Arman Kolozyan

Arman Kolozyan is a security research intern at the Max Planck Institute for Security and Privacy and a computer science researcher focused on applied cryptography, zero-knowledge proof security, programming languages, and program analysis. His work includes language-agnostic detection of computation-constraint inconsistencies in ZKP programs, presented in connection with IEEE S&P 2026.

Language-Agnostic Analysis Finds 15 Vulnerabilities in ZKP Projects

Arman Kolozyan of the Max Planck Institute for Security and Privacy argues that many zero-knowledge proof bugs arise from a mismatch between what a prover’s computation can produce and what a verifier’s constraints will accept. Presenting the paper “Language-Agnostic Detection of Bugs in Zero-Knowledge Proof Programs,” he describes a formal model, the Domain Consistency Model, and a static-analysis tool, CCC-Check, designed to detect those mismatches across ZKP languages. The work reports two-orders-of-magnitude speedups over SMT-based approaches on benchmarks and 15 previously unknown vulnerabilities in six ZKP projects, most of them outside the reach of existing models.

Microsoft ResearchMay 7, 202610 min read