VeriScript - On-chain source code verification

[Proposal setup] Proposal title

Please provide your proposal title

VeriScript - On-chain source code verification

[Proposal Summary] Budget Information

Enter the amount of funding you are requesting in ADA

77760

[Proposal Summary] Time

Please specify how many months you expect your project to last

4

[Proposal Summary] Translation Information

Please indicate if your proposal has been auto-translated

No

Original Language

en

[Proposal Summary] Problem Statement

What is the problem you want to solve?

On the Cardano blockchain, a significant challenge is the lack of a standardized solution for verifying that a given address corresponds to the specific smart contract code.

[Proposal Summary] Supporting Documentation

Supporting links

• https://github.com/Drop-Table-Users/hackaton

[Proposal Summary] Project Dependencies

Does your project have any dependencies on other organizations, technical or otherwise?

No

Describe any dependencies or write 'No dependencies'

No dependencies

[Proposal Summary] Project Open Source

Will your project's outputs be fully open source?

Yes

License and Additional Information

The source code will be released under the MIT license.

[Theme Selection] Theme

Please choose the most relevant theme and tag related to the outcomes of your proposal.

Audit

[Campaign Category] Category Questions

Describe what makes your idea innovative compared to what has been previously funded (whether by you or others).

VeriScript introduces a trustless, on-chain smart contract verification framework for Cardano - a capability that does not currently exist in the ecosystem. While other blockchains like Ethereum have widely used verification tools (e.g., Etherscan's verified contracts), Cardano lacks an integrated, decentralized mechanism to cryptographically prove that source code matches the deployed bytecode and address.

Describe what your prototype or MVP will demonstrate, and where it can be accessed.

• End-to-end verification flow: from submitting source code to generating a verified on-chain attestation linking it to a specific Cardano address/script hash.
• Reputation and dispute system: verifiers can earn reputation through correct attestations, while others can challenge incorrect claims via counter-attestations.
• User-friendly verification interface: an app where users can paste a contract address and see if it’s verified, by whom, and with what reputation score.

It will be publicly accessible via the deployed VeriScript website (domain to be announced)

Describe realistic measures of success, ideally with on-chain metrics.

• Verified contracts: 50-100 smart contracts publicly verified via VeriScript attestations
• Active verifiers: 10-20 unique verifier addresses producing attestations
• Unique visitors: 100 users checking the smart contract reputation score

[Your Project and Solution] Solution

Please describe your proposed solution and how it addresses the problem

The VeriScript project on Cardano, initiated by Adam Valach and Mark Petruska at the NMKR 2025 Berlin Hackathon, aims to address the critical challenge of verifying that a Cardano address corresponds to the smart contract code a developer claims it represents. For a regular, non-technical user, compiling a Cadrano smart contract and verifying its on-chain bytecode is extremely difficult. In contrast, Ethereum makes this process more accessible - smart contract source code is often available on explorers like Etherscan, allowing users to inspect the code and confirm that it matches what’s deployed. Cardano currently lacks this.

By developing a reputation-based system, VeriScript introduces a decentralized mechanism where trusted "code verifiers" can create on-chain attestation UTxOs to confirm that a given source code compiles to the specified bytecode and matches the associated address or script hash. These attestations, cryptographically signed and stored on the Cardano blockchain, allow users and wallets to independently verify the integrity of smart contracts, fostering transparency and trust in the ecosystem. The system leverages Cardano’s Extended UTxO model to ensure deterministic and auditable attestations, enabling secure validation without reliance on centralized intermediaries, thus reducing the risk of deploying or interacting with misrepresented or malicious contracts.

To enhance the robustness of the verification process, VeriScript incorporates a reputation system with incentives for code verifiers to maintain accuracy and honesty, alongside a mechanism for counter-attestations to challenge incorrect claims. Verifiers earn reputation through consistent and accurate attestations, potentially receiving rewards in ADA or native tokens, incentivizing diligent participation. Conversely, any verifier or community member can submit a counter-attestation UTxO to dispute a claim, testifying that the source code does not compile to the stated bytecode or match the address/script hash, with disputes resolved through community governance or predefined on-chain logic. By building on the hackathon prototype, VeriScript aims to create a scalable, community-driven solution that strengthens Cardano’s smart contract ecosystem, encouraging broader adoption by ensuring users can trust the code behind the addresses they interact with.

[Your Project and Solution] Impact

Please define the positive impact your project will have on the wider Cardano community

The VeriScript project would significantly enhance the Cardano ecosystem by providing a robust, decentralized solution for verifying that smart contract addresses correspond to their claimed source code, thereby boosting trust and security for developers, users, and investors.

By enabling transparent, on-chain attestations and a reputation system for code verifiers, VeriScript would reduce the risk of interacting with malicious or misrepresented contracts, fostering greater confidence in Cardano’s smart contract capabilities. This increased transparency and reputation system would encourage more developers to build secure decentralized applications, attract users to engage with these dApps, and draw institutional interest by demonstrating Cardano’s commitment to reliability and auditability.

Additionally, the community-driven approach, with incentives and counter-attestations, would empower active participation, strengthen collaboration, and establish Cardano as a leader in secure and trustworthy blockchain development, ultimately driving ecosystem growth and adoption.

[Your Project and Solution] Capabilities & Feasibility

What is your capability to deliver your project with high levels of trust and accountability? How do you intend to validate if your approach is feasible?

• Adam Valach: Smart Contract Developer at Anastasia Labs with prior experience at WingRiders (V1, V2, Stableswap, Launchpad), Wincent (High-Frequency Trading) and has also worked on projects with teams from IOG, Shielded and Midnight Foundation (Glacier Drop). Adam brings deep expertise in Plutus and Plutarch, alongside strong web development skills, and began building on Cardano from the first day smart contracts were available on testnets.

