What is a zero-knowledge proof audit?
A zero-knowledge proof audit (zkp audit)secures every layer of your protocol:
Protocol soundness – assumptions and threat model
Circuit correctness – constraint validation for reliable proofs
Privacy – no sensitive data leaks through inputs/outputs
Verifier integration – calldata, parameter pinning, off-chain consistency
Operational safety – key management, ceremonies, upgrades
Where a smart contract audit validates state, a zk audit validates computations and how they’re enforced.
Ecosystem & language expertise
Nethermind is embedded in the leading zk ecosystems - combining cryptographic research with production-level auditing.
Noir zk audits
As an Aztec partner, we align with Barretenberg flows. Reviews cover types, gadgets, Nargo/NoirJS workflows, and production constraints.
Starknet audits
A recognized provider, with work on Starkgate, AVNU, Ekubo. We target Sierra→CASM correctness, Poseidon usage, account abstraction, and L1↔L2 messaging.
zkSync audits and verification
We formally verified the zkSync verifier (EasyCrypt) and serve on the zkSync Security Council, aiming to provide unmatched assurance.
Scroll audits
Focus on EVM-equivalence, RLP/ABI decoders, ROM vs EVM mismatches, and hash gadget constraints to prevent spoofed encodings.
Audit coverage across the zk stack
Few firms cover as much of the zk stack as Nethermind Security:
zkVMs – RISC Zero, SP1
zk DSLs – Noir, Circom, Cairo, O1.js
Smart contracts – Solidity (EVM), Soroban
Supporting languages – Rust, TypeScript, Python
This breadth means we don’t just secure circuits - we validate the entire path from computation to proof verification.
.svg){kind=icon}
.svg)
.svg)
.svg)
.svg)
.svg)
.svg){kind=icon}
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg){kind=icon}
.svg)
.png)
.png)
