ethereum/EthLib Audit Findingsethereum/EthLib@57af539 · PR: ethereum/EthLib#55 · Raw .mdAll (14)High (4)Medium (8)Low (2)Expand allF1HighIncomplete affine formulas in millerAdd and millerDouble, and ignored P.inf in millerLoopEthLib/Cryptography/Bls/Pairing.lean+F2HighMissing input validation and out-of-bounds get! in computeVerifyCellKzgProofBatchChallengeExportEthLib/Cryptography/Kzg/Cells.lean, Kzg/Exports.lean+F3Highpartial def on Fp2.powNat, Fp12.powNat, and millerLoop blocks kernel verificationEthLib/Cryptography/Bls/Fp2.lean, Fp12.lean, Pairing.lean+F4HighProof coverage gaps and native_decide contamination of G1.uncompress_compressEthLib/Cryptography/Proofs/**+F5MediumC extern prototype mismatches in module.c and misleading @& borrow annotations in Exports.leanbindings/python/module.c, Bls/Exports.lean, Kzg/Exports.lean+F6MediumUnchecked NULL allocations and runtime C99 VLAs in CPython bindingsbindings/python/kzg.c, bls.c+F7MediumSpec version note: recoverCellsAndKzgProofs requires strictly ascending cellIndicesEthLib/Cryptography/Kzg/Recovery.lean+F8MediumDerived structural BEq on G1 and G2 compares raw Jacobian coordinates instead of projective equalityEthLib/Cryptography/Bls/G1.lean, G2.lean+F9Medium@[inline] on tower operations causes a 101,145-line (3.1 MB) C code blowup in Pairing.cEthLib/Cryptography/Bls/Fp2.lean, Fp6.lean, Fp12.lean+F10MediumZero-divisor, trailing-zero, and degree bound edge cases in Polynomials.leanEthLib/Cryptography/Kzg/Polynomials.lean+F11MediumRaw panic! in simpleSwu, unvalidated empty DST in expandMessageXmd, and .toOption.get!EthLib/Cryptography/Bls/HashToCurve.lean, Kzg/Core.lean, Cells.lean+F12Mediumsetup.py builds all ~3,350 Mathlib + Proof modules during wheel packaging, and CI skips pytestsetup.py, .github/workflows/ci.yml+F13LowRedundant double G1\mathbb{G}_1G1 decompression and redundant subgroup check in fastAggregateVerifyEthLib/Cryptography/Bls/Compress.lean, Signatures.lean, Kzg/Core.lean+F14LowMissing XMSS PublicKey and Signature byte serializersEthLib/Cryptography/Xmss/Types.lean, Proofs/Xmss/Types.lean+