LinkedIn: https://www.linkedin.com/in/adam-valach-033ab7217/

• Mark Petruska: Formal methods specialist, team-lead and auditor at Anastasia Labs, with experience on a number of other Cardano protocols and Catalyst proposals.

LinkedIn: https://www.linkedin.com/in/mark-petruska-1a611527/

[Milestones] Project Milestones

Milestone Title

Technical documentation

Milestone Outputs

• A detailed technical documentation defining the VeriScript fundamentals, high-level description and in-depth inner workings of smart contracts, VeriScript reputation system and other necessary information

Acceptance Criteria

• The documentation provides a detailed explanation of the product's structure and functionality
• The documentation contains transaction diagrams and definitions of necessary data types like: Datum, Redeemer, Parameters

Evidence of Completion

• The VeriScript repository is accessible at https://github.com/CardanoProphet/veriscript
• The technical documentation is published in the said repository

Delivery Month

1

Cost

19440

Progress

20 %

Milestone Title

Finalize the smart contracts

Milestone Outputs

• The complete source code of the Plutus/Plutarch smart contracts implementing VeriScript's logic as outlined in the technical documentation
• Inline code documentation for each function
• Updated documentation with a "build" section, explaining how to build the smart contracts

Acceptance Criteria

• The smart contracts are accessible to the public in a public GitHub repository
• The finalized smart contract code is fully functional, compiles without errors, and operates as intended for all core actions

Evidence of Completion

• The full smart contract source code is published in the project's repository at https://github.com/CardanoProphet/veriscript
• New "build" section of the documentation is available in the project's repository at https://github.com/CardanoProphet/veriscript

Delivery Month

2

Cost

19440

Progress

50 %

Milestone Title

Create the VeriScript website and required backend

Milestone Outputs

• The website backend code, storing the required data and handling user requests
• The website frontend code, providing a user-friendly interface for viewing and submitting attestations
• A Dockerfile for easier deployment and reproducibility

Acceptance Criteria

• The web application can be run locally on a development machine with full backend-frontend integration
• All defined actions from the documentation can be performed, and the app can be deployed using the provided Dockerfile

Evidence of Completion

• The complete website backend, frontend, and deployment files are publicly available in the project’s open-source repository at https://github.com/CardanoProphet/veriscript, allowing anyone to clone, build, and run the system.

Delivery Month

3

Cost

19440

Progress

70 %

Milestone Title

Deploy the project

Milestone Outputs

• The fully functioning VeriScript platform, including deployed smart contracts, and frontend user interface is accessible to the Cardano users on the later-specified web domain with all verification features active

Acceptance Criteria

• Smart contracts, backend, and frontend are deployed and fully integrated, enabling users to create, view, and challenge attestations
• The system must function smoothly in a live environment without critical errors

Evidence of Completion

• The website is available on the specified domain, allowing public interaction.
• Users can successfully perform all actions defined in the project documentation, confirming the portal is working as expected.

Delivery Month

4

Cost

9720

Progress

90 %

Milestone Title

Project Close-out Report and Video

Milestone Outputs

• Project Close-out Report
  • Providing a detailed summary of the project’s overall achievements, and the milestones completed
  • Includes an overview of each milestone, detailing the specific outputs, and how each milestone was successfully met
  • A breakdown of the final state of the VeriScript project, including setup and usage instructions
• Project Close-out Video
  • A final project video demonstrating the complete solution

Acceptance Criteria

• The close-out report clearly describes the project from start to finish, including setup details, tutorial, and milestone achievements
• The final project video demonstrates a working product and includes a tutorial for users
• The report and video are publicly available and shared with the Cardano community

Evidence of Completion

• The project report will be published on Medium and shared on X at https://x.com/CardanoProphet
• The final project demonstration video will be posted and shared on X at https://x.com/CardanoProphet

Delivery Month

4

Cost

9720

Progress

100 %

[Final Pitch] Budget & Costs

Please provide a cost breakdown of the proposed work and resources

The proposed budget is structured at 9,720 ADA per month per developer, with the project expected to take approximately 4 months with 2 developers to complete, totaling 77,760 ADA.

Total project budget: 77,760 ADA

Milestone 1:

• 19,440 ADA (25% of the total budget)
• Estimated time: 1 month

Milestone 2:

• 19,440 ADA (25% of the total budget)
• Estimated time: 1 month

Milestone 3:

• 19,440 ADA (25% of the total budget)
• Estimated time: 1 month

Milestone 4:

• 9,720 ADA (12.5% of the total budget)
• Estimated time: 2 weeks

Milestone 5:

• 9,720 ADA (12.5% of the total budget)
• Estimated time: 2 weeks

[Final Pitch] Value for Money

How does the cost of the project represent value for the Cardano ecosystem?

The VeriScript project represents excellent value for money for the Cardano ecosystem by delivering a high-impact, scalable solution to address a critical trust and security challenge at a relatively low cost, leveraging Cardano’s efficient EUTxO model and existing infrastructure.

The development, building on top of the NMKR 2025 Berlin Hackathon prototype, focuses on creating a reputation system and on-chain attestation mechanism, requiring modest resources for smart contract development, testing, and deployment compared to the potential ecosystem-wide benefits.

By mitigating risks associated with unverified smart contracts, VeriScript enhances user and developer confidence, potentially saving millions in losses from malicious or faulty contracts while attracting new projects and users to Cardano. The incentive structure for verifiers further ensures long-term viability without ongoing costs, making the project a cost-effective investment that strengthens Cardano’s competitive edge and fosters sustainable growth.

[Required Acknowledgements] Consent & Confirmation

Terms and Conditions:

Yes