awesome-mina-security
A curated list of Mina resources with a focus on security from Extropy.io
https://github.com/extropyio/awesome-mina-security
Last synced: 17 days ago
JSON representation
-
Resources:
- Official Docs
- Mina tutorials
- Awesome mina tools
- zkApp Cli
- OpenMina: setting up a node from the smartphone
- zkApps official examples
- Mina Playground
- Protokit
- GraphQL queries
- zkok MinaBlog
- Mina June 4 2024 hard fork announcement
- Awesome Mina ZKApps
- zkApp list from zkok
- list from Mina Foundation
- Anomix
- Zeko
- PunkPoll
- ID-Mask
- Hakata
- ZkNoid
- ZKPassport
- Snarky.bio
- PaimaStudios
- Mina Email
- Clor.io
- zk-invoices
- zkPass
- ZKON
- zeko
- Hazook
- Lumina DEX
- SocialCap
- OpenMina: setting up a node from the smartphone
- Hakata
-
Security aspects of zkApps
- Minting unlimited tokens to himself is possile for an attacker if a custom token contract does not change `access` permission from `none` to at least `proof`
- Possible race conditions when many users read/write the state concurrently
- Usage of `requireNothing()` when retrieving On-chain Values may be dangerous
- if condition is used instead of `const x = Circuit.if(new Bool(foo), a, b);`
- Onchain merkle tree root not synced with offchain merkle root
- The `reduce()` method breaks if more than the hard-coded number (default: 32) of actions are pending
- lack of access controls
Programming Languages
Categories
Sub Categories