AVM Opcodes

This page documents the current state of the AVM and may include AVM versions that have not yet been approved and adopted by all node operators.

The Size field lists an opcode’s total encoded length in bytes: the opcode itself plus its immediate arguments. It is omitted whenever the langspec reports a size of 0, which happens for two kinds of opcode. The first is opcodes with variable-length immediates, such as pushbytes and intcblock, whose length truly depends on their arguments; the second is branch opcodes, such as bnz and callsub, whose targets are resolved into offsets in a later assembly pass. Opcodes that take an immediate also carry an Immediate Parameters note describing what each argument expects.

Name Availability Group

!

Bytecode: 0x14
Stack Input: uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A == 0 yields 1; else 0
Groups: Arithmetic

!=

Bytecode: 0x13
Stack Input: any,any
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A is not equal to B => {0 or 1}
Groups: Arithmetic

%

Bytecode: 0x18
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A modulo B. Fail if B == 0.
Groups: Arithmetic

&

Bytecode: 0x1a
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A bitwise-and B
Groups: Arithmetic

&&

Bytecode: 0x10
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A is not zero and B is not zero => {0 or 1}
Groups: Arithmetic

*

Bytecode: 0x0b
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A times B. Fail on overflow.
Groups: Arithmetic

Notes Overflow is an error condition which halts execution and fails the transaction. Full precision is available from mulw.

+

Bytecode: 0x08
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A plus B. Fail on overflow.
Groups: Arithmetic

Notes Overflow is an error condition which halts execution and fails the transaction. Full precision is available from addw.

-

Bytecode: 0x09
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A minus B. Fail if B > A.
Groups: Arithmetic

/

Bytecode: 0x0a
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A divided by B (truncated division). Fail if B == 0.
Groups: Arithmetic

Notes divmodw is available to divide the two-element values produced by mulw and addw.

<

Bytecode: 0x0c
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A less than B => {0 or 1}
Groups: Arithmetic

<=

Bytecode: 0x0e
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A less than or equal to B => {0 or 1}
Groups: Arithmetic

==

Bytecode: 0x12
Stack Input: any,any
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A is equal to B => {0 or 1}
Groups: Arithmetic

>

Bytecode: 0x0d
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A greater than B => {0 or 1}
Groups: Arithmetic

>=

Bytecode: 0x0f
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A greater than or equal to B => {0 or 1}
Groups: Arithmetic

^

Bytecode: 0x1b
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A bitwise-xor B
Groups: Arithmetic

acct_params_get

Bytecode: 0x73
Stack Input: any
Stack Output: any,bool
Size: 2
Availability: v6
Cost: 1
Description: X is field F from account A. Y is 1 if A owns positive algos, else 0
Groups: Account Access

Field Reference

Index	Name	Type
0	AcctBalance	uint64
1	AcctMinBalance	uint64
2	AcctAuthAddr	address
3	AcctTotalNumUint	uint64
4	AcctTotalNumByteSlice	uint64
5	AcctTotalExtraAppPages	uint64
6	AcctTotalAppsCreated	uint64
7	AcctTotalAppsOptedIn	uint64
8	AcctTotalAssetsCreated	uint64
9	AcctTotalAssets	uint64
10	AcctTotalBoxes	uint64
11	AcctTotalBoxBytes	uint64
12	AcctIncentiveEligible	bool
13	AcctLastProposed	uint64
14	AcctLastHeartbeat	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	account params field index

addw

Bytecode: 0x1e
Stack Input: uint64,uint64
Stack Output: uint64,uint64
Size: 1
Availability: v2
Cost: 1
Description: A plus B as a 128-bit result. X is the carry-bit, Y is the low-order 64 bits.
Groups: Arithmetic

app_box_create

Bytecode: 0xd4 0x01
Stack Input: uint64,boxName,uint64
Stack Output: bool
Size: 2
Availability: v13
Cost: 1
Description: create a box named B, of length C, for app A. Fail if the name B is empty or C exceeds 32,768. Returns 0 if B already existed, else 1
Groups: Box Access

Notes Newly created boxes are filled with 0 bytes. app_box_create will fail if the referenced box already exists with a different size. Otherwise, existing boxes are unchanged by app_box_create.

app_box_del

Bytecode: 0xd4 0x04
Stack Input: uint64,boxName
Stack Output: bool
Size: 2
Availability: v13
Cost: 1
Description: delete box named B of app A if it exists. Return 1 if B existed, 0 otherwise
Groups: Box Access

app_box_extract

Bytecode: 0xd4 0x02
Stack Input: uint64,boxName,uint64,uint64
Stack Output: []byte
Size: 2
Availability: v13
Cost: 1
Description: read D bytes from box B of app A, starting at offset C. Fail if box B does not exist, or the byte range is outside B’s size.
Groups: Box Access

app_box_get

Bytecode: 0xd4 0x06
Stack Input: uint64,boxName
Stack Output: []byte,bool
Size: 2
Availability: v13
Cost: 1
Description: X is the contents of box B of app A if B exists, else ”. Y is 1 if B exists, else 0.
Groups: Box Access

Notes For boxes that exceed 4,096 bytes, consider app_box_create, app_box_extract, and app_box_replace

app_box_len

Bytecode: 0xd4 0x05
Stack Input: uint64,boxName
Stack Output: uint64,bool
Size: 2
Availability: v13
Cost: 1
Description: X is the length of box B of app A if B exists, else 0. Y is 1 if B exists, else 0.
Groups: Box Access

app_box_put

Bytecode: 0xd4 0x07
Stack Input: uint64,boxName,[]byte
Stack Output: -
Size: 2
Availability: v13
Cost: 1
Description: replaces the contents of box B of app A with byte-array C. Fails if B exists and len(C) != len(box B). Creates B if it does not exist
Groups: Box Access

Notes For boxes that exceed 4,096 bytes, consider app_box_create, app_box_extract, and app_box_replace

app_box_replace

Bytecode: 0xd4 0x03
Stack Input: uint64,boxName,uint64,[]byte
Stack Output: -
Size: 2
Availability: v13
Cost: 1
Description: write byte-array D into box B of app A, starting at offset C. Fail if box B does not exist, or the byte range is outside B’s size.
Groups: Box Access

app_box_resize

Bytecode: 0xd4 0x09
Stack Input: uint64,boxName,uint64
Stack Output: -
Size: 2
Availability: v13
Cost: 1
Description: change the size of box named B of app A to be of length C, adding zero bytes to end or removing bytes from the end, as needed. Fail if the name B is empty, B is not an existing box, or C exceeds 32,768.
Groups: Box Access

app_box_splice

Bytecode: 0xd4 0x08
Stack Input: uint64,boxName,uint64,uint64,[]byte
Stack Output: -
Size: 2
Availability: v13
Cost: 1
Description: set box B of app A to contain its previous bytes up to index C, followed by E, followed by the original bytes of B that began at index C+D.
Groups: Box Access

Notes Boxes are of constant length. If D < len(E), then len(E)-D bytes will be removed from the end. If D > len(E), zero bytes will be appended to the end to reach the box length.

app_global_del

Bytecode: 0x69
Stack Input: stateKey
Stack Output: -
Size: 1
Availability: v2
Cost: 1
Description: delete key A from the global state of the current application
Groups: Application Access

Notes params: state key.

Deleting a key which is already absent has no effect on the application global state. (In particular, it does not cause the program to fail.)

app_global_get

Bytecode: 0x64
Stack Input: stateKey
Stack Output: any
Size: 1
Availability: v2
Cost: 1
Description: global state of the key A in the current application
Groups: Application Access

Notes params: state key. Return: value. The value is zero (of type uint64) if the key does not exist.

app_global_get_ex

Bytecode: 0x65
Stack Input: uint64,stateKey
Stack Output: any,bool
Size: 1
Availability: v2
Cost: 1
Description: X is the global state of application A, key B. Y is 1 if key existed, else 0
Groups: Application Access

Notes params: Txn.ForeignApps offset (or, since v4, an available application id), state key. Return: did_exist flag (top of the stack, 1 if the application and key existed and 0 otherwise), value. The value is zero (of type uint64) if the key does not exist.

app_global_put

Bytecode: 0x67
Stack Input: stateKey,any
Stack Output: -
Size: 1
Availability: v2
Cost: 1
Description: write B to key A in the global state of the current application
Groups: Application Access

app_local_del

Bytecode: 0x68
Stack Input: any,stateKey
Stack Output: -
Size: 1
Availability: v2
Cost: 1
Description: delete key B from account A’s local state of the current application
Groups: Application Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), state key.

Deleting a key which is already absent has no effect on the application local state. (In particular, it does not cause the program to fail.)

app_local_get

Bytecode: 0x62
Stack Input: any,stateKey
Stack Output: any
Size: 1
Availability: v2
Cost: 1
Description: local state of the key B in the current application in account A
Groups: Application Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), state key. Return: value. The value is zero (of type uint64) if the key does not exist.

app_local_get_ex

Bytecode: 0x63
Stack Input: any,uint64,stateKey
Stack Output: any,bool
Size: 1
Availability: v2
Cost: 1
Description: X is the local state of application B, key C in account A. Y is 1 if key existed, else 0
Groups: Application Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), available application id (or, since v4, a Txn.ForeignApps offset), state key. Return: did_exist flag (top of the stack, 1 if the application and key existed and 0 otherwise), value. The value is zero (of type uint64) if the key does not exist.

app_local_put

Bytecode: 0x66
Stack Input: any,stateKey,any
Stack Output: -
Size: 1
Availability: v2
Cost: 1
Description: write C to key B in account A’s local state of the current application
Groups: Application Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), state key, value.

app_opted_in

Bytecode: 0x61
Stack Input: any,uint64
Stack Output: bool
Size: 1
Availability: v2
Cost: 1
Description: 1 if account A is opted in to application B, else 0
Groups: Application Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), available application id (or, since v4, a Txn.ForeignApps offset). Return: 1 if opted in and 0 otherwise.

app_params_get

Bytecode: 0x72
Stack Input: uint64
Stack Output: any,bool
Size: 2
Availability: v5
Cost: 1
Description: X is field F from app A. Y is 1 if A exists, else 0
Groups: Application Access

Notes params: Txn.ForeignApps offset or an available app id. Return: did_exist flag (1 if the application existed and 0 otherwise), value.

