# zkSecurity Audit Reports

> Published security audit reports by ZK Security. Comprehensive security assessments of zero-knowledge proof systems, cryptographic protocols, and blockchain infrastructure.

[ZK Security](https://www.zksecurity.xyz/) provides security audits, research, and development services for **zero-knowledge proofs** (ZKPs), **multi-party computation** (MPC), **fully homomorphic encryption** (FHE), **post-quantum cryptography** (PQC), and advanced cryptography more broadly.

- [ZK Security website](https://www.zksecurity.xyz/): Security audits and services
- [ZK/SEC Quarterly blog](https://blog.zksecurity.xyz/): Technical blog on ZK proofs, cryptographic protocols, and security
- [ZK bugs knowledge base](https://bugs.zksecurity.xyz/): Database of known ZK circuit vulnerabilities

## Audit Reports

- [Audit of onlyswaps and dcipher (BLS signatures)](https://reports.zksecurity.xyz/reports/randa-mu-onlyswaps.md) (BLS, BLS12-381, Threshold Signatures, Shamir Secret Sharing, Hash-to-curve, Solidity): September 19th, 2025
- [Generalized Bulletproofs](https://reports.zksecurity.xyz/reports/generalized-bulletproofs.md) (Bulletproofs, Zero-Knowledge Proofs, R1CS): June 1st, 2026
- [Audit of HumanityLink's Aid Distribution System](https://reports.zksecurity.xyz/reports/humanitylink-1.md) (Aleo, Leo, zkao, JavaScript, Smart Contracts, Backend, Private Transfers): June 22nd, 2026
- [Audit of Zeko's circuits, sequencer and DA layer](https://reports.zksecurity.xyz/reports/zeko-2.md) (Pickles, Kimchi, Recursive Proofs, Threshold Signatures, Merkle Trees, Mina, OCaml, zkApp): June 3rd, 2026
- [Aleo Dynamic Dispatch](https://reports.zksecurity.xyz/reports/aleo-dynamic-dispatch.md) (Poseidon, Schnorr, Merkle Trees, Aleo): November 19th, 2025
- [SnarkVM ECDSA and Serialization Instructions](https://reports.zksecurity.xyz/reports/aleo-ecdsa-bytes.md) (ECDSA, secp256k1, Keccak, SHA-3, Schnorr, Aleo): October 6th, 2025
- [Audit of Aptos Confidential Assets](https://reports.zksecurity.xyz/reports/aptos-confidential-assets.md) (Twisted ElGamal, Bulletproofs, Sigma Protocols, Schnorr, Pedersen, ristretto255, Fiat-Shamir, SHA-512, Aptos, Move, Confidential Transfers): March 26th, 2026
- [Audit of Mina's Decentralised Treasury](https://reports.zksecurity.xyz/reports/mina-treasury-1.md) (Poseidon, Merkle Trees, o1js, Mina): April 28th, 2026
- [Audit of the Stwo-Cairo Verifier](https://reports.zksecurity.xyz/reports/starkware-stwo-cairo.md) (Circle STARK, STARK, FRI, Cairo AIR, LogUp, M31, Fiat-Shamir, Merkle Trees, Cairo): August 6th, 2025
- [Audit of Aptos Encrypted Mempool](https://reports.zksecurity.xyz/reports/aptos-encrypted-mempool.md) (Witness Encryption, Threshold Encryption, IBE, DKG, BLS, KZG, Sigma Protocols, Fiat-Shamir, Trusted Setup, Aptos, Encrypted Mempool): March 13th, 2026
- [Audit of INTMAX's zERC20](https://reports.zksecurity.xyz/reports/intmax-zerc20-1.md) (Nova, Groth16, Poseidon, BN254, SHA-256, Merkle Trees, Circuits, Solidity, Private Transfers): December 8th, 2025
