How Zero-Knowledge Broke in Real Life: Under-Constrained Circuits and the Bugs That Minted Money
Every time production zero-knowledge has publicly broken, the cryptography held. The real failures are soundness bugs in circuits, verifiers, and transcripts.