Field Reference

Index	Name	Type
0	AppApprovalProgram	[]byte
1	AppClearStateProgram	[]byte
2	AppGlobalNumUint	uint64
3	AppGlobalNumByteSlice	uint64
4	AppLocalNumUint	uint64
5	AppLocalNumByteSlice	uint64
6	AppExtraProgramPages	uint64
7	AppCreator	address
8	AppAddress	address
9	AppVersion	uint64
10	AppSizeSponsor	address
11	AppForeignBoxReads	bool
12	AppFamilyBoxAccess	bool

Immediate Parameters

Name	Encoding	Description
F	uint8	app params field index

app_params_set

Bytecode: 0x76
Stack Input: uint64
Stack Output: -
Size: 2
Availability: v13
Cost: 1
Description: set field F of the current app to A
Groups: Application Access

Field Reference

Index	Name	Type
0	AppForeignBoxReads	bool
1	AppFamilyBoxAccess	bool

Immediate Parameters

Name	Encoding	Description
F	uint8	app params field index

arg

Bytecode: 0x2c
Stack Input: -
Stack Output: []byte
Size: 2
Availability: v1
Cost: 1
Description: Nth LogicSig argument
Groups: Loading Values

Immediate Parameters

Name	Encoding	Description
N	uint8	an arg index

arg_0

Bytecode: 0x2d
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: LogicSig argument 0
Groups: Loading Values

arg_1

Bytecode: 0x2e
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: LogicSig argument 1
Groups: Loading Values

arg_2

Bytecode: 0x2f
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: LogicSig argument 2
Groups: Loading Values

arg_3

Bytecode: 0x30
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: LogicSig argument 3
Groups: Loading Values

args

Bytecode: 0xc3
Stack Input: uint64
Stack Output: []byte
Size: 1
Availability: v5
Cost: 1
Description: Ath LogicSig argument
Groups: Loading Values

assert

Bytecode: 0x44
Stack Input: uint64
Stack Output: -
Size: 1
Availability: v3
Cost: 1
Description: immediately fail unless A is a non-zero number
Groups: Flow Control

asset_holding_get

Bytecode: 0x70
Stack Input: any,uint64
Stack Output: any,bool
Size: 2
Availability: v2
Cost: 1
Description: X is field F from account A’s holding of asset B. Y is 1 if A is opted into B, else 0
Groups: Asset Access

Notes params: Txn.Accounts offset (or, since v4, an available address), asset id (or, since v4, a Txn.ForeignAssets offset). Return: did_exist flag (1 if the asset existed and 0 otherwise), value.

Field Reference

Index	Name	Type
0	AssetBalance	uint64
1	AssetFrozen	bool

Immediate Parameters

Name	Encoding	Description
F	uint8	asset holding field index

asset_params_get

Bytecode: 0x71
Stack Input: uint64
Stack Output: any,bool
Size: 2
Availability: v2
Cost: 1
Description: X is field F from asset A. Y is 1 if A exists, else 0
Groups: Asset Access

Notes params: Txn.ForeignAssets offset (or, since v4, an available asset id. Return: did_exist flag (1 if the asset existed and 0 otherwise), value.

Field Reference

Index	Name	Type
0	AssetTotal	uint64
1	AssetDecimals	uint64
2	AssetDefaultFrozen	bool
3	AssetUnitName	[]byte
4	AssetName	[]byte
5	AssetURL	[]byte
6	AssetMetadataHash	[32]byte
7	AssetManager	address
8	AssetReserve	address
9	AssetFreeze	address
10	AssetClawback	address
11	AssetCreator	address

Immediate Parameters

Name	Encoding	Description
F	uint8	asset params field index

b

Bytecode: 0x42
Stack Input: -
Stack Output: -
Availability: v2
Cost: 1
Description: branch unconditionally to TARGET
Groups: Flow Control

Notes See bnz for details on how branches work. b always jumps to the offset.

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

b!=

Bytecode: 0xa9
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 0 if A is equal to B, else 1. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b%

Bytecode: 0xaa
Stack Input: bigint,bigint
Stack Output: bigint
Size: 1
Availability: v4
Cost: 20
Description: A modulo B. A and B are interpreted as big-endian unsigned integers. Fail if B is zero.
Groups: Byte Array Arithmetic

b&

Bytecode: 0xac
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 1
Availability: v4
Cost: 6
Description: A bitwise-and B. A and B are zero-left extended to the greater of their lengths
Groups: Byte Array Logic

b*

Bytecode: 0xa3
Stack Input: bigint,bigint
Stack Output: []byte
Size: 1
Availability: v4
Cost: 20
Description: A times B. A and B are interpreted as big-endian unsigned integers.
Groups: Byte Array Arithmetic

b+

Bytecode: 0xa0
Stack Input: bigint,bigint
Stack Output: []byte
Size: 1
Availability: v4
Cost: 10
Description: A plus B. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b-

Bytecode: 0xa1
Stack Input: bigint,bigint
Stack Output: bigint
Size: 1
Availability: v4
Cost: 10
Description: A minus B. A and B are interpreted as big-endian unsigned integers. Fail on underflow.
Groups: Byte Array Arithmetic

b/

Bytecode: 0xa2
Stack Input: bigint,bigint
Stack Output: bigint
Size: 1
Availability: v4
Cost: 20
Description: A divided by B (truncated division). A and B are interpreted as big-endian unsigned integers. Fail if B is zero.
Groups: Byte Array Arithmetic

b<

Bytecode: 0xa4
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 1 if A is less than B, else 0. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b<=

Bytecode: 0xa6
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 1 if A is less than or equal to B, else 0. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b==

Bytecode: 0xa8
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 1 if A is equal to B, else 0. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b>

Bytecode: 0xa5
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 1 if A is greater than B, else 0. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b>=

Bytecode: 0xa7
Stack Input: bigint,bigint
Stack Output: bool
Size: 1
Availability: v4
Cost: 1
Description: 1 if A is greater than or equal to B, else 0. A and B are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

b^

Bytecode: 0xad
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 1
Availability: v4
Cost: 6
Description: A bitwise-xor B. A and B are zero-left extended to the greater of their lengths
Groups: Byte Array Logic

balance

Bytecode: 0x60
Stack Input: any
Stack Output: uint64
Size: 1
Availability: v2
Cost: 1
Description: balance for account A, in microalgos. The balance is observed after the effects of previous transactions in the group, and after the fee for the current transaction is deducted. Changes caused by inner transactions are observable immediately following itxn_submit
Groups: Account Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), available application id (or, since v4, a Txn.ForeignApps offset). Return: value.

base64_decode

Bytecode: 0x5e
Stack Input: []byte
Stack Output: []byte
Size: 2
Availability: v7
Cost: 1 + 1 per 16 bytes of A
Description: decode A which was base64-encoded using encoding E. Fail if A is not base64 encoded with encoding E
Groups: Byte Array Manipulation

Notes Warning: Usage should be restricted to very rare use cases. In almost all cases, smart contracts should directly handle non-encoded byte-strings. This opcode should only be used in cases where base64 is the only available option, e.g. interoperability with a third-party that only signs base64 strings.

Decodes A using the base64 encoding E. Specify the encoding with an immediate arg either as URL and Filename Safe (URLEncoding) or Standard (StdEncoding). See RFC 4648 sections 4 and 5. It is assumed that the encoding ends with the exact number of = padding characters as required by the RFC. When padding occurs, any unused pad bits in the encoding must be set to zero or the decoding will fail. The special cases of \n and \r are allowed but completely ignored. An error will result when attempting to decode a string with a character that is not in the encoding alphabet or not one of =, \r, or \n.

Field Reference

Index	Name	Type
0	URLEncoding	any
1	StdEncoding	any

Immediate Parameters

Name	Encoding	Description
E	uint8	encoding index

bitlen

Bytecode: 0x93
Stack Input: any
Stack Output: uint64
Size: 1
Availability: v4
Cost: 1
Description: The highest set bit in A. If A is a byte-array, it is interpreted as a big-endian unsigned integer. bitlen of 0 is 0, bitlen of 8 is 4
Groups: Arithmetic

Notes bitlen interprets arrays as big-endian integers, unlike setbit/getbit

block

Bytecode: 0xd1
Stack Input: uint64
Stack Output: any
Size: 2
Availability: v7
Cost: 1
Description: field F of block A. Fail unless A falls between txn.LastValid-1002 and txn.FirstValid (exclusive)
Groups: Block Access

Field Reference

Index	Name	Type
0	BlkSeed	[32]byte
1	BlkTimestamp	uint64
2	BlkProposer	address
3	BlkFeesCollected	uint64
4	BlkBonus	uint64
5	BlkBranch	[32]byte
6	BlkFeeSink	address
7	BlkProtocol	[]byte
8	BlkTxnCounter	uint64
9	BlkProposerPayout	uint64
10	BlkBranch512	[64]byte
11	BlkSha512_256TxnCommitment	[32]byte
12	BlkSha256TxnCommitment	[32]byte
13	BlkSha512TxnCommitment	[64]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	block field index

bnz

Bytecode: 0x40
Stack Input: uint64
Stack Output: -
Availability: v1
Cost: 1
Description: branch to TARGET if value A is not zero
Groups: Flow Control

Notes The bnz instruction opcode 0x40 is followed by two immediate data bytes which are a high byte first and low byte second which together form a 16 bit offset which the instruction may branch to. For a bnz instruction at pc, if the last element of the stack is not zero then branch to instruction at pc + 3 + N, else proceed to next instruction at pc + 3. Branch targets must be aligned instructions. (e.g. Branching to the second byte of a 2 byte op will be rejected.) Starting at v4, the offset is treated as a signed 16 bit integer allowing for backward branches and looping. In prior version (v1 to v3), branch offsets are limited to forward branches only, 0-0x7fff.

