OpenVM / openvm

OpenVM is a performant and modular zkVM framework built for customization and extensibility. The scope of the competition covers:

• The proof system backend, built on top of plonky3 with FRI and Baby Bear.
• The ZK circuits and VM framework, including RV32IM and VM extensions for Keccak, SHA2, ECDSA, optimal Ate pairing on BN254 and BLS12-381, and bigint and modular arithmetic.
• The Rust frontend, which enables developers to use OpenVM via Rust to RV32IM compilation and supports VM extensions via intrinsics and kernels in the RV32IM format.

The OpenVM Cantina Competition and associated prize pool are presented by Axiom. Axiom will collaborate with the Cantina judges on finding scoring and adjudication.

Prize distribution and scoring

• Total Prize Pool: $100,000

• Primary Prize Pool: $95,000

• $5,000 of the prize pot is reserved for Low Severity findings. These reports are judged based on quality and reviewers are then ranked from 1st to 5th for the purpose of prize allocation.

  • 1st: $2000
  • 2nd: $1000
  • 3rd: $750
  • 4th: $750
  • 5th: $500

Early Submission Incentive

To make sure the code launch is completed on schedule, researchers are incentivized to submit High/Medium severity findings early, ie: as soon as one is found. The first valid submission will be rewarded an additional 20% reward, in comparison to its subsequent duplicates.

• The finding must identify the root cause, highest valid impact and describe the finding with all the necessary details to consider it valid.

• Please note that low quality or vague submissions or submissions that could be subject to interpretations will not be considered for the additional reward.

• The escalation process will not apply for these rewards and there will be no discussion for these rewards. The decision made by the Judges/protocol team on these rewards will be final.

• Example: If a finding has 5 duplicates.

  • Using regular each of the duplicates would get $2000 each
  • With the current incentive of 20%. The earliest valid submission gets $2307.72, and the rest of the duplicates get $1923.07 each.

• Scoring described in the competition scoring page.

• Findings Severities described in detail on our docs page.

Documentation

• Developer Book: https://book.openvm.dev/
  • Pinned version with source is available at https://github.com/openvm-org/openvm/tree/main/book
• Contributor Docs and Specs: https://github.com/openvm-org/openvm/tree/main/docs
  • Contains zkVM design and code-level guide.
• Dependencies:
  • Pinned commit of plonky3.
  • Pinned commit of halo2 and the halo2-lib and snark-verifier libraries.
  • These dependencies have been audited separately and are out of scope.

In Scope

• Repo: https://github.com/openvm-org/stark-backend
• Commit: 81b25d793c5ac2c34e5b90b1c9b724ac5e1b5e12
• Repo: https://github.com/openvm-org/openvm
• Commit: 336f1a475e5aa3513c4c5a266399f4128c119bba

The in-scope portions of each repo are specified in the scoping doc

Out of Scope

The out-of-scope portions of each repo are specified in the scoping doc

Build Instructions

• Developers can follow the instructions at the dev book: https://book.openvm.dev

Mandatory POC rule does not apply for this competition

Contact Us

For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.