The audited VTA mempool path calls CheckInputs() with SCRIPT_VERIFY_P2SH together with SCRIPT_VERIFY_STRICTENC.
STRICTENC is part of the inspected CheckInputs() invocation used during transaction acceptance.
DERSIG, LOW_S, NULLDUMMY, WITNESS, TAPROOT and other modern flags are not claimed for VTA without release-specific source evidence.
| Area | Finding | Status |
|---|---|---|
| P2SH flag | VTA's inspected AcceptToMemoryPool() path calls CheckInputs() with SCRIPT_VERIFY_P2SH. | Verified |
| STRICTENC flag | The same inspected call includes SCRIPT_VERIFY_STRICTENC. | Verified |
| Script engine | The source contains EvalScript(), including stack, element and opcode resource limits. | Verified |
| CHECKSIG | The script engine reaches signature checking through CHECKSIG/CheckSig logic. | Verified |
| CHECKMULTISIG | The script engine validates key/signature counts and iterates signatures against public keys. | Verified |
| P2SH sigops | The supplied VTA paper documents counting P2SH signature operations toward the block sigops limit to reduce expensive-to-validate block attacks. | Documented in paper |
| DER / LOW-S / NULLDUMMY | No current VTA claim is made here without exact VTA source evidence for those individual flags. | Not established |
| SegWit / Taproot | Modern Bitcoin script features are not imported into this VTA audit by analogy. | Not established |
| Independent script test vectors | No live corpus of valid/invalid VTA scripts was executed by this page. | Not measured |
P2SH and signature rules determine whether a spending transaction can satisfy the locking conditions of an output.
Script and sigop limits reduce the amount of validation work a transaction or block can impose.
A feature should be marked supported only after the exact VTA release/source path is verified.