Project Information
CATEGORY
Zero-Knowledge Virtual Machines (ZK-VM)
NETWORK
Ethereum
WEBSITE
https://risczero.com/
DESCRIPTION
From Sep. 16, 2024 to Sep. 26, 2024, RISC Zero engaged Veridise to conduct a security assessment of their Steel library. The security assessment covered the Steel library which allows developers to create proofs about the state of Ethereum off-chain by using the result of queries made with the library. Veridise conducted the assessment over 24 person-days, with 3 security analysts reviewing the project over 8 days. The review strategy involved a thorough code review of the program source code performed by Veridise security analysts.
Audit Report
SCOPE
The scope of this security assessment is limited to the (risc0-ethereum/steel/src) folder of the source code provided by the Steel developers, which contains the implementation of the Steel library.