News

"We are happy to announce that the Batch Deposit Contract has officially been audited by Runtime Verification. Specifically, we have worked closely with Daejun Park of Runtime Verification, who has previously conducted an end-to-end formal verification of the Ethereum 2.0 deposit smart contract, to conduct this audit. We want to thank the Runtime Verification team for being diligent, helpful, and extremely responsive throughout the engagement.”
Full post

"Quantstamp’s experience includes securing over 5 billion USD worth of digital assets and working with over 140 startups, foundations, and enterprises. Quantstamp chose to develop the Hedera Hashgraph stablecoin standard in the K framework because it is robust, extensible, and widely adopted amongst developers. The framework shortens development time, provides formal guarantees about the correctness of functions, removes the need to develop new tests, and creates a shared understanding amongst developers concerning the architecture and functionality of implemented stablecoins. When stablecoins follow a secure framework, the framework facilitates the integration of implemented stablecoins into other financial applications. This type of modularity is the ideal environment to encourage the development of a healthy stablecoin ecosystem for enterprises.”
Full post

"It was a great experience to work with RV engineers and scientists on the Griskard proof. I was very impressed by the team's ability to tackle complicated concurrent scenarios and edge cases. I am happy to have RV as part of PlatON's grand plan. Moving forward, there are plenty of opportunities to engage again, namely around protocol modeling and formal verification of smart contracts.” - James Qu, CTO PlatON
Full post

"IELE is one in every of my favorite initiatives. It’s unbelievable stuff, it’s actually thrilling and I feel it gonna open up an entire new dimension of the product and I all the time believed that. After the nice collapse of 2017 we had nice-to-have vs. must-have and that was within the nice-to-have column. Plutus, Marlowe and this stuff are within the must-have column." - Charles Hoskinson, CEO IOHK
Full article

"Runtime Verification’s solution is to apply its K Framework, which is a mathematically rigorous toolset that gives users the ability to design and implement programming languages from basic principles, and derive software analysis tools for them following a correct-by-construction methodology. These factors allow users of the K framework to ultimately verify their programs and systems for maximum assurance." - Illinois CS
Full post

“We are delighted to support Runtime Verification’s grant application,” said Sean Lee, CEO of the Algorand Foundation. “We believe that creating a formal framework for Algorand Smart Contracts (ASC1s) will enable the creation of innovative, secure, and reliable DAPPs and DeFi solutions on the Algorand blockchain.” - Algorand Foundation
Full post

"Runtime Verification designs formal models for high-value application domains, then uses the models to develop domain-specific products and services focused on correctness and security. Building off of its previous Tezos work, Runtime Verification will create a formal verification framework for Michelson by extending its existing unit testing framework to handle the case of symbolic unit tests. This project will help make it easier for developers of all backgrounds to deploy secure Tezos smart contracts." - Tezos Foundation
Full post

We propose a new verification method for software intended to be flown on unmanned aircraft systems that is both automatic and inexpensive. In Phase 1 we will focus on a class of errors in C programs called “undefined behavior” (UB) because this makes the method both easy to use and easy to compare with existing static analysis tools. - NASA SBIR
Grant description

"Formal specifications and proofs of method-level correctness for the smart contracts in the uniswap-v2-core repository (namely UniswapV2Pair and UniswapV2Factory) were produced using the act specification language and K framework. [...] Formal specifications for the contracts in uniswap-v2-core were written in the act specification language. These specifications are then compiled into reachability claims in the K language, and proved using the K framework prover against the bytecode produced by the build system in the uniswap-v2-core repository." - Dapp Labs
Full report

"To say we are excited to engage with PlatON Networks is an understatement. We began conversations with their team in late 2019 about how and where our two companies could engage. Although we discussed various opportunities, including those related to writing and verifying programs written in web assembly (WASM), we eventually settled on protocol verification as a good place to start what will hopefully become a long-term collaboration and partnership." - Patrick MacKay, COO
Full post

"Today we are very pleased to announce the formation of the Ethereum Trust Alliance (ETA). The ETA is a group of global blockchain security companies that are creating a security rating system for smart contracts to help users gain greater awareness of smart contract security and differentiate contracts which have gone through rigorous security checks. The founding members are MythX, Quantstamp, Runtime Verification, Sooho, SmartDec and ConsenSys Diligence." - Ethereum Trust Alliance
Full post

