From Jan. 6, 2025 to Jan. 28, 2025, RISC Zero engaged Veridise to conduct a security assessment of their Kailua Protocol, which aims to create an infrastructure for optimistic rollups that resolve disputes with a zero-knowledge virtual machine (zkVM) application. The security assessment covered the smart contracts, off-chain components, and zkVM application used to implement the protocol. Veridise conducted the assessment over 9 person-weeks, with 3 security analysts reviewing the project over 3 weeks. The review strategy involved a tool-assisted analysis of the program source code performed by Veridise security analysts as well as thorough code review.