---
title: "Trusting the library's defaults"
description: "A proof system library is used outside the assumptions its API documents: parameters reused across domains, an unsafe or testing-only setup helper left in a…"
type: "failure-mode"
url: "https://zkpick.com/audit/failure-modes/trusting-the-library-s-defaults/"
section: "03 Auditing a ZK protocol"
authors:
  - "MarketComp"
publisher: "MarketComp"
version: "1.3"
updated: "2026-09-12"
license: "CC-BY-4.0"
json: "https://zkpick.com/data/audit/failure-modes/trusting-the-library-s-defaults.json"
---

*By MarketComp. Updated 2026-09-12. Version 1.3. CC BY 4.0.*

# Trusting the library's defaults

A proof system library is used outside the assumptions its API documents: parameters reused across domains, an unsafe or testing-only setup helper left in a production path, or a security parameter left at a demo value.

**Mitigation:** Read the library's security notes and audit history; grep production paths for setup and testing helpers; pin and record the exact security parameters, and assert them at build time.