matter-labs — Vulnerabilities & Security Advisories 6

Matter-labs develops zkSync, a Layer 2 scaling solution for Ethereum using zero-knowledge rollups. Historically, their systems have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, as evidenced by their six recorded CVEs. The platform's security architecture relies on complex cryptographic proofs and smart contracts, introducing unique attack surfaces. While no major public security incidents have been documented, the presence of multiple high-severity CVEs suggests ongoing challenges in securing their zkEVM implementation and associated infrastructure.