Re-enabling the ZK ElGamal Proof Program and Token-22 Confidential Transfer Features

[samkim-crypto]

Currently, the following programs are disabled:

• Native ZK ElGamal Proof Program: The core program used for zero-knowledge proof verification for token22 is currently disabled. It is undergoing additional, rigorous security audits to ensure its robustness and security.
• Token-22 Confidential Transfer Extensions: As a direct result of the proof program being disabled, the following confidential transfer extensions are not included in the currently deployed version of the Token-22 program:
  • ConfidentialTransfer
  • ConfidentialTransferFee
  • ConfidentialMint and ConfidentialBurn

Path to Re-enabling

The re-enabling of these features is pending the successful completion of the ongoing audits.

We will post all relevant updates from the auditors and revised timelines in this issue.

[samkim-crypto]

The code4reana audit competition is complete. No major vulnerabilities found. Audit report can be found in anza-xyz/security-audits#37.

[samkim-crypto]

Least authority audit complete. No major vulnerabilities found. The final version of the audit report soon to be added.

[samkim-crypto]

ZkSecurity audit complete. No major vulnerabilities found. The final version of the audit report soon to be added.

[samkim-crypto]

Trail-of-bits audit starting on November 12, 2025.

[samkim-crypto]

Qedit audit on-going since July 30, 2025.

[samkim-crypto]

Currently targeting January 2026 release assuming no significant vulnerabilities are found in the remaining audits.