← → Print all
03 — Auditing · Assurance guide

Audit contests

Crowdsourced review

In one paragraph

Audit contests: Crowdsourced review. Layer: Whole scope. Characteristic finds: The long tail after targeted review; findings quick to demonstrate. Blind to: Deep cryptographic soundness work, which is under-rewarded relative to its cost. Coverage claim: None; no accountable party. Cost profile: Fixed pool, pay-for-results. Choose it when: A complement after at least one targeted review and after internal tooling is clean. Weak substitute for a cryptography review of a novel proof system.

By MarketComp Updated v1.3 About the authors Changelog
Layer
Whole scope
Characteristic finds
The long tail after targeted review; findings quick to demonstrate
Blind to
Deep cryptographic soundness work, which is under-rewarded relative to its cost
Coverage claim
None; no accountable party
Cost profile
Fixed pool, pay-for-results
Assurance matrix · see the row in context

What it is

A fixed prize pool distributed among independent researchers reviewing a pinned scope over a bounded window, weighted by severity and duplicate-adjusted. Public zkVM and circuit scopes have run in this format, with pool rules varying on whether low-severity findings are paid at all.

Strengths and tradeoffs

Strengths
  • Wide reviewer diversity, uncorrelated with any single firm's blind spots
  • Pay-for-results rather than pay-for-time
  • Effective at the long tail once targeted review has covered the core
  • Public scope and public results improve transparency for integrators
Tradeoffs
  • Depth is uneven: incentives favour findings quick to demonstrate, under-rewarding deep soundness work
  • The pool who can read constraint systems is far smaller than the general Solidity pool, so real coverage can be thin despite many participants
  • Duplicate mechanics and severity floors distort effort allocation
  • Substantial triage load on the sponsoring team
  • No accountable party, no methodology statement, no coverage claim

Choose it whenA complement after at least one targeted review and after internal tooling is clean. Weak substitute for a cryptography review of a novel proof system.

Failure modes that involve it
Direct answers that mention it
Maintained implementations

Not recorded for this entry.

Maturity: Production-used for ZK scopes · License: Platform · cantina.xyz ↗

How to decide
Other assurance guides in §03
ZK security consultanciesManual circuit and constraint reviewAutomated underconstraint detectionFormal verification of ZK circuitsDifferential and fuzz testingCryptographic review of the protocol and proof systemVerifier and integration reviewBug bountiesLLM-assisted review

Sources cited on this page · 5

  1. zkSecurity — ZK security audits and cryptographic engineeringprovider
  2. zkSecurity — public audit reportsaudit reports
  3. Veridise — zero-knowledge audit servicesprovider
  4. zkEVM security overview — multiproof redundancy, testing, audits, formal verificationreference
  5. ZK audit checklist — concrete per-category audit checksreference

All 48 sources for §03 are listed on the section page →

Cite this page 
MarketComp (2026). Audit contests. The ZK Field Manual (Version 1.3). MarketComp. https://zkpick.com/audit/audit-contests/
@misc{zkfieldmanual-audit-contests,
  title        = {Audit contests — The ZK Field Manual},
  author       = {MarketComp},
  year         = {2026},
  version      = {1.3},
  howpublished = {\url{https://zkpick.com/audit/audit-contests/}},
  note         = {Accessed: YYYY-MM-DD}
}