# Bug Bounty Findings on BLS Primitives in Beacon Chain Specifications and Clients

DevFeed: [Bug Bounty Findings on BLS Primitives in Beacon Chain Specifications and Clients](<https://devfeed.tech/articles/secured-no-1-16977.md>)

Original publisher: [Read original article](<https://blog.ethereum.org/en/2021/09/09/secured-no-1>)

Author: Antonio Sanso

Published: 2021-09-09T00:00:00Z

Content type: article

Language: en

Sources: [Ethereum Foundation Blog](<https://devfeed.tech/sources/ethereum-foundation-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Bug Bounty](<https://devfeed.tech/topics/bugbounty.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Blockchain](<https://devfeed.tech/topics/blockchain.md>), [Fuzzing/Fuzz testing](<https://devfeed.tech/topics/fuzzing.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [blockchain](<https://devfeed.tech/tags/blockchain.md>), [bounty](<https://devfeed.tech/tags/bounty.md>), [bug-bounty](<https://devfeed.tech/tags/bug-bounty.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [development](<https://devfeed.tech/tags/development.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [research-development](<https://devfeed.tech/tags/research-development.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

This first post in a security series examines bug bounty submissions targeting BLS primitives used in the beacon chain and consensus layer. It discusses specification oversights, implementation mistakes, and implementation violations, including issues found through differential fuzzing. The article states that all bugs mentioned had already been fixed.

## Source excerpt

Earlier this year, we launched a bug bounty program focused on finding issues in the beacon chain specification, and/or in client implementations (Lighthouse, Nimbus, Teku, Prysm etc...). The results (and vulnerability reports) have been enlightening as have the lessons learned while patching potential issues. In this new series, we...