Trusted-Setup
- The ZK Math Was Fine. The Ceremony Was Never Finished.
Veil Cash and FoomCash became the first confirmed live exploits of deployed ZK cryptography in production. The flaw wasn't a broken proof -- it was a trusted setup ceremony that was never completed. FoomCash lost $2.26 million to an attacker who read a post-mortem and executed.