Verdict Format

Every submission to an Arena campaign receives a signed verdict — a structured, reproducible, public artifact that represents Firepan AI's judgment.

Anatomy of a verdict

{
  "id": "vrd_01HXABC...",
  "submissionId": "sub_01HXABC...",
  "validity": "valid",
  "severity": "Critical",
  "confidence": 0.97,
  "reasoning": "Executable PoC drains 4.2M USDC on forked mainnet via reentrant callback in LiquidationEngine._settle...",
  "toolOutputs": {
    "slither": "...",
    "mythril": "...",
    "echidna": "...",
    "pocRun": { "passed": true, "output": "Forge test passed..." }
  },
  "artifactUri": "s3://firepan-arena/artifacts/vrd_01.tar.gz",
  "emittedAt": "2026-04-12T11:48:19Z",
  "signature": "0x..."
}

Fields

Field	Description
id	Unique verdict identifier
submissionId	The submission being judged
validity	valid, invalid, duplicate, or needs_human_review
severity	Assigned severity (Critical, High, Medium, Low) — only set when validity = valid
confidence	0.0 to 1.0 — Firepan AI's self-reported confidence in the judgment
duplicateOf	Set when validity = duplicate, references the earlier winning submission
reasoning	Plain-English explanation of the verdict
toolOutputs	Raw outputs from Slither, Mythril, Echidna, and PoC run
artifactUri	Signed URL to the full artifact bundle (PoC source, forks, environment)
emittedAt	Timestamp of verdict emission
signature	EIP-712 signature from Firepan's verdict-signing key

What's in the artifact bundle

The artifactUri points to a tarball containing:

• The submission's original PoC source
• The fork state used for reproduction (block number, contract addresses)
• Full tool outputs (Slither JSON, Mythril report, Echidna corpus if flagged)
• PoC run logs with exit code and stdout
• The severity-scoring worksheet (what criteria were checked)

Anyone can download and re-run this bundle. Arena's transparency guarantee: if Firepan AI says your submission is invalid, you get the exact reasoning and tool outputs to dispute it.

Disputes

If you disagree with a verdict:

1. Download the artifact bundle from artifactUri
2. Reproduce the judgment locally
3. Open a dispute via POST /submissions/{id}/dispute with your counter-reasoning

Disputes are routed to the Firepan Review Council — a rotating panel of external security researchers — within 72 hours.

Public by default

Unless the sponsor requests embargo (during active exploitation windows, coordinated disclosure timelines), all verdicts are public. The artifact bundle, the reasoning, the signature — all live forever on Arena's public record.