CVE-2021-38194

Name of the Vulnerable Software and Affected Versions: ark-r1cs-std versions 0.2.0 through 0.3.0

Description: An issue was discovered in the ark-r1cs-std crate for Rust, where it does not enforce any constraints in the FieldVar::mul by inverse method. This allows a malicious prover to produce an unsound proof that passes all verifier checks. The method was primarily used in scalar multiplication for short weierstrass::ProjectiveVar.

Recommendations: For versions 0.2.0 through 0.3.0, update to version 0.3.1 or later to resolve the issue. As a temporary workaround, consider disabling the FieldVar::mul by inverse method until a patch is available.