Search

Search for projects by name

Recategorisation happening in
Learn more

Cartesi PRT Honeypot logoCartesi PRT Honeypot

Badges

About

Cartesi PRT Honeypot is an application-specific Stage-2 rollup that stress-tests Cartesi Rollups’ security. Protected solely by Cartesi’s PRT (Permissionless Refereed Tournaments) fraud-proof algorithm, it turns its locked funds into an open bounty for...


  • Website
Value secured
$2.62>1K%
Canonically Bridged
$2.62
Natively Minted
$0.00
Externally Bridged
$0.00

  • Tokens
  • Past day UOPS
    No data
  • Stage
  • Type
    Optimistic Rollup

  • Purpose
    Bug bounty
  • Sequencer failureState validationData availabilityExit windowProposer failure

    Badges

    About

    Cartesi PRT Honeypot is an application-specific Stage-2 rollup that stress-tests Cartesi Rollups’ security. Protected solely by Cartesi’s PRT (Permissionless Refereed Tournaments) fraud-proof algorithm, it turns its locked funds into an open bounty for...

    Value Secured

    2025 Jun 10 — 17


    Total value securedTotal
    $2.62>1K%
    Canonically BridgedCanonically Bridged ValueCanonical
    $2.62>1K%
    Natively MintedNatively Minted TokensNative
    $0.000.00%
    Externally BridgedExternally Bridged ValueExternal
    $0.000.00%
    Onchain costs

    The section shows the operating costs that L2s pay to Ethereum.


    2025 Jun 11 — 17


    1 year total cost
    $4.79
    Avg cost per L2 UOP
    No data

    Liveness

    The chart illustrates how "live" the project's operators are by displaying how frequently they submit transactions of the selected type and if these intervals deviate from their typical schedule.


    2025 Jun 11 — 11

    No dataThere's no data for the project and the selected criteria. Please try again later.
    30D avg. tx data subs. interval
    1 hour
    30D avg. state updates interval
    No data
    Past 30 days anomalies
    Milestones & Incidents

    Cartesi PRT Honeypot deployed on Ethereum

    2025 Jun 9th

    Cartesi PRT Honeypot deployed to Ethereum mainnet.

    Learn more

    Dave: decentralized, secure, lively fraud-proofs

    2025 May 9th

    Dave paper published on ACM DLT, a peer-reviewed journal.

    Learn more
    Risk summary
    The challenge protocol can be subject to delay attacks.
    Risk analysis
    The challenge protocol can be subject to delay attacks.
    Sequencer failureState validationData availabilityExit windowProposer failure
    Sequencer failure
    Self sequence

    Users can self sequence transactions by sending them on L1. There is no privileged operator.

    State validation
    Fraud proofs (INT)

    Fraud proofs allow actors watching the chain to prove that the state is incorrect. Interactive proofs (INT) require multiple transactions over time to resolve.

    Data availability
    Onchain

    All of the data needed for proof construction is published on Ethereum L1.

    Exit window

    Users can exit funds at any time because contracts are not upgradeable.

    Proposer failure
    Self propose

    Anyone can be a Proposer and propose new roots to the L1 bridge.

    Rollup stageCartesi PRT HoneypotCartesi PRT Honeypot is a
    Stage 2
    Appchain
    Optimistic Rollup.

    Rollup operators cannot compromise the system, but being application-specific might bring additional risk.

    Users can deposit (donate) CTSI tokens to the Honeypot. To request a withdrawal, they need to post an input to the InputBox with the application address and `0x` arguments as described in the Withdrawals section. Withdrawals are configured to go to a single address (not the user's).

    Note:
    We're still in the process of formalizing how to properly integrate appchains in the Stages framework.

    Learn more about Rollup stages
    Please keep in mind that these stages do not reflect rollup security, this is an opinionated assessment of rollup maturity based on subjective criteria, created with a goal of incentivizing projects to push toward better decentralization. Each team may have taken different paths to achieve this goal.
    Data availability

    All transaction data is recorded on chain

    All executed transactions are submitted to an on chain smart contract. The execution of the rollup is based entirely on the submitted transactions, so anyone monitoring the contract can know the correct state of the rollup chain.