"Runtime Verification is a company aimed at using runtime verification-based techniques to improve the safety, reliability, and correctness of software systems. The purpose of this grant is to develop a formal semantics and reference implementation of Michelson, a domain-specific language for Tezos smart contracts, in the K Framework. The K language is designed to make language definitions as readable as possible while still ensuring a K semantics has a precise mathematical meaning, and is supported by the tools of the K Framework. The Runtime Verification team will also publish documentation and interact with the wider Tezos developer community as part of this project." - Tezos Foundation
Full post

"The design and implementation of bridges to all major blockchains is one of our highest priorities. [...] Currently, the only way to generate a Polkadot Runtime is by using Rust along with Parity-built tools. We would like to increase the language options for developers to write these Runtimes and recently released an RFP for the development of a tool to generate WebAssembly Runtimes from AssemblyScript." - Web3 Foundation
Full post

"The Elrond research and development team will work closely with Runtime Verification to further develop the K framework and its capability to generate correct-by-construction Virtual Machines for the blockchain. Through the research and development initiative between Elrond and Runtime Verification we aim to take smart contracts to the next level, and to make the GO backend developed by Elrond for the K framework, open source and available to the wide public." - Elrond Network
Full post

"To achieve even greater assurance about the Algorand protocol, and to make future design and validation of new protocols easier, we have chosen to enhance our mathematical proofs on paper with machine-checkable formal verification approaches. For this purpose, we engaged Runtime Verification, a company with deep verification expertise, to verify the correctness of the Algorand consensus protocol." - Algorand Foundation
Full post

"Many resources are shifting into testing, fuzzing, and audits over the coming months. We engaged Runtime Verification to formally verify the deposit contract and to formally specify the Beacon Chain. This is in addition to considerable effort by the research, development, and security teams involved in ETH 2.0 toward reliability and security." - Ethereum Foundation
Full post

"Our team worked closely with Runtime Verification (RV) — a company that specializes in using runtime verification techniques to ensure that software systems are secure — to release a formal verification report. While testing and auditing are essential steps in the development process, formal verification is a mathematical proof-based methodology used to significantly decrease the likelihood that a smart contract is buggy." - Gnosis
Full post

"Runtime Verification has been working closely with Rikard Hjort of Chalmers University on the KWasm semantics, which will allow Web Assembly contracts to be formally verified using the K framework. The core computational opcodes are finished, what remains are memories, tables, and modules. Memories are almost done, awaiting final review and approval, and tables will follow shortly." - Panvala
Full post

"Runtime Verification, based in Urbana, has developed tools to improve the safety and reliability of software systems. Its technology can automatically detect bugs that are lurking in a company’s software, and identify problems before a program crashes. Runtime’s customers include a handful of high-profile clients—such as Boeing, NASA, Toyota and the National Science Foundation—who use the startup to make sure their code is error free. For these types of companies, if their software fails, the stakes are higher than, say, a shopping app or a dating website. Detecting problems as soon as possible helps machines run better and keeps people inside those machines safer." - Chicago INNO
Full post

"Uniswap liquidity pools are autonomous and use the Constant Product Market Maker (x*y=k). This model was formalized and the smart contract implementation passed a lightweight formal verification." - Uniswap
Full post

"To provide the highest confidence that the contracts behave as expected, we are working with Runtime Verification to provide us with a formal and mathematically provable audit of the Multi-Collateral smart contracts. We believe MakerDAO will be the first production smart contract system that is formally verified in this manner." - Maker
Full post

"The K framework was used to formally model the semantics of the Ethereum Virtual Machine, and the knowledge gained from this process was employed to design IELE, the virtual machine for Cardano that will be released in a test format in a few weeks’ time. This is the first time this technology has been deployed within the blockchain industry. Importantly, K is a means to formally verify the code of smart contracts, so they can be automatically checked for the types of flaws that have led to catastrophic financial loss, and must be avoided at all costs." - Cardano Foundation
Full post

"The first Cardano smart contracts testnet launches today, the KEVM testnet, a correct by construction version of the Ethereum Virtual Machine (EVM) specified in the K framework. This technology, produced by Runtime Verification with the support of IOHK, is the first time that a complete formal semantics of the EVM have been produced. This is an important first in cryptocurrency that is a necessary step towards the promise of third-generation blockchains." - IOHK
Full post

"These grants will fuel the teams working hard at research & development to support the entire ecosystem. Furthermore, we hope that these grants will signal to the community what we think are the missing pieces in the ecosystem that need more support. Said in another way, the Foundation is here to serve teams and individuals that are working to prevent a tragedy of the commons." - Ethereum Foundation
Full post