Severity
High
Files
contract/zk_ticket_contract/src/lib.rs
Description
All ZKTicketContract methods (issue_ticket, verify_ticket, use_ticket, get_ticket) are stubs returning Err(ZKTicketError::NotImplemented). No ZK proof verification is implemented, so the contract has no security guarantees beyond being a placeholder.
Acceptance Criteria
- issue_ticket takes a proof hash + event id, stores ZKTicket, emits an event
- verify_ticket re-derives the commitment and checks against stored proof_hash
- use_ticket marks is_used once and refuses reuse
- 404 for unknown ticket_id
- Test coverage for double-spend and invalid proof path
Severity
High
Files
contract/zk_ticket_contract/src/lib.rs
Description
All ZKTicketContract methods (issue_ticket, verify_ticket, use_ticket, get_ticket) are stubs returning Err(ZKTicketError::NotImplemented). No ZK proof verification is implemented, so the contract has no security guarantees beyond being a placeholder.
Acceptance Criteria