Circomspect: Trail of Bits' static analyzer and linter for Circom
=================================================================

Circomspect is a static analyzer for Circom that flags unconstrained signals, unused or shadowed variables, unsafe `<--` assignments and other patterns behind known circuit bugs. It is a linter, not a verifier: fast, easy to add to CI, and blind to bugs that do not match a pattern.

Maintainer: Trail of Bits
Website: https://github.com/trailofbits/circomspect
Category: ZK circuit verification
Targets: Circom
Approach: Static analysis of Circom source for unconstrained signals and unsafe patterns; SARIF output
Access: Open source (GPL-3.0)
Status: Maintained
Strengths: Zero setup, runs in CI. | Built by an audit firm from real findings. | Good developer ergonomics.
Limits: Pattern-based; no semantic guarantee. | Circom only. | No completeness or soundness statement of any kind.
Firms using it: Trail of Bits
Sources: https://github.com/trailofbits/circomspect

Source page: https://sorryfree.com/frameworks/circomspect/
Compiled by: sorryfree editors (https://sorryfree.com/about/)
Last reviewed: 2026-09-13