Static Analysis for Zero-Knowledge Programming Languages
summary
Static analyzers target Cairo and circum code, flagging concrete mistakes that compilers miss: Amarna (Cairo) already implements 14 detectors, a GitHub action and SARIF output and plans SSA/data‑flow to cut false positives; Circumspect (circom) uses an SSA IR, finds unused witness/constraint variables and reports the common Tornado Cash bug class where using `=` instead of `<=` lets forged proofs pass; currently 6–7 detectors exist and both tools integrate into CI or VS Code for immediate developer feedback.
AI-written summary · about
chapters (4)
- 0:00Introduction
- 1:53What are ZeroKnowledge Programming Languages
- 6:04Static Analysis for Cairo
- 11:02Static Analysis for circum
related talks
55mCode Analysis with Zero False Positives in Java
17mGnuZero: A Compiler-Based Zeroization Static Detection Tool for the Masses
19mAutomated Detection of Under-Constrained Circuits in Zero-Knowledge Proofs
15mTabby: A Synthesis-Aided Compiler for High-Performance Zero-Knowledge Proof Circuits
38mStatic Code Analysis - A Behind-the-scenes Look
47mA Root Canal Static Analysis Based Audit of Zephyr
30mLet's Build a Symbolic Analyser And Automatically Find Bugs
01h 00mAI Safety through Programming?