Daimo P256Verifier audit report

From Sep. 13, 2023 to Sep. 26, 2023, Daimo engaged Veridise to review the security of their P256Verifier project, a Solidity smart contract implementation of ECDSA signature verification for the NIST P-256 curve (also known as secp256r1). The smart contract is designed to be a drop-in replacement for the precompiled contract proposed in EIP-7212. Veridise conducted the assessment over 6 person-weeks, with 3 engineers reviewing code over 2 weeks. The security assessment was performed in the same audit as that of the Daimo project . The auditing strategy involved a tool-assisted analysis of the source code performed by Veridise engineers as well as extensive manual auditing.