In our previous video, we discussed Advanced Formal Verification of ZKP: Verifying a ZK Instruction. By formally verifying each zkWasm instruction, we were able to completely verify the technical security and correctness of the entire zkWasm circuit. In this video, we will focus on the bug discovery aspect, examining specific bugs encountered during the process and the lessons learned.

In December 2023, we shared an Aptos-related bug report with the Wormhole Bug Bounty Program. We were impressed at Wormhole’s quick and effective resolution of the issue. A patch resolved the issue within 3.5 hours of the initial report.

Understanding ZK verification is crucial for blockchain integrity. It’s a complex process that CertiK is pioneering to ensure that every step in a ZK VM Chain’s execution is mathematically verified to be secure and correct. What Is It? ZK instructions are like precise mathematical puzzles. Each one must fit perfectly to maintain a secure ZK Chain. If even one instruction is off, it’s akin to a missing piece that could compromise the entire system. What Does It Mean? When executing a ZK instruction, the focus is on preserving a valid state within the ZK VM. CertiK ensures each operation transitions accurately to a predetermined, secure state, affirming the system’s integrity. What Does It Take? To achieve this, we have to tackle three things: stack memory consistency, arithmetic precision, and execution flow accuracy. Each is a commitment to meticulous scrutiny, ensuring that ZK proofs stand up to the highest assurance level.