to the mainnet; this version adds deserialization length verification. The vulnerability was discovered by Vitalis Salis and reported through the Immunefi bug bounty program. Users who run their own native Rust validators and accept untrusted proofs need to upgrade to 6.8.1.