Project Information
CATEGORY
Smart contract
NETWORK
Ethereum
WEBSITE
https://pay.daimo.com/
DESCRIPTION
From Sep. 13, 2023 to Sep. 26, 2023, Daimo engaged Veridise to review the security of their P256Verifier project, a Solidity smart contract implementation of ECDSA signature verification for the NIST P-256 curve (also known as secp256r1). The smart contract is designed to be a drop-in replacement for the precompiled contract proposed in EIP-7212. Veridise conducted the assessment over 6 person-weeks, with 3 engineers reviewing code over 2 weeks. The security assessment was performed in the same audit as that of the Daimo project . The auditing strategy involved a tool-assisted analysis of the source code performed by Veridise engineers as well as extensive manual auditing.
Audit Report
SCOPE
The scope of this audit is limited to the P256Verifier.sol file of the source code provided by the P256Verifier developers.