Circuit security guides
Published by ZK Security. Operated by Savy Advisors LLC, an Arizona limited liability company, Buckeye, Arizona.
These guides are original writing for teams shipping zero-knowledge systems. They are ordered so a reader who is new to circuit bugs can start at the failure mode, then pick up a circom workflow, a proving-system comparison, the setup question, and a checklist. You can read them in any order if you already know which decision you are making.
They link out to the tool directory and the auditor directory where a guide names a specific project or firm. Those profiles are summaries. The explanation is here. Research notes on the research feed are separate: they are published only after the quality gate described in the editorial policy.
Published July 1, 2026 · ZK Security
ZK Bug Classes: Under-Constrained Circuits
Why under-constrained circuits are the dominant bug class in zero-knowledge systems, how attackers exploit them with forged proofs, and how to detect them before they ship.
Read more →Published July 1, 2026 · ZK Security
Auditing Circom Circuits: A Practical Walkthrough
A step-by-step workflow for auditing circom circuits: scoping, constraint review, tooling passes, witness fuzzing, and how to report findings that engineers can act on.
Read more →Published July 1, 2026 · ZK Security
Choosing a Proving System: Security Trade-offs
Groth16, PLONK, STARKs, and zkVMs compared through a security lens: trusted setup risk, cryptographic assumptions, tooling maturity, and who can actually audit your stack.
Read more →Published July 1, 2026 · ZK Security
Trusted Setup Ceremonies: Risks and Mitigations
What toxic waste actually is, how powers-of-tau and phase-2 ceremonies work, what history teaches about setup risk, and what integrating teams must verify before trusting someone else's parameters.
Read more →Published July 1, 2026 · ZK Security
The ZK Security Checklist for Teams
An actionable, end-to-end security checklist for teams shipping zero-knowledge systems: circuit development, tooling, setup handling, verifier integration, operations, audit readiness, and incident response.
Read more →