- [Audit of Aleo Multisig Wallet and its usage in Compliant Stablecoin and Bridges](https://reports.zksecurity.xyz/reports/sealance-aleo-multisig-1.md) (ECDSA, Threshold Signatures, Shamir Secret Sharing, BHP256, Merkle Trees, Multisig, Aleo, Wallet): December 1st, 2025
- [Audit of Lighter's Spot Market Circuits and Multi-Asset Support](https://reports.zksecurity.xyz/reports/zklighter-spot-market.md) (Plonky2, Poseidon, Goldilocks, Merkle Trees, Circuits, Rollup, Exchange): November 24th, 2025
- [Audit of Hyperlane's Aleo Integration](https://reports.zksecurity.xyz/reports/hyperlane-aleo-1.md) (ECDSA, Keccak, BHP256, Merkle Trees, Aleo, Cross-chain): November 17th, 2025
- [Audit of Lighter's Exit Hatch](https://reports.zksecurity.xyz/reports/zklighter-desertexit.md) (Plonky2, PLONK, BN254, Poseidon, Goldilocks, KZG, BLS12-381, Merkle Trees, gnark, Circuits, Rollup, Exchange): November 5th, 2025
- [Audit of Celestia's RSEMA1D Codec](https://reports.zksecurity.xyz/reports/celestia-1.md) (Reed-Solomon, Data Availability, ZODA, Go): October 20th, 2025
- [Audit of Tongo](https://reports.zksecurity.xyz/reports/tongo.md) (Sigma Protocols, Zether, Homomorphic Encryption, Cairo, Starknet, Confidential Token): October 13th, 2025
- [Audit of Lighter's Wrapper Circuits](https://reports.zksecurity.xyz/reports/zklighter-wrapper.md) (Plonky2, PLONK, BN254, Poseidon, Goldilocks, KZG, BLS12-381, gnark, Circuits): October 10th, 2025
- [Solana Confidential Transfers](https://reports.zksecurity.xyz/reports/anza-solana-token2022.md) (Twisted ElGamal, ElGamal, Bulletproofs, Sigma Protocols, Fiat-Shamir, Zether, Solana): September 16th, 2025
- [Audit of PeerDAS KZG libraries](https://reports.zksecurity.xyz/reports/ef-blst-kzg.md) (BLS, BLS12-381, KZG, Data Availability, Pippenger): September 9th, 2025
- [Audit of Self: Aadhaar Circuits](https://reports.zksecurity.xyz/reports/self-aadhaar-circuits.md) (RSA, SHA-256, Poseidon, Merkle Trees, Sparse Merkle Trees, Circom, Aadhaar, Passport): September 9th, 2025
- [Audit of Lighter's Block and Delta Layers](https://reports.zksecurity.xyz/reports/lighter-3.md) (Plonky2, Merkle Trees, Circuits): September 8th, 2025
- [Audit of Venture23 Aleo Oracle](https://reports.zksecurity.xyz/reports/venture23-oracle.md) (ECDSA, Schnorr, TEE, SGX, Aleo, Oracle): August 11th, 2025
- [Audit of Lighter's Block Circuits](https://reports.zksecurity.xyz/reports/zklighter-block.md) (Plonky2, BN254, Poseidon, Goldilocks, Merkle Trees, Circuits, Rollup, Exchange): August 4th, 2025
- [Audit of Self EU ID cards Circuits, OFAC Checks, and Smart Contracts](https://reports.zksecurity.xyz/reports/celo-self-audit-2.md) (Groth16, RSA, RSA-PSS, ECDSA, Poseidon, SHA-256, Sparse Merkle Trees, Circom, Solidity, Passport): June 17th, 2025
- [Audit of Aleo Upgradability Update](https://reports.zksecurity.xyz/reports/aleo-upgradability.md) (Schnorr, Aleo, Upgradability): June 14th, 2025
- [Audit of dstack](https://reports.zksecurity.xyz/reports/phala-dstack.md) (TEE, TDX, Remote Attestation, RA-TLS, dstack): May 26th, 2025
