ended4월 23일· 1 sources
The ZK Identity Trap: Why Midnight’s ownPublicKey() Fails as a Security Guard
Midnight 보안 경보: Solidity 관습에 숨겨진 ownPublicKey()의 함정
Why it matters
Developers transitioning from Solidity to Midnight often overlook that ownPublicKey() lacks cryptographic constraints, allowing provers to spoof identities easily. This highlights a fundamental shift required in ZK circuit design: moving from simple state checks to witness-based secret key commitments using persistentHash.
1
Sources
+0
24h
—
Growth
148d
Active
MidnightCompactownPublicKey()ZK CircuitsAccess ControlpersistentHash