diff --git a/barretenberg/security/entomaxy/List of security bugs.md b/barretenberg/security/entomaxy/List of security bugs.md index 7bda67a7176c..d235675d488b 100644 --- a/barretenberg/security/entomaxy/List of security bugs.md +++ b/barretenberg/security/entomaxy/List of security bugs.md @@ -20,3 +20,4 @@ This list is a collection of bugs. Its goal is to help developers, auditors and | BarVD-012 | Account circuit | same public key can be used for multiple accounts | Soundness | Spending other person's funds | Manual code review | No | Yes | @arielgabizon | | | [Description](https://hackmd.io/@aztec-network/HJDt63w69?type=view) | | BarVD-013 | Join-split circuit | public key nullifier uses only the x coordinate of the public key | Soundness | Spending other person's funds | Manual code review | No | Yes | @arielgabizon | | | [Description](https://hackmd.io/@aztec-network/HJDt63w69?type=view) | | BarVD-014 | claim-proof circuit | incorrect implementation of integer arithemtic in field | Soundness | Draining rollup funds | Manual code review | No | No | [@lucash-dev](https://github.com/lucash-dev) | | | [Description](https://hackmd.io/@aztec-network/claim-proof-bug) | +| BarVD-015 | stdlib/logic | 3bit overflow in AND/XOR | Soundness | | acir_formal_proofs | Yes | Yes | @defkit & @Sarkoxed | | https://github.com/AztecProtocol/aztec-packages/pull/11651 | | \ No newline at end of file