DeFi· ★★★· neutral·

EthSystems completes formal verification of its shielded pool from spec to Sepolia bytecode

  • —Verification spanned models, circuits and hashes (Lean), contracts (Halmos, Kontrol) and wallets (Aeneas, Verus)
  • —Double-spend resistance and value conservation were machine-proven in Lean
  • —Six issues were found, three of them in the verification tools
  • —Residual assumptions include hash collision resistance and verifier correctness
Why it matters: Formal verification of shielded pools reduces exploit risk in private transfers and sets an audit benchmark for privacy-focused L2 designs.
Source: PANews