Boundless: RISC Zero Solana Verifier audit report
Project Information
CATEGORY
Smart Contracts
NETWORK
Solana
WEBSITE
https://risczero.com/
DESCRIPTION
From Oct. 6, 2025 to Oct. 7, 2025, Boundless engaged Veridise to conduct a security assessment of the RISC Zero Solana Verifier. Veridise conducted the assessment over 4 person-days, with 2 security analysts reviewing the project over 2 days. The review strategy entailed a comprehensive manual examination of the project’s source code.
The Groth16 verifier component of this codebase was previously reviewed by Veridise. Relative to the prior version, the new codebase has been extended with a Router component for directing proof verification requests to the appropriate verifier, together with refactoring of the Verifier library.
Audit Report
SCOPE
The primary scope of this security assessment encompasses the Solana program source files implementing the ownable library and the verifier_router components of the RISC Zero Solana Verifier.
- solana-ownable/ownable/src/lib.rs
- solana-ownable/ownable-macro/src/lib.rs
- solana-verifier/programs/verifier_router/src/client.rs
- solana-verifier/programs/verifier_router/src/lib.rs
- solana-verifier/programs/verifier_router/src/estop/events.rs
- solana-verifier/programs/verifier_router/src/estop/mod.rs
- solana-verifier/programs/verifier_router/src/router/error.rs
- solana-verifier/programs/verifier_router/src/router/mod.rs
- solana-verifier/programs/verifier_router/src/state/mod.rs
Additionally, the secondary scope of this security assessment involved verifying that no functional changes had been introduced to the groth16_verifier implementation since the previous audit, which concluded at commit 6db7460. The related files are listed below.
- solana-verifier/programs/groth_16_verifier/src/client.rs
- solana-verifier/programs/groth_16_verifier/src/error.rs
- solana-verifier/programs/groth_16_verifier/src/lib.rs
- solana-verifier/programs/groth_16_verifier/src/v3_test_receipt.rs
- solana-verifier/programs/groth_16_verifier/src/vk.rs