# Bitlayer BitVM Bridge: Auditing Scope & Status The security audit for the Bitlayer BitVM Bridge is comprehensive, encompassing two primary efforts: a shared audit of the core BitVM technology and a private audit of Bitlayer's custom implementation. ## 1. Shared Audit: Core BitVM Components This collaborative audit focuses on the foundational **BitVM repository**, which contains the low-level components our bridge relies upon. A key component under review is the **Groth16 verifier** written in Bitcoin Script. This audit is being conducted under the purview of the **BitVM Alliance**, with Bitlayer contributing financially to the effort. - **Repository:** [https://github.com/BitVM/BitVM](https://github.com/BitVM/BitVM) - **Status:** In progress, with an expected completion by the end of August. ## 2. Private Audit: Bitlayer's Implementation This audit is specific to Bitlayer's infrastructure and is divided into two distinct parts. ### Part One: Smart Contracts This phase covers all on-chain logic, including the Bitcoin transaction graph and the Ethereum-based Solidity contracts that manage the bridge's operations. - **Repositories:** - [https://github.com/bitlayer-org/bitvm-bridge-contracts](https://github.com/bitlayer-org/bitvm-bridge-contracts) - [https://github.com/bitlayer-org/bitvm-bridge](https://github.com/bitlayer-org/bitvm-bridge) (Source code to be released soon) - **Status:** The audit has been completed. The final report is pending public release. ### Part Two: zkVM Program & Bridge Nodes This phase examines the off-chain infrastructure. It includes the zkVM program—which defines the proofs required for reclaims—and the node software operated by attesters, brokers, and watchers. Each node contains a client designed to interface with the Bitcoin and Ethereum contracts. - **Repository:** [https://github.com/bitlayer-org/bitvm-bridge](https://github.com/bitlayer-org/bitvm-bridge) (Source code to be released soon) - **Status:** The audit is scheduled to begin in late August, after the shared audit is finalized. ## **Audit Status Summary** - **Shared Audit:** In progress, wrapping up in late August. - **Private Audit (Part One - Contracts):** Finished, report not yet released. - **Private Audit (Part Two - Nodes):** Begins in late August.