At v2 it became allowed to branch to the end of the program exactly after the last instruction: bnz to byte N (with 0-indexing) was illegal for a TEAL program with N bytes before v2, and is legal after it. This change eliminates the need for a last instruction of no-op as a branch target at the end. (Branching beyond the end—in other words, to a byte larger than N—is still illegal and will cause the program to fail.)

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

box_create

Bytecode: 0xb9
Stack Input: boxName,uint64
Stack Output: bool
Size: 1
Availability: v8
Cost: 1
Description: create a box named A, of length B. Fail if the name A is empty or B exceeds 32,768. Returns 0 if A already existed, else 1
Groups: Box Access

Notes Newly created boxes are filled with 0 bytes. box_create will fail if the referenced box already exists with a different size. Otherwise, existing boxes are unchanged by box_create.

box_del

Bytecode: 0xbc
Stack Input: boxName
Stack Output: bool
Size: 1
Availability: v8
Cost: 1
Description: delete box named A if it exists. Return 1 if A existed, 0 otherwise
Groups: Box Access

box_extract

Bytecode: 0xba
Stack Input: boxName,uint64,uint64
Stack Output: []byte
Size: 1
Availability: v8
Cost: 1
Description: read C bytes from box A, starting at offset B. Fail if A does not exist, or the byte range is outside A’s size.
Groups: Box Access

box_get

Bytecode: 0xbe
Stack Input: boxName
Stack Output: []byte,bool
Size: 1
Availability: v8
Cost: 1
Description: X is the contents of box A if A exists, else ”. Y is 1 if A exists, else 0.
Groups: Box Access

Notes For boxes that exceed 4,096 bytes, consider box_create, box_extract, and box_replace

box_len

Bytecode: 0xbd
Stack Input: boxName
Stack Output: uint64,bool
Size: 1
Availability: v8
Cost: 1
Description: X is the length of box A if A exists, else 0. Y is 1 if A exists, else 0.
Groups: Box Access

box_put

Bytecode: 0xbf
Stack Input: boxName,[]byte
Stack Output: -
Size: 1
Availability: v8
Cost: 1
Description: replaces the contents of box A with byte-array B. Fails if A exists and len(B) != len(box A). Creates A if it does not exist
Groups: Box Access

Notes For boxes that exceed 4,096 bytes, consider box_create, box_extract, and box_replace

box_replace

Bytecode: 0xbb
Stack Input: boxName,uint64,[]byte
Stack Output: -
Size: 1
Availability: v8
Cost: 1
Description: write byte-array C into box A, starting at offset B. Fail if A does not exist, or the byte range is outside A’s size.
Groups: Box Access

box_resize

Bytecode: 0xd3
Stack Input: boxName,uint64
Stack Output: -
Size: 1
Availability: v10
Cost: 1
Description: change the size of box named A to be of length B, adding zero bytes to end or removing bytes from the end, as needed. Fail if the name A is empty, A is not an existing box, or B exceeds 32,768.
Groups: Box Access

box_splice

Bytecode: 0xd2
Stack Input: boxName,uint64,uint64,[]byte
Stack Output: -
Size: 1
Availability: v10
Cost: 1
Description: set box A to contain its previous bytes up to index B, followed by D, followed by the original bytes of A that began at index B+C.
Groups: Box Access

Notes Boxes are of constant length. If C < len(D), then len(D)-C bytes will be removed from the end. If C > len(D), zero bytes will be appended to the end to reach the box length.

bsqrt

Bytecode: 0x96
Stack Input: bigint
Stack Output: bigint
Size: 1
Availability: v6
Cost: 40
Description: The largest integer I such that I^2 <= A. A and I are interpreted as big-endian unsigned integers
Groups: Byte Array Arithmetic

btoi

Bytecode: 0x17
Stack Input: []byte
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: converts big-endian byte array A to uint64. Fails if len(A) > 8. Padded by leading 0s if len(A) < 8.
Groups: Arithmetic

Notes btoi fails if the input is longer than 8 bytes.

bury

Bytecode: 0x45
Stack Input: any
Stack Output: -
Size: 2
Availability: v8
Cost: 1
Description: replace the Nth value from the top of the stack with A. bury 0 fails.
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

bytec

Bytecode: 0x27
Stack Input: -
Stack Output: []byte
Size: 2
Availability: v1
Cost: 1
Description: Ith constant from bytecblock
Groups: Loading Values

Immediate Parameters

Name	Encoding	Description
I	uint8	an index in the bytecblock

bytec_0

Bytecode: 0x28
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: constant 0 from bytecblock
Groups: Loading Values

bytec_1

Bytecode: 0x29
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: constant 1 from bytecblock
Groups: Loading Values

bytec_2

Bytecode: 0x2a
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: constant 2 from bytecblock
Groups: Loading Values

bytec_3

Bytecode: 0x2b
Stack Input: -
Stack Output: []byte
Size: 1
Availability: v1
Cost: 1
Description: constant 3 from bytecblock
Groups: Loading Values

bytecblock

Bytecode: 0x26
Stack Input: -
Stack Output: -
Availability: v1
Cost: 1
Description: prepare block of byte-array constants for use by bytec
Groups: Loading Values

Notes bytecblock loads the following program bytes into an array of byte-array constants in the evaluator. These constants can be referred to by bytec and bytec_* which will push the value onto the stack. Subsequent calls to bytecblock reset and replace the bytes constants available to the script.

Immediate Parameters

Name	Encoding	Description
BYTES …	varuint count, [varuint length, bytes …]	a block of byte constant values

bz

Bytecode: 0x41
Stack Input: uint64
Stack Output: -
Availability: v2
Cost: 1
Description: branch to TARGET if value A is zero
Groups: Flow Control

Notes See bnz for details on how branches work. bz inverts the behavior of bnz.

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

bzero

Bytecode: 0xaf
Stack Input: uint64
Stack Output: []byte
Size: 1
Availability: v4
Cost: 1
Description: zero filled byte-array of length A
Groups: Loading Values

b|

Bytecode: 0xab
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 1
Availability: v4
Cost: 6
Description: A bitwise-or B. A and B are zero-left extended to the greater of their lengths
Groups: Byte Array Logic

b~

Bytecode: 0xae
Stack Input: []byte
Stack Output: []byte
Size: 1
Availability: v4
Cost: 4
Description: A with all bits inverted
Groups: Byte Array Logic

callsub

Bytecode: 0x88
Stack Input: -
Stack Output: -
Availability: v4
Cost: 1
Description: branch unconditionally to TARGET, saving the next instruction on the call stack
Groups: Flow Control

Notes The call stack is separate from the data stack. Only callsub, retsub, and proto manipulate it.

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

concat

Bytecode: 0x50
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 1
Availability: v2
Cost: 1
Description: join A and B
Groups: Byte Array Manipulation

Notes concat fails if the result would be greater than 4096 bytes.

cover

Bytecode: 0x4e
Stack Input: any
Stack Output: any
Size: 2
Availability: v5
Cost: 1
Description: remove top of stack, and place it deeper in the stack such that N elements are above it. Fails if stack depth <= N.
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

dig

Bytecode: 0x4b
Stack Input: any
Stack Output: any,any
Size: 2
Availability: v3
Cost: 1
Description: Nth value from the top of the stack. dig 0 is equivalent to dup
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

divmodw

Bytecode: 0x1f
Stack Input: uint64,uint64,uint64,uint64
Stack Output: uint64,uint64,uint64,uint64
Size: 1
Availability: v4
Cost: 20
Description: W,X = (A,B / C,D); Y,Z = (A,B modulo C,D)
Groups: Arithmetic

Notes The notation J,K indicates that two uint64 values J and K are interpreted as a uint128 value, with J as the high uint64 and K the low.

divw

Bytecode: 0x97
Stack Input: uint64,uint64,uint64
Stack Output: uint64
Size: 1
Availability: v6
Cost: 1
Description: A,B / C. Fail if C == 0 or if result overflows.
Groups: Arithmetic

Notes The notation A,B indicates that A and B are interpreted as a uint128 value, with A as the high uint64 and B the low.

dup

Bytecode: 0x49
Stack Input: any
Stack Output: any,any
Size: 1
Availability: v1
Cost: 1
Description: duplicate A
Groups: Flow Control

dup2

Bytecode: 0x4a
Stack Input: any,any
Stack Output: any,any,any,any
Size: 1
Availability: v2
Cost: 1
Description: duplicate A and B
Groups: Flow Control

dupn

Bytecode: 0x47
Stack Input: any
Stack Output: -
Size: 2
Availability: v8
Cost: 1
Description: duplicate A, N times
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	copy count

ec_add

Bytecode: 0xe0
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 2
Availability: v10
Cost: BN254g1=125; BN254g2=170; BLS12_381g1=205; BLS12_381g2=290
Description: for curve points A and B, return the curve point A + B
Groups: Cryptography

Notes A and B are curve points in affine representation: field element X concatenated with field element Y. Field element Z is encoded as follows.
For the base field elements (Fp), Z is encoded as a big-endian number and must be lower than the field modulus.
For the quadratic field extension (Fp2), Z is encoded as the concatenation of the individual encoding of the coefficients. For an Fp2 element of the form Z = Z0 + Z1 i, where i is a formal quadratic non-residue, the encoding of Z is the concatenation of the encoding of Z0 and Z1 in this order. (Z0 and Z1 must be less than the field modulus).

