Succinct / succinct-network

The Succinct Prover Network (SPN) is a decentralized marketplace for zero-knowledge proof generation and verification. The protocol connects proof requesters with a network of provers through a verifiable application (vApp) that executes its state transition function off-chain in the SP1 RISC-V zkVM, generating cryptographic proofs of correct execution that are verified on Ethereum L1 for settlement. The purpose of this competition is to audit the underlying smart contracts that power the network, including several ERC20 token implementations, staking, and governance.

Prize distribution and scoring

• Public Prize Pool: $30,000
• Additional pay for dedicated Cantina researcher: $12,500

Scoring described in the competition scoring page.

Findings Severities described in detail on our docs page.

Documentation

• Design.md

Scope

• Repository: https://github.com/succinctlabs/network
• Commit: v0.2.3 (b1fe866cd264680a8d9fe91fb3ad80a278f8e58d)
• Total LOC: 1,064
• Files:
  • SuccinctGovernor.sol
  • SuccinctStaking.sol
  • tokens/*.sol
  • libraries/ProverRegistry.sol

Build Instructions

• Build instructions can be found here

Out of scope

• Known issues:
  • Stakers can front-run the dispense transaction to earn rewards
  • Opportunities for gas optimization
• Automated Findings by LightChaser
  • https://gist.github.com/ChaseTheLight01/bc71424707a5d4aeff8287f62b825e6c

Basic POC test

• Mandatory POC rule applies for this competition

Contact Us

For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.