The scope of this audit is limited to the files in the o1js* and o1js-bindings repositories, focusing on the constraints defined within those files, and the methods used to encode objects to and from fields. Please review the full PDF report for a more detailed description of the audit’s scope.

Veridise auditors reviewed the reports of previous audits for o1js, inspected the provided tests, and read the o1js documentation. They then began a manual review of the code assisted by static analyzers, automated testing, and formal verification. During the audit, the Veridise auditors regularly met with the o1js developers to ask questions about the code.