The point at infinity is encoded as (X,Y) = (0,0).
Groups G1 and G2 are denoted additively.

Fails if A or B is not in G.
A and/or B are allowed to be the point at infinity.
Does not check if A and B are in the main prime-order subgroup.

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ec_map_to

Bytecode: 0xe5
Stack Input: []byte
Stack Output: []byte
Size: 2
Availability: v10
Cost: BN254g1=630; BN254g2=3300; BLS12_381g1=1950; BLS12_381g2=8150
Description: maps field element A to group G
Groups: Cryptography

Notes BN254 points are mapped by the SVDW map. BLS12-381 points are mapped by the SSWU map.
G1 element inputs are base field elements and G2 element inputs are quadratic field elements, with nearly the same encoding rules (for field elements) as defined in ec_add. There is one difference of encoding rule: G1 element inputs do not need to be 0-padded if they fit in less than 32 bytes for BN254 and less than 48 bytes for BLS12-381. (As usual, the empty byte array represents 0.) G2 elements inputs need to be always have the required size.

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ec_multi_scalar_mul

Bytecode: 0xe3
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 2
Availability: v10
Cost: BN254g1=3600 + 90 per 32 bytes of B; BN254g2=7200 + 270 per 32 bytes of B; BLS12_381g1=6500 + 95 per 32 bytes of B; BLS12_381g2=14850 + 485 per 32 bytes of B
Description: for curve points A and scalars B, return curve point B0A0 + B1A1 + B2A2 + … + BnAn
Groups: Cryptography

Notes A is a list of concatenated points, encoded and checked as described in ec_add. B is a list of concatenated scalars which, unlike ec_scalar_mul, must all be exactly 32 bytes long.
The name ec_multi_scalar_mul was chosen to reflect common usage, but a more consistent name would be ec_multi_scalar_mul. AVM values are limited to 4096 bytes, so ec_multi_scalar_mul is limited by the size of the points in the group being operated upon.

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ec_pairing_check

Bytecode: 0xe2
Stack Input: []byte,[]byte
Stack Output: bool
Size: 2
Availability: v10
Cost: BN254g1=8000 + 7400 per 64 bytes of B; BN254g2=8000 + 7400 per 128 bytes of B; BLS12_381g1=13000 + 10000 per 96 bytes of B; BLS12_381g2=13000 + 10000 per 192 bytes of B
Description: 1 if the product of the pairing of each point in A with its respective point in B is equal to the identity element of the target group Gt, else 0
Groups: Cryptography

Notes A and B are concatenated points, encoded and checked as described in ec_add. A contains points of the group G, B contains points of the associated group (G2 if G is G1, and vice versa). Fails if A and B have a different number of points, or if any point is not in its described group or outside the main prime-order subgroup - a stronger condition than other opcodes. AVM values are limited to 4096 bytes, so ec_pairing_check is limited by the size of the points in the groups being operated upon.

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ec_scalar_mul

Bytecode: 0xe1
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 2
Availability: v10
Cost: BN254g1=1810; BN254g2=3430; BLS12_381g1=2950; BLS12_381g2=6530
Description: for curve point A and scalar B, return the curve point BA, the point A multiplied by the scalar B.
Groups: Cryptography

Notes A is a curve point encoded and checked as described in ec_add. Scalar B is interpreted as a big-endian unsigned integer. Fails if B exceeds 32 bytes.

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ec_subgroup_check

Bytecode: 0xe4
Stack Input: []byte
Stack Output: bool
Size: 2
Availability: v10
Cost: BN254g1=20; BN254g2=3100; BLS12_381g1=1850; BLS12_381g2=2340
Description: 1 if A is in the main prime-order subgroup of G (including the point at infinity) else 0. Program fails if A is not in G at all.
Groups: Cryptography

Field Reference

Index	Name	Type
0	BN254g1	-
1	BN254g2	-
2	BLS12_381g1	-
3	BLS12_381g2	-

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

ecdsa_pk_decompress

Bytecode: 0x06
Stack Input: [33]byte
Stack Output: [32]byte,[32]byte
Size: 2
Availability: v5
Cost: Secp256k1=650; Secp256r1=2400
Description: decompress pubkey A into components X, Y
Groups: Cryptography

Notes The 33 byte public key in a compressed form to be decompressed into X and Y (top) components. All values are big-endian encoded.

Field Reference

Index	Name	Type
0	Secp256k1	-
1	Secp256r1	-

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

ecdsa_pk_recover

Bytecode: 0x07
Stack Input: [32]byte,uint64,[32]byte,[32]byte
Stack Output: [32]byte,[32]byte
Size: 2
Availability: v5
Cost: 2000
Description: for (data A, recovery id B, signature C, D) recover a public key
Groups: Cryptography

Notes S (top) and R elements of a signature, recovery id and data (bottom) are expected on the stack and used to deriver a public key. All values are big-endian encoded. The signed data must be 32 bytes long.

Field Reference

Index	Name	Type
0	Secp256k1	-
1	Secp256r1	-

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

ecdsa_verify

Bytecode: 0x05
Stack Input: [32]byte,[32]byte,[32]byte,[32]byte,[32]byte
Stack Output: bool
Size: 2
Availability: v5
Cost: Secp256k1=1700; Secp256r1=2500
Description: for (data A, signature B, C and pubkey D, E) verify the signature of the data against the pubkey => {0 or 1}
Groups: Cryptography

Notes The 32 byte Y-component of a public key is the last element on the stack, preceded by X-component of a pubkey, preceded by S and R components of a signature, preceded by the data that is fifth element on the stack. All values are big-endian encoded. The signed data must be 32 bytes long, and signatures in lower-S form are only accepted.

Field Reference

Index	Name	Type
0	Secp256k1	-
1	Secp256r1	-

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

ed25519verify

Bytecode: 0x04
Stack Input: []byte,[64]byte,[32]byte
Stack Output: bool
Size: 1
Availability: v1
Cost: 1900
Description: for (data A, signature B, pubkey C) verify the signature of (“ProgData” || program_hash || data) against the pubkey => {0 or 1}
Groups: Cryptography

Notes The 32 byte public key is the last element on the stack, preceded by the 64 byte signature at the second-to-last element on the stack, preceded by the data which was signed at the third-to-last element on the stack.

ed25519verify_bare

Bytecode: 0x84
Stack Input: []byte,[64]byte,[32]byte
Stack Output: bool
Size: 1
Availability: v7
Cost: 1900
Description: for (data A, signature B, pubkey C) verify the signature of the data against the pubkey => {0 or 1}
Groups: Cryptography

err

Bytecode: 0x00
Stack Input: -
Stack Output: -
Size: 1
Availability: v1
Cost: 1
Description: Fail immediately.
Groups: Flow Control

exp

Bytecode: 0x94
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v4
Cost: 1
Description: A raised to the Bth power. Fail if A == B == 0 and on overflow
Groups: Arithmetic

expw

Bytecode: 0x95
Stack Input: uint64,uint64
Stack Output: uint64,uint64
Size: 1
Availability: v4
Cost: 10
Description: A raised to the Bth power as a 128-bit result in two uint64s. X is the high 64 bits, Y is the low. Fail if A == B == 0 or if the results exceeds 2^128-1
Groups: Arithmetic

extract

Bytecode: 0x57
Stack Input: []byte
Stack Output: []byte
Size: 3
Availability: v5
Cost: 1
Description: A range of bytes from A starting at S up to but not including S+L. If L is 0, then extract to the end of the string. If S or S+L is larger than the array length, the program fails
Groups: Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position
L	uint8	length

extract3

Bytecode: 0x58
Stack Input: []byte,uint64,uint64
Stack Output: []byte
Size: 1
Availability: v5
Cost: 1
Description: A range of bytes from A starting at B up to but not including B+C. If B+C is larger than the array length, the program fails
Groups: Byte Array Manipulation

extract_uint16

Bytecode: 0x59
Stack Input: []byte,uint64
Stack Output: uint64
Size: 1
Availability: v5
Cost: 1
Description: A uint16 formed from a range of big-endian bytes from A starting at B up to but not including B+2. If B+2 is larger than the array length, the program fails
Groups: Byte Array Manipulation

extract_uint32

Bytecode: 0x5a
Stack Input: []byte,uint64
Stack Output: uint64
Size: 1
Availability: v5
Cost: 1
Description: A uint32 formed from a range of big-endian bytes from A starting at B up to but not including B+4. If B+4 is larger than the array length, the program fails
Groups: Byte Array Manipulation

extract_uint64

Bytecode: 0x5b
Stack Input: []byte,uint64
Stack Output: uint64
Size: 1
Availability: v5
Cost: 1
Description: A uint64 formed from a range of big-endian bytes from A starting at B up to but not including B+8. If B+8 is larger than the array length, the program fails
Groups: Byte Array Manipulation

falcon_verify

Bytecode: 0x85
Stack Input: []byte,[]byte,[1793]byte
Stack Output: bool
Size: 1
Availability: v12
Cost: 1700
Description: for (data A, deterministic FALCON-1024 compressed-format signature B, pubkey C) verify the signature of data against the pubkey => {0 or 1}
Groups: Cryptography

Notes Signature B is variable-length, with maximum size 1423 bytes.

frame_bury

Bytecode: 0x8c
Stack Input: any
Stack Output: -
Size: 2
Availability: v8
Cost: 1
Description: replace the Nth (signed) value from the frame pointer in the stack with A
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
I	int8	frame slot

frame_dig

Bytecode: 0x8b
Stack Input: -
Stack Output: any
Size: 2
Availability: v8
Cost: 1
Description: Nth (signed) value from the frame pointer.
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
I	int8	frame slot

gaid

Bytecode: 0x3c
Stack Input: -
Stack Output: uint64
Size: 2
Availability: v4
Cost: 1
Description: ID of the asset or application created in the Tth transaction of the current group
Groups: Loading Values

Notes gaid fails unless the requested transaction created an asset or application and T < GroupIndex.

