Skip to content
View auditinfra-io's full-sized avatar
😃
Open to work
😃
Open to work
1 follower · 19 following

Achievements

Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull Sharkx3Achievement: Quickdraw

Achievements

Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull Sharkx3Achievement: Quickdraw

Block or report auditinfra-io

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
auditinfra-io/README.md

Static analysis for zero-knowledge circuits and smart contracts.

Open-source tools

  • o1js-scan — finds witnesses the prover controls but the circuit never binds, in o1js / Mina zkApps and Noir circuits. A single-file lexical pass with no dependencies, on PyPI and npm. Listed in the o1js Community Packages directory.
  • gnark-safety — reports gnark hint outputs whose constraints look incomplete, and ten other patterns that often mean a circuit accepts values it should reject. Experimental, pre-1.0.
  • vk-guard — snapshots o1js verification-key hashes and per-method constraint counts into a committed file, and fails CI when they drift. On npm.

Each tool's README says where it stops. A clean result from any of them is not an audit, and a finding is a lead to review.

Audit Engine CLI

A multi-language static analysis and bounded model checking engine for smart contracts and ZK circuits. The engine is private; its architecture is documented in public in audit-engine.

Pinned Loading

  1. gnark-safety gnark-safety Public

    Static analysis for gnark zero-knowledge circuits: flags under-constrained hints and other soundness pitfalls.

    Go

  2. o1js-scan o1js-scan Public

    Dependency-free static analyzer for zk circuit soundness bugs in o1js/Mina zkApps and Noir circuits

    Python 3

  3. audit-engine audit-engine Public

    Public architecture documentation for Audit Engine CLI — a multi-language static analysis and bounded model checking engine for smart contracts and ZK circuits.

    1

  4. vk-guard vk-guard Public

    TypeScript

  5. auditinfra-io auditinfra-io Public

    Profile