ZKP Frontier Tracker 🎯零知识证明 前沿热点追踪 🎯ZKP 最前線追跡🎯
Sat星期六土曜日
01.24
2026
https://eprint.iacr.org/2026/089
Coratger et al. conducted the first rigorous security analysis of the Plonky3 Merkle tree in their paper, proving its position-binding and extractability, ensuring security for ~$4B in assets despite compression function flaws.Coratger等人在论文中首次对Plonky3 Merkle树进行了严格的安全分析，证明了其位置绑定和可提取性，尽管其压缩函数存在安全缺陷，但通过预哈希等对策仍能保障约40亿美元资产的安全。Coratgerらは、の論文においてPlonky3マークルツリーの最初の厳密なセキュリティ解析を実施し、圧縮関数の欠陥にもかかわらず、その位置拘束性（position-binding）と抽出可能性（extractability）を証明することで、約40億ドル相当の資産に対するセキュリティを保証しました。
NotesNotes要点
- Widely used Plonky3 Merkle tree secures ~$4B in assets
- Its underlying 2-to-1 compression function lacks collision-resistance and one-wayness, potentially undermining security
- Common countermeasure is pre-hashing data before use as leaves
- First rigorous security analysis of this Merkle tree design, showing Plonky3 approach is sound
- Demonstrates (strong) position-binding and extractability
- Enhances confidence in Plonky3 for SNARKs and vector commitments applications