Boundless: Marketplace audit report
Project Information
CATEGORY
Smart Contracts
NETWORK
Ethereum
WEBSITE
https://boundless.network/
DESCRIPTION
Between Jun. 17, 2026 and Jun. 24, 2026, Boundless engaged Veridise to conduct a security assessment of Boundless Marketplace – a decentralized proof marketplace. Veridise conducted the assessment over 1 week, with 3 security analysts contributing 3 person-weeks of review effort against commit e2bc0cc. The review strategy combined tool-assisted analysis of the source code with a thorough manual code review by Veridise security analysts. Compared to the previous version, which Veridise audited at commit f0e5fc4, the new version introduces an updated fulfillment flow that separates proof verification from request assessment and routes both through a router with pluggable verifier and assessor adapters.
Audit Report
SCOPE
The scope of this security assessment is limited to the changes made to a specific set of source files from the repository since commit e2bc0cc, as agreed upon with the Boundless Marketplace developers:
- /contracts/src/BoundlessMarket.sol
- /contracts/src/IBoundlessMarket.sol
- /contracts/src/libraries/BoundlessMarketLib.sol
- /contracts/src/router/BoundlessRouter.sol
- /contracts/src/router/adapters/OnChainAssessor.sol
- /contracts/src/router/adapters/R0BoundlessAssessorAdapter.sol
- /contracts/src/router/adapters/R0BoundlessVerifierAdapter.sol
- /contracts/src/router/interfaces/IBoundlessAssessor.sol
- /contracts/src/router/interfaces/IBoundlessJointVerifierAssessor.sol
- /contracts/src/router/interfaces/IBoundlessRouter.sol
- /contracts/src/router/interfaces/IBoundlessVerifier.sol
- /contracts/src/types/Fulfillment.sol
- /contracts/src/types/FulfillmentBatch.sol
- /contracts/src/types/Predicate.sol
- /contracts/src/types/ProofRequestBatch.sol
- /contracts/src/types/SlimRequest.sol