From Aug. 21, 2025 to Aug. 29, 2025, RISC Zero engaged Veridise to conduct a security assessment of their ZKC staking module. The security assessment covered their ZKC token, staking logic which allows users to stake ZKC into veZKC for voting rights and rewards. Simultaneous with this review, the analysts reviewed logic for minting rewards based on proof-of-verifiable work, which is assessed in a separate report. Veridise conducted the assessment over 2 person-weeks, with 2 security analysts reviewing the project over 1 week. The review strategy involved a tool-assisted analysis of the program source code performed by Veridise security analysts as well as thorough code review.