Zero Knowledge audits

Auditing Zero Knowledge circuits and applications comes with unique challenges that Veridise is especially equipped to assess. We have detected a significant bug in all of our ZK audits. 

Traditional smart contract audits primarily focus on code correctness, vulnerability checks, and adherence to best practices, whereas ZKP audits also need to ensure the cryptographic elements function correctly without compromising privacy or security. 

As an example, in ZK audits, auditors often need to validate the construction and evaluation of zero-knowledge circuits. Often this is checking underconstrained circuits, which means the circuit does not have enough constraints to uniquely determine all the variables in the computation. Multiple solutions may allow prover to create a seemingly valid proof for an incorrect statement, which may lead to serious vulnerabilities. 

ZKP audits also often require the verification of the cryptographic primitives used, such as hash functions, commitment schemes, and elliptic curve operations, to ensure they are implemented securely and according to the specific requirements of the ZKP protocol.