According to CoinMeta, the zero-knowledge proof system sp1 under Succinct has been exposed to a high-severity reliability vulnerability that affects native Rust verifiers from versions 6.0 to 6.8.0. As a result, the mainnet Prover Network may accept invalid proofs. The vulnerability arises because the verifiers only read data tags without verifying the number of stored elements, allowing attackers to forge tags and pass invalid proofs. Succinct released a fix version 6.8.1 on September 24th, which has already been deployed on the mainnet. This vulnerability was discovered by Vitalis Salis and reported by Immunefi; users are advised to upgrade to version 6.8.1.