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index

gaids

Bytecode: 0x3d
Stack Input: uint64
Stack Output: uint64
Size: 1
Availability: v4
Cost: 1
Description: ID of the asset or application created in the Ath transaction of the current group
Groups: Loading Values

Notes gaids fails unless the requested transaction created an asset or application and A < GroupIndex.

getbit

Bytecode: 0x53
Stack Input: any,uint64
Stack Output: uint64
Size: 1
Availability: v3
Cost: 1
Description: Bth bit of (byte-array or integer) A. If B is greater than or equal to the bit length of the value (8*byte length), the program fails
Groups: Byte Array Manipulation

Notes see explanation of bit ordering in setbit

getbyte

Bytecode: 0x55
Stack Input: []byte,uint64
Stack Output: uint64
Size: 1
Availability: v3
Cost: 1
Description: Bth byte of A, as an integer. If B is greater than or equal to the array length, the program fails
Groups: Byte Array Manipulation

gitxn

Bytecode: 0xb7
Stack Input: -
Stack Output: any
Size: 3
Availability: v6
Cost: 1
Description: field F of the Tth transaction in the last inner group submitted
Groups: Inner Transactions

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	FirstValid	uint64
3	FirstValidTime	uint64
4	LastValid	uint64
5	Note	[]byte
6	Lease	[32]byte
7	Receiver	address
8	Amount	uint64
9	CloseRemainderTo	address
10	VotePK	[32]byte
11	SelectionPK	[32]byte
12	VoteFirst	uint64
13	VoteLast	uint64
14	VoteKeyDilution	uint64
15	Type	[]byte
16	TypeEnum	uint64
17	XferAsset	uint64
18	AssetAmount	uint64
19	AssetSender	address
20	AssetReceiver	address
21	AssetCloseTo	address
22	GroupIndex	uint64
23	TxID	[32]byte
24	ApplicationID	uint64
25	OnCompletion	uint64
26	ApplicationArgs	[]byte
27	NumAppArgs	uint64
28	Accounts	address
29	NumAccounts	uint64
30	ApprovalProgram	[]byte
31	ClearStateProgram	[]byte
32	RekeyTo	address
33	ConfigAsset	uint64
34	ConfigAssetTotal	uint64
35	ConfigAssetDecimals	uint64
36	ConfigAssetDefaultFrozen	bool
37	ConfigAssetUnitName	[]byte
38	ConfigAssetName	[]byte
39	ConfigAssetURL	[]byte
40	ConfigAssetMetadataHash	[32]byte
41	ConfigAssetManager	address
42	ConfigAssetReserve	address
43	ConfigAssetFreeze	address
44	ConfigAssetClawback	address
45	FreezeAsset	uint64
46	FreezeAssetAccount	address
47	FreezeAssetFrozen	bool
48	Assets	uint64
49	NumAssets	uint64
50	Applications	uint64
51	NumApplications	uint64
52	GlobalNumUint	uint64
53	GlobalNumByteSlice	uint64
54	LocalNumUint	uint64
55	LocalNumByteSlice	uint64
56	ExtraProgramPages	uint64
57	Nonparticipation	bool
58	Logs	[]byte
59	NumLogs	uint64
60	CreatedAssetID	uint64
61	CreatedApplicationID	uint64
62	LastLog	[]byte
63	StateProofPK	[64]byte
64	ApprovalProgramPages	[]byte
65	NumApprovalProgramPages	uint64
66	ClearStateProgramPages	[]byte
67	NumClearStateProgramPages	uint64
68	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

gitxna

Bytecode: 0xb8
Stack Input: -
Stack Output: any
Size: 4
Availability: v6
Cost: 1
Description: Ith value of the array field F from the Tth transaction in the last inner group submitted
Groups: Inner Transactions

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index
I	uint8	transaction field array index

gitxnas

Bytecode: 0xc6
Stack Input: uint64
Stack Output: any
Size: 3
Availability: v6
Cost: 1
Description: Ath value of the array field F from the Tth transaction in the last inner group submitted
Groups: Inner Transactions

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

gload

Bytecode: 0x3a
Stack Input: -
Stack Output: any
Size: 3
Availability: v4
Cost: 1
Description: Ith scratch space value of the Tth transaction in the current group
Groups: Loading Values

Notes gload fails unless the requested transaction is an ApplicationCall and T < GroupIndex.

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
I	uint8	position in scratch space to load from

gloads

Bytecode: 0x3b
Stack Input: uint64
Stack Output: any
Size: 2
Availability: v4
Cost: 1
Description: Ith scratch space value of the Ath transaction in the current group
Groups: Loading Values

Notes gloads fails unless the requested transaction is an ApplicationCall and A < GroupIndex.

Immediate Parameters

Name	Encoding	Description
I	uint8	position in scratch space to load from

gloadss

Bytecode: 0xc4
Stack Input: uint64,uint64
Stack Output: any
Size: 1
Availability: v6
Cost: 1
Description: Bth scratch space value of the Ath transaction in the current group
Groups: Loading Values

global

Bytecode: 0x32
Stack Input: -
Stack Output: any
Size: 2
Availability: v1
Cost: 1
Description: global field F
Groups: Loading Values

Field Reference

Index	Name	Type
0	MinTxnFee	uint64
1	MinBalance	uint64
2	MaxTxnLife	uint64
3	ZeroAddress	address
4	GroupSize	uint64
5	LogicSigVersion	uint64
6	Round	uint64
7	LatestTimestamp	uint64
8	CurrentApplicationID	uint64
9	CreatorAddress	address
10	CurrentApplicationAddress	address
11	GroupID	[32]byte
12	OpcodeBudget	uint64
13	CallerApplicationID	uint64
14	CallerApplicationAddress	address
15	AssetCreateMinBalance	uint64
16	AssetOptInMinBalance	uint64
17	GenesisHash	[32]byte
18	PayoutsEnabled	bool
19	PayoutsGoOnlineFee	uint64
20	PayoutsPercent	uint64
21	PayoutsMinBalance	uint64
22	PayoutsMaxBalance	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	a global field index

gtxn

Bytecode: 0x33
Stack Input: -
Stack Output: any
Size: 3
Availability: v1
Cost: 1
Description: field F of the Tth transaction in the current group
Groups: Loading Values

Notes for notes on transaction fields available, see txn. If this transaction is i in the group, gtxn i field is equivalent to txn field.

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	FirstValid	uint64
3	FirstValidTime	uint64
4	LastValid	uint64
5	Note	[]byte
6	Lease	[32]byte
7	Receiver	address
8	Amount	uint64
9	CloseRemainderTo	address
10	VotePK	[32]byte
11	SelectionPK	[32]byte
12	VoteFirst	uint64
13	VoteLast	uint64
14	VoteKeyDilution	uint64
15	Type	[]byte
16	TypeEnum	uint64
17	XferAsset	uint64
18	AssetAmount	uint64
19	AssetSender	address
20	AssetReceiver	address
21	AssetCloseTo	address
22	GroupIndex	uint64
23	TxID	[32]byte
24	ApplicationID	uint64
25	OnCompletion	uint64
26	ApplicationArgs	[]byte
27	NumAppArgs	uint64
28	Accounts	address
29	NumAccounts	uint64
30	ApprovalProgram	[]byte
31	ClearStateProgram	[]byte
32	RekeyTo	address
33	ConfigAsset	uint64
34	ConfigAssetTotal	uint64
35	ConfigAssetDecimals	uint64
36	ConfigAssetDefaultFrozen	bool
37	ConfigAssetUnitName	[]byte
38	ConfigAssetName	[]byte
39	ConfigAssetURL	[]byte
40	ConfigAssetMetadataHash	[32]byte
41	ConfigAssetManager	address
42	ConfigAssetReserve	address
43	ConfigAssetFreeze	address
44	ConfigAssetClawback	address
45	FreezeAsset	uint64
46	FreezeAssetAccount	address
47	FreezeAssetFrozen	bool
48	Assets	uint64
49	NumAssets	uint64
50	Applications	uint64
51	NumApplications	uint64
52	GlobalNumUint	uint64
53	GlobalNumByteSlice	uint64
54	LocalNumUint	uint64
55	LocalNumByteSlice	uint64
56	ExtraProgramPages	uint64
57	Nonparticipation	bool
58	Logs	[]byte
59	NumLogs	uint64
60	CreatedAssetID	uint64
61	CreatedApplicationID	uint64
62	LastLog	[]byte
63	StateProofPK	[64]byte
64	ApprovalProgramPages	[]byte
65	NumApprovalProgramPages	uint64
66	ClearStateProgramPages	[]byte
67	NumClearStateProgramPages	uint64
68	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

gtxna

Bytecode: 0x37
Stack Input: -
Stack Output: any
Size: 4
Availability: v2
Cost: 1
Description: Ith value of the array field F from the Tth transaction in the current group
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index
I	uint8	transaction field array index

gtxnas

Bytecode: 0xc1
Stack Input: uint64
Stack Output: any
Size: 3
Availability: v5
Cost: 1
Description: Ath value of the array field F from the Tth transaction in the current group
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

gtxns

Bytecode: 0x38
Stack Input: uint64
Stack Output: any
Size: 2
Availability: v3
Cost: 1
Description: field F of the Ath transaction in the current group
Groups: Loading Values

Notes for notes on transaction fields available, see txn. If top of stack is i, gtxns field is equivalent to gtxn _i_ field. gtxns exists so that i can be calculated, often based on the index of the current transaction.

