RUG.TOOLSTrail of Bits reports Lean string-slicing bug affecting stable releases
What was reported
Trail of Bits reported a discrepancy in Lean’s `String.Pos.Raw.extract`, where logical and compiled evaluations could diverge for extremely large positions. According to the source, the issue affected stable Lean versions through 4.33.1, with a patch in v4.34.0-rc1.
Why it matters
The discrepancy could produce false proof results by creating an inconsistency between evaluation modes. This is a software security issue, not a crypto incident affecting a supported blockchain.
Evidence and limitations
- The source discusses Lean, a formal proof system, and does not report a cryptocurrency or blockchain incident.
- No supported-chain impact or contract address is provided.
Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to Trail of Bits; they are not presented as deterministic Rug.Tools findings.
Original source
Source publication time:
Read Trail of BitsThis report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.