Audit Results for the Pectra System Contracts

The safety of the Ethereum protocol is regularly being improved, and one latest effort is the exterior safety overview of the Pectra System Contracts.

The outcomes of this overview may be discovered within the audits repository, and the TL;DR is that every one found points deemed related or essential from these evaluations have been addressed.

Audit Scope and Methodology

The Pectra System Contracts embody a number of EIPs (EIP-2935, EIP-7002, and EIP-7251), and evaluations have been primarily achieved to:

Consider the contracts for potential assault vectors.Be certain that the contract logic precisely implements the supposed performance as per the EIP specs.

A multi-phase method was taken, with every audit constructing upon the findings of earlier ones:

Blackthorn AuditDedaub Audits

PlainShift AuditSigma Prime Audit

Between every overview, code enhancements have been made earlier than continuing to the subsequent spherical of audits.

Formal Verification

Along with the safety evaluations listed above, a16z performed a Formal Verification utilizing Halmos.
They used Halmos to formally confirm the useful correctness of those contracts. This particularly targeted on whether or not the bytecode aligned with the spec, slightly than evaluating the safety of the spec itself towards potential abuse or malicious use. This separation of issues permits auditors and the group to overview the spec with out worrying about low-level bytecode implementation particulars.

Subsequent Steps

The total reviews may be discovered within the Pectra System Contracts Audits repository.

A bug bounty competitors is presently operating on Cantina has rewards of as much as $2,000,000 for findings associated to Pectra.

As all the time, the safety of the Ethereum ecosystem is a collective effort. We prolong our gratitude to all of the auditors and contributors who’ve performed an essential half on this course of!