TITLE: [CRITICAL] Veilo Mainnet: Fatal Logic Flaw in ExtData::reduce_to_field Allows BN254 Scalar Field Overflow and ExtData Hash Collisions
AUTHOR: Julian Cross (Independent Security & Data Architect) PROGRAM ID: GYy4kM6GHhpgLCUscuABbzkD2ZbJ2fneYryaZ6Ch7fFU (privacy_pool) AFFECTED FILE: lib.rs (specifically ExtData::reduce_to_field)
- Executive Summary & Impact Assessment
During a source-level code audit of Veilo's mainnet privacy pool (lib.rs), a critical flaw was identified in the custom public input reduction function: ExtData::reduce_to_field.