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	FirstValid	uint64
3	FirstValidTime	uint64
4	LastValid	uint64
5	Note	[]byte
6	Lease	[32]byte
7	Receiver	address
8	Amount	uint64
9	CloseRemainderTo	address
10	VotePK	[32]byte
11	SelectionPK	[32]byte
12	VoteFirst	uint64
13	VoteLast	uint64
14	VoteKeyDilution	uint64
15	Type	[]byte
16	TypeEnum	uint64
17	XferAsset	uint64
18	AssetAmount	uint64
19	AssetSender	address
20	AssetReceiver	address
21	AssetCloseTo	address
22	GroupIndex	uint64
23	TxID	[32]byte
24	ApplicationID	uint64
25	OnCompletion	uint64
26	ApplicationArgs	[]byte
27	NumAppArgs	uint64
28	Accounts	address
29	NumAccounts	uint64
30	ApprovalProgram	[]byte
31	ClearStateProgram	[]byte
32	RekeyTo	address
33	ConfigAsset	uint64
34	ConfigAssetTotal	uint64
35	ConfigAssetDecimals	uint64
36	ConfigAssetDefaultFrozen	bool
37	ConfigAssetUnitName	[]byte
38	ConfigAssetName	[]byte
39	ConfigAssetURL	[]byte
40	ConfigAssetMetadataHash	[32]byte
41	ConfigAssetManager	address
42	ConfigAssetReserve	address
43	ConfigAssetFreeze	address
44	ConfigAssetClawback	address
45	FreezeAsset	uint64
46	FreezeAssetAccount	address
47	FreezeAssetFrozen	bool
48	Assets	uint64
49	NumAssets	uint64
50	Applications	uint64
51	NumApplications	uint64
52	GlobalNumUint	uint64
53	GlobalNumByteSlice	uint64
54	LocalNumUint	uint64
55	LocalNumByteSlice	uint64
56	ExtraProgramPages	uint64
57	Nonparticipation	bool
58	Logs	[]byte
59	NumLogs	uint64
60	CreatedAssetID	uint64
61	CreatedApplicationID	uint64
62	LastLog	[]byte
63	StateProofPK	[64]byte
64	ApprovalProgramPages	[]byte
65	NumApprovalProgramPages	uint64
66	ClearStateProgramPages	[]byte
67	NumClearStateProgramPages	uint64
68	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

gtxnsa

Bytecode: 0x39
Stack Input: uint64
Stack Output: any
Size: 3
Availability: v3
Cost: 1
Description: Ith value of the array field F from the Ath transaction in the current group
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	transaction field array index

gtxnsas

Bytecode: 0xc2
Stack Input: uint64,uint64
Stack Output: any
Size: 2
Availability: v5
Cost: 1
Description: Bth value of the array field F from the Ath transaction in the current group
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

intc

Bytecode: 0x21
Stack Input: -
Stack Output: uint64
Size: 2
Availability: v1
Cost: 1
Description: Ith constant from intcblock
Groups: Loading Values

Immediate Parameters

Name	Encoding	Description
I	uint8	an index in the intcblock

intc_0

Bytecode: 0x22
Stack Input: -
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: constant 0 from intcblock
Groups: Loading Values

intc_1

Bytecode: 0x23
Stack Input: -
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: constant 1 from intcblock
Groups: Loading Values

intc_2

Bytecode: 0x24
Stack Input: -
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: constant 2 from intcblock
Groups: Loading Values

intc_3

Bytecode: 0x25
Stack Input: -
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: constant 3 from intcblock
Groups: Loading Values

intcblock

Bytecode: 0x20
Stack Input: -
Stack Output: -
Availability: v1
Cost: 1
Description: prepare block of uint64 constants for use by intc
Groups: Loading Values

Notes intcblock loads following program bytes into an array of integer constants in the evaluator. These integer constants can be referred to by intc and intc_* which will push the value onto the stack. Subsequent calls to intcblock reset and replace the integer constants available to the script.

Immediate Parameters

Name	Encoding	Description
UINT …	varuint count, [varuint …]	a block of int constant values

itob

Bytecode: 0x16
Stack Input: uint64
Stack Output: [8]byte
Size: 1
Availability: v1
Cost: 1
Description: converts uint64 A to big-endian byte array, always of length 8
Groups: Arithmetic

itxn

Bytecode: 0xb4
Stack Input: -
Stack Output: any
Size: 2
Availability: v5
Cost: 1
Description: field F of the last inner transaction
Groups: Inner Transactions

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	FirstValid	uint64
3	FirstValidTime	uint64
4	LastValid	uint64
5	Note	[]byte
6	Lease	[32]byte
7	Receiver	address
8	Amount	uint64
9	CloseRemainderTo	address
10	VotePK	[32]byte
11	SelectionPK	[32]byte
12	VoteFirst	uint64
13	VoteLast	uint64
14	VoteKeyDilution	uint64
15	Type	[]byte
16	TypeEnum	uint64
17	XferAsset	uint64
18	AssetAmount	uint64
19	AssetSender	address
20	AssetReceiver	address
21	AssetCloseTo	address
22	GroupIndex	uint64
23	TxID	[32]byte
24	ApplicationID	uint64
25	OnCompletion	uint64
26	ApplicationArgs	[]byte
27	NumAppArgs	uint64
28	Accounts	address
29	NumAccounts	uint64
30	ApprovalProgram	[]byte
31	ClearStateProgram	[]byte
32	RekeyTo	address
33	ConfigAsset	uint64
34	ConfigAssetTotal	uint64
35	ConfigAssetDecimals	uint64
36	ConfigAssetDefaultFrozen	bool
37	ConfigAssetUnitName	[]byte
38	ConfigAssetName	[]byte
39	ConfigAssetURL	[]byte
40	ConfigAssetMetadataHash	[32]byte
41	ConfigAssetManager	address
42	ConfigAssetReserve	address
43	ConfigAssetFreeze	address
44	ConfigAssetClawback	address
45	FreezeAsset	uint64
46	FreezeAssetAccount	address
47	FreezeAssetFrozen	bool
48	Assets	uint64
49	NumAssets	uint64
50	Applications	uint64
51	NumApplications	uint64
52	GlobalNumUint	uint64
53	GlobalNumByteSlice	uint64
54	LocalNumUint	uint64
55	LocalNumByteSlice	uint64
56	ExtraProgramPages	uint64
57	Nonparticipation	bool
58	Logs	[]byte
59	NumLogs	uint64
60	CreatedAssetID	uint64
61	CreatedApplicationID	uint64
62	LastLog	[]byte
63	StateProofPK	[64]byte
64	ApprovalProgramPages	[]byte
65	NumApprovalProgramPages	uint64
66	ClearStateProgramPages	[]byte
67	NumClearStateProgramPages	uint64
68	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

itxn_begin

Bytecode: 0xb1
Stack Input: -
Stack Output: -
Size: 1
Availability: v5
Cost: 1
Description: begin preparation of a new inner transaction in a new transaction group
Groups: Inner Transactions

Notes itxn_begin initializes Sender to the application address; Fee to the minimum allowable, taking into account MinTxnFee and credit from overpaying in earlier transactions; FirstValid/LastValid to the values in the invoking transaction, and all other fields to zero or empty values.

itxn_field

Bytecode: 0xb2
Stack Input: any
Stack Output: -
Size: 2
Availability: v5
Cost: 1
Description: set field F of the current inner transaction to A
Groups: Inner Transactions

Notes itxn_field fails if A is of the wrong type for F, including a byte array of the wrong size for use as an address when F is an address field. itxn_field also fails if A is an account, asset, or app that is not available, or an attempt is made extend an array field beyond the limit imposed by consensus parameters. (Addresses set into asset params of acfg transactions need not be available.)

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	Note	[]byte
3	Receiver	address
4	Amount	uint64
5	CloseRemainderTo	address
6	VotePK	[32]byte
7	SelectionPK	[32]byte
8	VoteFirst	uint64
9	VoteLast	uint64
10	VoteKeyDilution	uint64
11	Type	[]byte
12	TypeEnum	uint64
13	XferAsset	uint64
14	AssetAmount	uint64
15	AssetSender	address
16	AssetReceiver	address
17	AssetCloseTo	address
18	ApplicationID	uint64
19	OnCompletion	uint64
20	ApplicationArgs	[]byte
21	Accounts	address
22	ApprovalProgram	[]byte
23	ClearStateProgram	[]byte
24	RekeyTo	address
25	ConfigAsset	uint64
26	ConfigAssetTotal	uint64
27	ConfigAssetDecimals	uint64
28	ConfigAssetDefaultFrozen	bool
29	ConfigAssetUnitName	[]byte
30	ConfigAssetName	[]byte
31	ConfigAssetURL	[]byte
32	ConfigAssetMetadataHash	[32]byte
33	ConfigAssetManager	address
34	ConfigAssetReserve	address
35	ConfigAssetFreeze	address
36	ConfigAssetClawback	address
37	FreezeAsset	uint64
38	FreezeAssetAccount	address
39	FreezeAssetFrozen	bool
40	Assets	uint64
41	Applications	uint64
42	GlobalNumUint	uint64
43	GlobalNumByteSlice	uint64
44	LocalNumUint	uint64
45	LocalNumByteSlice	uint64
46	ExtraProgramPages	uint64
47	Nonparticipation	bool
48	StateProofPK	[64]byte
49	ApprovalProgramPages	[]byte
50	ClearStateProgramPages	[]byte
51	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

itxn_next

Bytecode: 0xb6
Stack Input: -
Stack Output: -
Size: 1
Availability: v6
Cost: 1
Description: begin preparation of a new inner transaction in the same transaction group
Groups: Inner Transactions

