Genproof launches with 300+ bugs found in Linux, OpenSSL, curl — including 'formally verified' libs
prasenx · x · 2026-11-04
New research lab Genproof launched, aiming to make formal methods accessible.
- The team claims to have found 300+ bugs across 100+ OSS projects, including Linux, NASA code, OpenSSL, curl, Redis, and zstd — some hiding for over 10 years.
- Notably, the zstd bugs are in one of the 100+ libraries in Anthropic's formal verification release, showing even "formally verified" code can slip through.
- Genproof also claims the top-1 spot on the lean-eval leaderboard and published tools so anyone can become a verifier.
More from Safety
- Reminder: You're legally liable for your AI agents' actions — 'whoops' won't hold up in court — var_epsilon · 2026-11-04
- Tracking which AI tools can access sensitive data is an unsolved enterprise headache — Ian-Cubeless · 2026-11-04
- Dataset of 2k+ LLM chats with real voters released to build better decision evals — logangraham · 2026-11-04
- Reuters: OpenAI Staff Warned for Years About Security Lapses in Its Monorepo — rohanpaul_ai · 2026-11-04
- Interview: how AI is changing the economics of privacy — _ghnn_ · 2026-11-04
- David Krueger: time for a literature review of AI pause proposals — DavidSKrueger · 2026-11-04