    1. InputBox.sol#18 - Etherscan source code, addInput function
    Learn more about the DA layer here: Ethereum logoEthereum
    State derivation
    Node software

    The source code for the Cartesi node software is available here.

    Genesis state

    The genesis state comes from the Honeypot Cartesi Machine template included in the Honeypot v2 release. Alternatively, you can recreate it by following the build steps in the Honeypot GitHub Repository.

    Data format

    The reference implementation for ERC20 deposits can be found here. To learn about the withdrawal request format, please refer to the documentation here.

    State validation
    Under Review

    The information in the section might be incomplete or outdated.
    The L2BEAT Team is working to research & validate the content before publishing.

    Fraud proofs

    After some period of time, the published state root is assumed to be correct. For a certain time period, usually one week, anyone can submit a fraud proof that shows that the state was incorrect.

    • Funds can be stolen if there is no one that checks the published state. Fraud proofs assume at least one honest and able validator.

    1. Permissionless Refereed Tournaments
    2. MultiLevelTournamentFactory.sol#L37 - dispute resolution factory
    3. DaveConsensus.sol#L149 - application consensus
    Operator

    There is no central operator

    There is no privileged entity that sequences transactions or produces blocks. This activity is permissionless and open to anyone.

    1. Honeypot Docs - Running a validator node

    Users can force any transaction

    Because the state of the system is based on transactions submitted on the underlying host chain and anyone can submit their transactions there it allows the users to circumvent censorship by interacting with the smart contract on the host chain directly.

    Withdrawals

    Regular messaging

    The user initiates L2->L1 messages by submitting a regular transaction on this chain. When the block containing that transaction is settled, the message becomes available for processing on L1. The process of block finalization usually takes several days to complete.

    1. Requesting withdrawals, Honeypot Wiki
    Smart contracts
    A dashboard to explore contracts and permissions
    Go to Disco
    Disco UI Banner
    A diagram of the smart contract architecture
    A diagram of the smart contract architecture

    Ethereum

    TopTournament 0x0911…F8Aa

    Represents the entry point and highest level of a dispute in PRT. Disagreeing validators join this tournament to resolve conflicts over the entire computation trace through a bisection game.

    BottomTournament 0x1825…63f8

    Referees the dispute over a single contested Cartesi machine step as the final stage of arbitration in a dispute. It calls the CartesiStateTransition contract to get a definitive on-chain ruling and identify the winner.

    Application 0x4c1E…251c

    Main dApp contract that escrows assets and executes the verified results (outputs) from off-chain computation. It relies on the DaveConsensus contract to validate outputs before releasing assets or triggering on-chain actions.

    • This contract can store any token.
    DaveConsensus 0x6CE5…1B68

    Contract managing PRT fraud-proof tournaments, managing application epochs and input validation, as well as settlement and challenge periods. Dispute tournaments are started here and the final, verified computation result (as an outputsMerkleRoot) is recorded when they are resolved.

    CartesiStateTransition 0x7727…057f

    Onchain verifier that can execute a single, disputed instruction of the Cartesi machine. It is the ultimate arbiter that BottomTournament calls to determine which party’s claimed state transition is correct.

    MultiLevelTournamentFactory 0xA31C…72D7

    Responsible for creating and orchestrating the multi-stage dispute process. It instantiates the correct tournament contract (Top, Middle, or Bottom) depending on the current stage of the dispute game.

    InputBox 0xc700…0051

    Serves as both the canonical log for arbitrary dApp inputs and a portal for depositing assets (one possible type of input). It ensures data availability and that all off-chain participants process the same inputs in the same order.

    ERC20Portal 0xc700…0051

    Contract that allows anyone to perform transfers of ERC-20 tokens to Cartesi DApps.

    CanonicalTournamentParametersProvider 0xcC0a…4c0c

    Provides constant configuration data for the tournament system. It defines parameters like the number of levels (3), the minimum challenge period of ~7d, and the size of computation segments at each stage of a dispute.

    MiddleTournament 0xe49E…F1AE

    Handles the intermediate stages of a dispute following the TopTournament targeting a more granular bisection game.

    Value Secured is calculated based on these smart contracts and tokens:

    Generic escrow 0x4c1E…251c

    Contract storing bounty funds.