Filipe Casal

Summary: Trail of Bits reviewed Axiom's blockchain system across two audits in 2023; the system computes over the entire history of Ethereum, verified by zero-knowledge proofs on-chain using ZK-verified elliptic curve and SNARK recursion operations. It is built on the Halo2 framework, which the auditors describe as a complex, emerging technology whose low-level API can produce under-constrained issues when building a secure application.
What's compelling: The auditors flag under-constrained circuits as a risk in Halo2's low-level API - a class of flaw that can let a proof verify something the developer never intended, in a system whose whole purpose is proving Ethereum's history on-chain.

Read the original at Trail of Bits Blog ↗