---
# System prepended metadata

title: 'Bitlayer BitVM Bridge: Auditing Scope & Status'

---

# Bitlayer BitVM Bridge: Auditing Scope & Status

The security audit for the Bitlayer BitVM Bridge is comprehensive, encompassing two primary efforts: a shared audit of the core BitVM technology and a private audit of Bitlayer's custom implementation.

## 1. Shared Audit: Core BitVM Components

This collaborative audit focuses on the foundational **BitVM repository**, which contains the low-level components our bridge relies upon. A key component under review is the **Groth16 verifier** written in Bitcoin Script. This audit is being conducted under the purview of the **BitVM Alliance**, with Bitlayer contributing financially to the effort.

- **Repository:** [https://github.com/BitVM/BitVM](https://github.com/BitVM/BitVM)
- **Status:** In progress, with an expected completion by the end of August.

## 2. Private Audit: Bitlayer's Implementation

This audit is specific to Bitlayer's infrastructure and is divided into two distinct parts.

### Part One: Smart Contracts

This phase covers all on-chain logic, including the Bitcoin transaction graph and the Ethereum-based Solidity contracts that manage the bridge's operations.

- **Repositories:**
    - [https://github.com/bitlayer-org/bitvm-bridge-contracts](https://github.com/bitlayer-org/bitvm-bridge-contracts)
    - [https://github.com/bitlayer-org/bitvm-bridge](https://github.com/bitlayer-org/bitvm-bridge) (Source code to be released soon)
- **Status:** The audit has been completed. The final report is pending public release.

### Part Two: zkVM Program & Bridge Nodes

This phase examines the off-chain infrastructure. It includes the zkVM program—which defines the proofs required for reclaims—and the node software operated by attesters, brokers, and watchers. Each node contains a client designed to interface with the Bitcoin and Ethereum contracts.

- **Repository:** [https://github.com/bitlayer-org/bitvm-bridge](https://github.com/bitlayer-org/bitvm-bridge) (Source code to be released soon)
- **Status:** The audit is scheduled to begin in late August, after the shared audit is finalized.

## **Audit Status Summary**

- **Shared Audit:** In progress, wrapping up in late August.
- **Private Audit (Part One - Contracts):** Finished, report not yet released.
- **Private Audit (Part Two - Nodes):** Begins in late August.