Notes itxn_next initializes the transaction exactly as itxn_begin does

itxn_submit

Bytecode: 0xb3
Stack Input: -
Stack Output: -
Size: 1
Availability: v5
Cost: 1
Description: execute the current inner transaction group. Fail if executing this group would exceed the inner transaction limit, or if any transaction in the group fails.
Groups: Inner Transactions

Notes itxn_submit resets the current transaction so that it can not be resubmitted. A new itxn_begin is required to prepare another inner transaction.

itxna

Bytecode: 0xb5
Stack Input: -
Stack Output: any
Size: 3
Availability: v5
Cost: 1
Description: Ith value of the array field F of the last inner transaction
Groups: Inner Transactions

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	a transaction field array index

itxnas

Bytecode: 0xc5
Stack Input: uint64
Stack Output: any
Size: 2
Availability: v6
Cost: 1
Description: Ath value of the array field F of the last inner transaction
Groups: Inner Transactions

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

json_ref

Bytecode: 0x5f
Stack Input: []byte,[]byte
Stack Output: any
Size: 2
Availability: v7
Cost: 25 + 2 per 7 bytes of A
Description: key B’s value, of type R, from a valid utf-8 encoded json object A
Groups: Byte Array Manipulation

Notes Warning: Usage should be restricted to very rare use cases, as JSON decoding is expensive and quite limited. In addition, JSON objects are large and not optimized for size.

Almost all smart contracts should use simpler and smaller methods (such as the ABI. This opcode should only be used in cases where JSON is only available option, e.g. when a third-party only signs JSON.

Field Reference

Index	Name	Type
0	JSONString	[]byte
1	JSONUint64	uint64
2	JSONObject	[]byte

Immediate Parameters

Name	Encoding	Description
R	uint8	return type index

keccak256

Bytecode: 0x02
Stack Input: []byte
Stack Output: [32]byte
Size: 1
Availability: v1
Cost: 130
Description: Keccak256 hash of value A, yields [32]byte
Groups: Cryptography

len

Bytecode: 0x15
Stack Input: []byte
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: yields length of byte value A
Groups: Byte Array Manipulation

load

Bytecode: 0x34
Stack Input: -
Stack Output: any
Size: 2
Availability: v1
Cost: 1
Description: Ith scratch space value. All scratch spaces are 0 at program start.
Groups: Loading Values

Immediate Parameters

Name	Encoding	Description
I	uint8	position in scratch space to load from

loads

Bytecode: 0x3e
Stack Input: uint64
Stack Output: any
Size: 1
Availability: v5
Cost: 1
Description: Ath scratch space value. All scratch spaces are 0 at program start.
Groups: Loading Values

log

Bytecode: 0xb0
Stack Input: []byte
Stack Output: -
Size: 1
Availability: v5
Cost: 1
Description: write A to log state of the current application
Groups: Application Access

Notes log fails if called more than MaxLogCalls times in a program, or if the sum of logged bytes exceeds 1024 bytes.

match

Bytecode: 0x8e
Stack Input: any
Stack Output: -
Availability: v8
Cost: 1
Description: given match cases from A[1] to A[N], branch to the Ith label where A[I] = B. Continue to the following instruction if no matches are found.
Groups: Flow Control

Notes match consumes N+1 values from the stack. Let the top stack value be B. The following N values represent an ordered list of match cases/constants (A), where the first value (A[0]) is the deepest in the stack. The immediate arguments are an ordered list of N labels (T). match will branch to target T[I], where A[I] = B. If there are no matches then execution continues on to the next instruction.

Immediate Parameters

Name	Encoding	Description
TARGET …	varuint count, [int16 (big-endian) …]	list of labels

mimc

Bytecode: 0xe6
Stack Input: []byte
Stack Output: [32]byte
Size: 2
Availability: v11
Cost: BN254Mp110=10 + 550 per 32 bytes of A; BLS12_381Mp111=10 + 550 per 32 bytes of A
Description: MiMC hash of scalars A, using curve and parameters specified by configuration C
Groups: Cryptography

Notes A is a non-empty list of concatenated 32 byte big-endian unsigned integer scalars. Fail if A’s length is not a multiple of 32 or any element is greater than or equal to the scalar field modulus.

MiMC hashes field elements, not arbitrary byte strings; reducing external inputs modulo the scalar field modulus makes congruent inputs hash identically. MiMC is thus not a general purpose hash function, but meant to be used in zero knowledge applications to match a zk-circuit implementation.

Field Reference

Index	Name	Type
0	BN254Mp110	-
1	BLS12_381Mp111	-

Immediate Parameters

Name	Encoding	Description
C	uint8	configuration index

min_balance

Bytecode: 0x78
Stack Input: any
Stack Output: uint64
Size: 1
Availability: v3
Cost: 1
Description: minimum required balance for account A, in microalgos. Required balance is affected by ASA, App, and Box usage. When creating or opting into an app, the minimum balance grows before the app code runs, therefore the increase is visible there. When deleting or closing out, the minimum balance decreases after the app executes. Changes caused by inner transactions or box usage are observable immediately following the opcode effecting the change.
Groups: Account Access

Notes params: Txn.Accounts offset (or, since v4, an available account address), available application id (or, since v4, a Txn.ForeignApps offset). Return: value.

mulw

Bytecode: 0x1d
Stack Input: uint64,uint64
Stack Output: uint64,uint64
Size: 1
Availability: v1
Cost: 1
Description: A times B as a 128-bit result in two uint64s. X is the high 64 bits, Y is the low
Groups: Arithmetic

online_stake

Bytecode: 0x75
Stack Input: -
Stack Output: uint64
Size: 1
Availability: v11
Cost: 1
Description: the total online stake in the agreement round
Groups: Block Access

pop

Bytecode: 0x48
Stack Input: any
Stack Output: -
Size: 1
Availability: v1
Cost: 1
Description: discard A
Groups: Flow Control

popn

Bytecode: 0x46
Stack Input: -
Stack Output: -
Size: 2
Availability: v8
Cost: 1
Description: remove N values from the top of the stack
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	stack depth

poseidon2

Bytecode: 0xe7
Stack Input: []byte
Stack Output: [32]byte
Size: 2
Availability: v13
Cost: BN254t2=7 + 350 per 32 bytes of A; BLS12_381t2=7 + 350 per 32 bytes of A
Description: Poseidon2 hash of scalars A, using curve and parameters specified by configuration C
Groups: Cryptography

Poseidon2 hashes field elements, not arbitrary byte strings; reducing external inputs modulo the scalar field modulus makes congruent inputs hash identically. Poseidon2 is thus not a general purpose hash function, but meant to be used in zero knowledge applications to match a zk-circuit implementation.

Field Reference

Index	Name	Type
0	BN254t2	-
1	BLS12_381t2	-

Immediate Parameters

Name	Encoding	Description
C	uint8	configuration index

proto

Bytecode: 0x8a
Stack Input: -
Stack Output: -
Size: 3
Availability: v8
Cost: 1
Description: Prepare top call frame for a retsub that will assume A args and R return values.
Groups: Flow Control

Notes Fails unless the last instruction executed was a callsub.

Immediate Parameters

Name	Encoding	Description
A	uint8	number of arguments
R	uint8	number of return values

pushbytes

Bytecode: 0x80
Stack Input: -
Stack Output: []byte
Availability: v3
Cost: 1
Description: immediate BYTES
Groups: Loading Values

Notes pushbytes args are not added to the bytecblock during assembly processes

Immediate Parameters

Name	Encoding	Description
BYTES	varuint length, bytes	a byte constant

pushbytess

Bytecode: 0x82
Stack Input: -
Stack Output: -
Availability: v8
Cost: 1
Description: push sequences of immediate byte arrays to stack (first byte array being deepest)
Groups: Loading Values

Notes pushbytess args are not added to the bytecblock during assembly processes

Immediate Parameters

Name	Encoding	Description
BYTES …	varuint count, [varuint length, bytes …]	a list of byte constants

pushint

Bytecode: 0x81
Stack Input: -
Stack Output: uint64
Availability: v3
Cost: 1
Description: immediate UINT
Groups: Loading Values

Notes pushint args are not added to the intcblock during assembly processes

Immediate Parameters

Name	Encoding	Description
UINT	varuint	an int constant

pushints

Bytecode: 0x83
Stack Input: -
Stack Output: -
Availability: v8
Cost: 1
Description: push sequence of immediate uints to stack in the order they appear (first uint being deepest)
Groups: Loading Values

Notes pushints args are not added to the intcblock during assembly processes

Immediate Parameters

Name	Encoding	Description
UINT …	varuint count, [varuint …]	a list of int constants

replace2

Bytecode: 0x5c
Stack Input: []byte,[]byte
Stack Output: []byte
Size: 2
Availability: v7
Cost: 1
Description: Copy of A with the bytes starting at S replaced by the bytes of B. Fails if S+len(B) exceeds len(A)
Groups: Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position

replace3

Bytecode: 0x5d
Stack Input: []byte,uint64,[]byte
Stack Output: []byte
Size: 1
Availability: v7
Cost: 1
Description: Copy of A with the bytes starting at B replaced by the bytes of C. Fails if B+len(C) exceeds len(A)
Groups: Byte Array Manipulation

retsub

Bytecode: 0x89
Stack Input: -
Stack Output: -
Size: 1
Availability: v4
Cost: 1
Description: pop the top instruction from the call stack and branch to it
Groups: Flow Control