- [Audit of Zeko's circuits](https://reports.zksecurity.xyz/reports/zeko.md) (Pickles, Kimchi, Recursive Proofs, Merkle Trees, SHA-256, Mina, OCaml, zkApp): May 21, 2025
- [Audit of Renegade's Solidity Contracts and Malleable Matches](https://reports.zksecurity.xyz/reports/renegade-3.md) (PLONK, Poseidon, ElGamal, ECDSA, Merkle Trees, MPC, Circuits, Smart Contracts, Dark Pool): May 7th, 2025
- [Audit of the Rust p256 Crate](https://reports.zksecurity.xyz/reports/near-p256.md) (ECDSA, P-256, Field Arithmetic, Rust): April 7th, 2025
- [Audit of RiscZero Helios](https://reports.zksecurity.xyz/reports/risc0-helios.md) (Groth16, BLS, SHA-256, Merkle Trees, zkVM, RISC-V, RISC0, Helios): April 2, 2025
- [Audit of Aleph Zero Shielder](https://reports.zksecurity.xyz/reports/aleph-zero-shielder.md) (Halo2, Poseidon, BN254, Merkle Trees, Shielded Pool, Solidity, TypeScript): March 25th, 2025
- [Audit of Risc0 Solana Programs: Verifier/Ownable/Router](https://reports.zksecurity.xyz/reports/risc0-solana-contracts.md) (Groth16, BN254, Pairings, RISC0, Solana): March 20, 2025
- [Aztec TGE Contract Audit](https://reports.zksecurity.xyz/reports/aztec-tge.md) (Solidity, EVM, TGE, Aztec): February 24th, 2025
- [Audit of Self](https://reports.zksecurity.xyz/reports/celo-self-audit.md) (Groth16, RSA, RSA-PSS, ECDSA, P-256, SHA-256, SHA-1, Poseidon, Merkle Trees, Bigint, TEE, AWS Nitro, Circom, Solidity, Passport): January 22nd, 2025
- [Audit of Demox Labs - Token Disbursement Program](https://reports.zksecurity.xyz/reports/demox-token-disbursement.md) (Aleo, Vault): December 2, 2024
- [Audit of Renegade's Atomic Settlement Feature](https://reports.zksecurity.xyz/reports/renegade-atomic-settlement.md) (PLONK, Poseidon, ElGamal, ECDSA, Merkle Trees, MPC, Circuits, Smart Contracts, Dark Pool): October 21, 2024
- [Audit of Herodotus' Integrity - A Cairo Verifier compatible with Starknet written in Cairo 1](https://reports.zksecurity.xyz/reports/starknet-integrity.md) (STARK, FRI, Cairo AIR, Fiat-Shamir, Keccak, Blake2s, Merkle Trees, Cairo): September 23rd, 2024
- [Audit of Hinkal Protocol Smart Contracts and Circom Circuits](https://reports.zksecurity.xyz/reports/hinkal-audit.md) (Poseidon, Merkle Trees, Circom, Smart Contracts): September 6th, 2024
- [Audit of Demox Labs - Aleo Standard Programs](https://reports.zksecurity.xyz/reports/demox-aleo-standard-programs.md) (Aleo, Staking, Token): July 22, 2024
- [Audit of Zorp - Schnorr signatures over the Cheetah curve and Tip5 hash function](https://reports.zksecurity.xyz/reports/zorp-crypto.md) (Schnorr, Tip5, Goldilocks, Cheetah, Hoon, zorp): July 18, 2024
- [Audit of Aztec Foreign Field Arithmetic (Bigfield)](https://reports.zksecurity.xyz/reports/aztec-bigfield.md) (BN254, secp256k1, ECDSA, PLONK, Field Arithmetic, Aztec): July 1st, 2024
- [Audit of Linea Wizard's crypto/ & math/](https://reports.zksecurity.xyz/reports/consensys-wizard-crypto-math.md) (RingSIS, Vortex, BLS12-377, Keccak, MiMC, zkEVM, zkVM): June 17th, 2024
