This session provides a practical guide to auditing, focusing on the mindset and techniques that help you get the most out of your audit. Laurence Kirk from Extropy shares the audit process, key stages, and unique considerations for ZK and Mina Protocol projects.

You'll learn about the four main stages of an audit, how to approach code inspection, and the importance of understanding both the system architecture and the mindset of an auditor—whether that's a hacker, a formal verifier, or a systems architect.

• The four main stages of a professional audit
• How to gather information and define audit scope
• Approaching code inspection and system architecture
• Mindsets for auditing: hacker, formal verifier, architect
• Unique ZK and Mina Protocol security considerations
• Techniques for effective vulnerability discovery

This workshop is a practical guide to the audit process, with a special focus on mindset and techniques for ZK and Mina Protocol projects. You'll learn how to approach an audit from initial engagement to post-audit advice, and how to adopt the right mindset for effective vulnerability discovery.

Laurence Kirk covers the importance of understanding system logic, using specialized tools for ZK, and balancing traditional and ZK-specific security concerns. The session also explores the value of thinking like a hacker, a formal verifier, and a systems architect.

• Mina Protocol Developers building zkApps
• Security Professionals working with zero-knowledge platforms
• Auditors reviewing ZK-based applications
• Anyone interested in audit mindset and techniques