Reports covering the Groth16 implementation, browser WASM proving and related contracts and programs across Base, Solana and DogeOS.
Groth16Browser WASMEVM + Solana
Atomic deposit merging
7 October 2026
DepositMergeV1 circuit, same-owner replacement notes, EVM contracts, Solana program, browser proving, encrypted recovery and relayer indexing.
Findings: One high and one medium finding: interrupted preparation could reserve notes indefinitely, and merged-note nullifiers were missing from the EVM recovery index.
Follow-up: 2 of 2 findings remediated in source. Verified 12 October; per-finding evidence and deployment limits appear in the report.
Scope limit: Native-runtime Solana tests did not qualify compiled SBF. Production keys, physical-device WASM performance and target deployments were outside the completed evidence. The DogeOS-domain proof test was not a live DogeOS deployment audit.
SolanaGroth16Browser wallet
Solana program & wallet integration
1 October 2026
Pool instructions, proof/public-input binding, SDK encoding, relayer signing and fees, note durability, submission and recovery.
Findings: Three high and two medium findings covering durable note delivery, recovery deadlocks, journal exhaustion and ambiguous transaction retries.
Follow-up: 5 of 5 findings remediated in source. Verified 12 October against current source and targeted regressions.
Scope limit: Source and controlled-fault testing on the devnet integration. No deployed-bytecode attestation, production ceremony, funded settlement or historical archival-recovery drill is established by this review.
DogeOS ChikyuEVM / Groth16Browser wallet
DogeOS contracts & wallet integration
1 October 2026
Chikyu JoinSplit V2 contract source/tests, wallet key derivation, private sends, recovery, fees and durable relayer submission journals. Native Dogecoin UTXO transfers are outside scope.
Findings: One high conditional key-recovery finding and one medium reorg/reconciliation finding.
Follow-up: D2 remediated in source. D1 reopened: later wallet-setup changes removed independent key recovery. See the current-status addendum.
Scope limit: No live MyDoge device qualification, deployed-bytecode verification or funded Chikyu transfer was performed. Later MuchFi swaps, atomic-merge rollout and wallet-setup changes are not covered by this 1 October review.
Base / EVMGroth16Browser WASM
Groth16 core, WASM & Base contracts
10 September 2026
Flat JoinSplit V2 circuit, deposit constraints, verifier/router, pool and adapter contracts, SDK, WASM loading and runtime boundaries, wallet recovery, relayer and production release gates.
Findings: The correctness pass found one high and two medium issues; the follow-up adversarial pass found two high and five medium issues. Full findings and source fixes are linked below.
Follow-up: 10 of 10 findings remediated in source across the two passes. Current status, fix commits and remaining qualification limits are listed per finding.
Scope limit: The generated WASM packages were smoke-tested, not independently rebuilt and attested. Live Base forks, funded transactions and production ceremony/runtime verification were not established. Subsequent features require their own review.
Superseded Nova-era contract audits and older penetration/stress reports are excluded from this current-architecture index.