- [Audit of Aleo ARC-0041](https://reports.zksecurity.xyz/reports/aleo-arc41.md) (Schnorr, Aleo, Circuits): June 10th, 2024
- [Audit of zk-email](https://reports.zksecurity.xyz/reports/zkemail.md) (SHA-256, Keccak, Circom, zkRegex, zkEmail, Circuits): May 27, 2024
- [Audit of Linea's gnark std](https://reports.zksecurity.xyz/reports/consensys-gnark-std.md) (PLONK, KZG, Fiat-Shamir, Field Arithmetic, gnark, Circuits): May 20th, 2024
- [Audit of Matter Labs' Era Consensus](https://reports.zksecurity.xyz/reports/era-consensus.md) (BLS, BN254, Consensus, BFT): April 22, 2024
- [Audit of Aleo Puzzle](https://reports.zksecurity.xyz/reports/aleo-puzzle.md) (ChaCha20, SHA-2, Merkle Trees, Consensus, Aleo): April 8th, 2024
- [Audit of Aleo ARC-0037](https://reports.zksecurity.xyz/reports/aleo-arc37.md) (Schnorr, Aleo, Circuits): March 18th, 2024
- [Audit of Renegade's Circuits and Smart Contracts](https://reports.zksecurity.xyz/reports/renegade.md) (PLONK, Poseidon, ElGamal, ECDSA, Merkle Trees, MPC, Circuits, Smart Contracts, Dark Pool): February 26, 2024
- [Audit of Darkfi contracts](https://reports.zksecurity.xyz/reports/darkfi.md) (Halo2, Pallas/Vesta, Schnorr, Pedersen, Poseidon, ElGamal, ECVRF, Sparse Merkle Trees, Circuits, Proof Composition): February 19th, 2024
- [Audit of Lighter's zkLighter Circuits](https://reports.zksecurity.xyz/reports/zklighter.md) (MiMC, Merkle Trees, gnark, Circuits): January 22nd, 2024
- [Audit of Aleo's consensus](https://reports.zksecurity.xyz/reports/aleo-consensus.md) (Consensus, BFT, Aleo): October 30th, 2023
- [Audit of Silent Protocol Circuits](https://reports.zksecurity.xyz/reports/silent2.md) (Groth16, Baby Jubjub, ElGamal, Poseidon, MiMC, Shamir Secret Sharing, Threshold Encryption, Zether, Circom, Smart Contracts): October 13th, 2023
- [Audit of Aleo's synthesizer](https://reports.zksecurity.xyz/reports/aleo-synthesizer.md) (Varuna, Poseidon, Pedersen, Fiat-Shamir, Schnorr, Merkle Trees, Aleo, Proof Composition, Circuit Synthesizer): October 2nd, 2023
- [Audit of Reclaim Protocol's ChaCha20 Circuit](https://reports.zksecurity.xyz/reports/reclaim.md) (Groth16, ChaCha20, Circom, Circuits, TLS): September 23rd, 2023
- [Audit of Mysten Labs' zkLogin circuits and ceremony](https://reports.zksecurity.xyz/reports/mysten-labs-zklogin.md) (Groth16, BN254, RSA, SHA-256, Trusted Setup, Circom, snarkjs, zkLogin): September 11th, 2023
- [Audit of Penumbra's Circuits](https://reports.zksecurity.xyz/reports/penumbra.md) (Groth16, BLS12-377, Decaf377, Poseidon, Pedersen, Merkle Trees, arkworks, Circuits, Shielded Pool): July 28th, 2023
- [Audit of Silent Protocol Smart Contracts](https://reports.zksecurity.xyz/reports/silent.md) (Groth16, BLS, Baby Jubjub, ElGamal, Poseidon, MiMC, DKG, Threshold Encryption, Zether, Smart Contracts): July 7th, 2023

## Optional

- [ZK Security on X](https://x.com/zaborski_): Follow for research updates
- [ZK Security on GitHub](https://github.com/zksecurity): Open-source tools and resources