ZKP Security Tools Detect 45.7% of Bugs in Isolation but Only 19.6% on Full Codebases

arXiv 2607.23752·medium signalXBlueskyLinkedInCopy link

A systematization of zero-knowledge-proof security tooling (arXiv 2607.23752) evaluates six tools against 70 real-world vulnerabilities and finds detection collapses from 45.7% on isolated targets to 19.6% when run on complete codebases, with important vulnerability classes left entirely unaddressed. The landscape survey shows most tooling targets Circom, leaving newer DSLs and zkVMs with limited support, and the first systematic look at formal verification efforts finds work concentrated on constraint correctness. A survey of 48 practitioners adds that development and security remain human-led, LLMs are already widely used in the workflow, and practitioners select tools by clarity of guarantees and low integration effort — a gap between what researchers build and what auditors adopt.