03 — Auditing · Failure mode

Trusting the library's defaults

A proof system library is used outside the assumptions its API documents: parameters reused across domains, an unsafe or testing-only setup helper left in a production path, or a security parameter left at a demo value.

By MarketComp Updated 2026-09-12 v1.3 About the authors Changelog

Mitigation

Read the library's security notes and audit history; grep production paths for setup and testing helpers; pin and record the exact security parameters, and assert them at build time.

Cite this page

MarketComp (2026). Trusting the library's defaults. The ZK Field Manual (Version 1.3). MarketComp. https://zkpick.com/audit/failure-modes/trusting-the-library-s-defaults/

@misc{zkfieldmanual-trusting-the-library-s-defaults,
  title        = {Trusting the library's defaults — The ZK Field Manual},
  author       = {MarketComp},
  year         = {2026},
  version      = {1.3},
  howpublished = {\url{https://zkpick.com/audit/failure-modes/trusting-the-library-s-defaults/}},
  note         = {Accessed: YYYY-MM-DD}
}