Notes If the current frame was prepared by proto A R, retsub will remove the ‘A’ arguments from the stack, move the R return values down, and pop any stack locations above the relocated return values.

return

Bytecode: 0x43
Stack Input: uint64
Stack Output: -
Size: 1
Availability: v2
Cost: 1
Description: use A as success value; end
Groups: Flow Control

select

Bytecode: 0x4d
Stack Input: any,any,uint64
Stack Output: any
Size: 1
Availability: v3
Cost: 1
Description: selects one of two values based on top-of-stack: B if C != 0, else A
Groups: Flow Control

setbit

Bytecode: 0x54
Stack Input: any,uint64,uint64
Stack Output: any
Size: 1
Availability: v3
Cost: 1
Description: Copy of (byte-array or integer) A, with the Bth bit set to (0 or 1) C. If B is greater than or equal to the bit length of the value (8*byte length), the program fails
Groups: Byte Array Manipulation

Notes When A is a uint64, index 0 is the least significant bit. Setting bit 3 to 1 on the integer 0 yields 8, or 2^3. When A is a byte array, index 0 is the leftmost bit of the leftmost byte. Setting bits 0 through 11 to 1 in a 4-byte-array of 0s yields the byte array 0xfff00000. Setting bit 3 to 1 on the 1-byte-array 0x00 yields the byte array 0x10.

setbyte

Bytecode: 0x56
Stack Input: []byte,uint64,uint64
Stack Output: []byte
Size: 1
Availability: v3
Cost: 1
Description: Copy of A with the Bth byte set to small integer (between 0..255) C. If B is greater than or equal to the array length, the program fails
Groups: Byte Array Manipulation

sha256

Bytecode: 0x01
Stack Input: []byte
Stack Output: [32]byte
Size: 1
Availability: v1
Cost: 35
Description: SHA256 hash of value A, yields [32]byte
Groups: Cryptography

sha3_256

Bytecode: 0x98
Stack Input: []byte
Stack Output: [32]byte
Size: 1
Availability: v7
Cost: 130
Description: SHA3_256 hash of value A, yields [32]byte
Groups: Cryptography

sha512

Bytecode: 0x87
Stack Input: []byte
Stack Output: [64]byte
Size: 1
Availability: v13
Cost: 15 + 2 per 32 bytes of A
Description: SHA512 of value A, yields [64]byte
Groups: Cryptography

sha512_256

Bytecode: 0x03
Stack Input: []byte
Stack Output: [32]byte
Size: 1
Availability: v1
Cost: 45
Description: SHA512_256 hash of value A, yields [32]byte
Groups: Cryptography

shl

Bytecode: 0x90
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v4
Cost: 1
Description: A times 2^B, modulo 2^64
Groups: Arithmetic

shr

Bytecode: 0x91
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v4
Cost: 1
Description: A divided by 2^B
Groups: Arithmetic

sqrt

Bytecode: 0x92
Stack Input: uint64
Stack Output: uint64
Size: 1
Availability: v4
Cost: 4
Description: The largest integer I such that I^2 <= A
Groups: Arithmetic

store

Bytecode: 0x35
Stack Input: any
Stack Output: -
Size: 2
Availability: v1
Cost: 1
Description: store A to the Ith scratch space
Groups: Loading Values

Immediate Parameters

Name	Encoding	Description
I	uint8	position in scratch space to store to

stores

Bytecode: 0x3f
Stack Input: uint64,any
Stack Output: -
Size: 1
Availability: v5
Cost: 1
Description: store B to the Ath scratch space
Groups: Loading Values

substring

Bytecode: 0x51
Stack Input: []byte
Stack Output: []byte
Size: 3
Availability: v2
Cost: 1
Description: A range of bytes from A starting at S up to but not including E. If E < S, or either is larger than the array length, the program fails
Groups: Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position
E	uint8	end position

substring3

Bytecode: 0x52
Stack Input: []byte,uint64,uint64
Stack Output: []byte
Size: 1
Availability: v2
Cost: 1
Description: A range of bytes from A starting at B up to but not including C. If C < B, or either is larger than the array length, the program fails
Groups: Byte Array Manipulation

swap

Bytecode: 0x4c
Stack Input: any,any
Stack Output: any,any
Size: 1
Availability: v3
Cost: 1
Description: swaps A and B on stack
Groups: Flow Control

switch

Bytecode: 0x8d
Stack Input: uint64
Stack Output: -
Availability: v8
Cost: 1
Description: branch to the Ath label. Continue at following instruction if index A exceeds the number of labels.
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET …	varuint count, [int16 (big-endian) …]	list of labels

txn

Bytecode: 0x31
Stack Input: -
Stack Output: any
Size: 2
Availability: v1
Cost: 1
Description: field F of current transaction
Groups: Loading Values

Field Reference

Index	Name	Type
0	Sender	address
1	Fee	uint64
2	FirstValid	uint64
3	FirstValidTime	uint64
4	LastValid	uint64
5	Note	[]byte
6	Lease	[32]byte
7	Receiver	address
8	Amount	uint64
9	CloseRemainderTo	address
10	VotePK	[32]byte
11	SelectionPK	[32]byte
12	VoteFirst	uint64
13	VoteLast	uint64
14	VoteKeyDilution	uint64
15	Type	[]byte
16	TypeEnum	uint64
17	XferAsset	uint64
18	AssetAmount	uint64
19	AssetSender	address
20	AssetReceiver	address
21	AssetCloseTo	address
22	GroupIndex	uint64
23	TxID	[32]byte
24	ApplicationID	uint64
25	OnCompletion	uint64
26	ApplicationArgs	[]byte
27	NumAppArgs	uint64
28	Accounts	address
29	NumAccounts	uint64
30	ApprovalProgram	[]byte
31	ClearStateProgram	[]byte
32	RekeyTo	address
33	ConfigAsset	uint64
34	ConfigAssetTotal	uint64
35	ConfigAssetDecimals	uint64
36	ConfigAssetDefaultFrozen	bool
37	ConfigAssetUnitName	[]byte
38	ConfigAssetName	[]byte
39	ConfigAssetURL	[]byte
40	ConfigAssetMetadataHash	[32]byte
41	ConfigAssetManager	address
42	ConfigAssetReserve	address
43	ConfigAssetFreeze	address
44	ConfigAssetClawback	address
45	FreezeAsset	uint64
46	FreezeAssetAccount	address
47	FreezeAssetFrozen	bool
48	Assets	uint64
49	NumAssets	uint64
50	Applications	uint64
51	NumApplications	uint64
52	GlobalNumUint	uint64
53	GlobalNumByteSlice	uint64
54	LocalNumUint	uint64
55	LocalNumByteSlice	uint64
56	ExtraProgramPages	uint64
57	Nonparticipation	bool
58	Logs	[]byte
59	NumLogs	uint64
60	CreatedAssetID	uint64
61	CreatedApplicationID	uint64
62	LastLog	[]byte
63	StateProofPK	[64]byte
64	ApprovalProgramPages	[]byte
65	NumApprovalProgramPages	uint64
66	ClearStateProgramPages	[]byte
67	NumClearStateProgramPages	uint64
68	RejectVersion	uint64

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

txna

Bytecode: 0x36
Stack Input: -
Stack Output: any
Size: 3
Availability: v2
Cost: 1
Description: Ith value of the array field F of the current transaction
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	transaction field array index

txnas

Bytecode: 0xc0
Stack Input: uint64
Stack Output: any
Size: 2
Availability: v5
Cost: 1
Description: Ath value of the array field F of the current transaction
Groups: Loading Values

Field Reference

Index	Name	Type
0	ApplicationArgs	[]byte
1	Accounts	address
2	Assets	uint64
3	Applications	uint64
4	Logs	[]byte
5	ApprovalProgramPages	[]byte
6	ClearStateProgramPages	[]byte

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

uncover

Bytecode: 0x4f
Stack Input: any
Stack Output: any
Size: 2
Availability: v5
Cost: 1
Description: remove the value at depth N in the stack and shift above items down so the Nth deep value is on top of the stack. Fails if stack depth <= N.
Groups: Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

voter_params_get

Bytecode: 0x74
Stack Input: any
Stack Output: any,bool
Size: 2
Availability: v11
Cost: 1
Description: X is field F from online account A as of the balance round: 320 rounds before the current round. Y is 1 if A had positive algos online in the agreement round, else Y is 0 and X is a type specific zero-value
Groups: Account Access

Field Reference

Index	Name	Type
0	VoterBalance	uint64
1	VoterIncentiveEligible	bool

Immediate Parameters

Name	Encoding	Description
F	uint8	voter params field index

vrf_verify

Bytecode: 0xd0
Stack Input: []byte,[80]byte,[32]byte
Stack Output: [64]byte,bool
Size: 2
Availability: v7
Cost: 5700
Description: Verify the proof B of message A against pubkey C. Returns vrf output and verification flag.
Groups: Cryptography

Notes VrfAlgorand is the VRF used in Algorand. It is ECVRF-ED25519-SHA512-Elligator2, specified in the IETF internet draft draft-irtf-cfrg-vrf-03.

Field Reference

Index	Name	Type
0	VrfAlgorand	-

Immediate Parameters

Name	Encoding	Description
S	uint8	parameters index

|

Bytecode: 0x19
Stack Input: uint64,uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: A bitwise-or B
Groups: Arithmetic

||

Bytecode: 0x11
Stack Input: uint64,uint64
Stack Output: bool
Size: 1
Availability: v1
Cost: 1
Description: A is not zero or B is not zero => {0 or 1}
Groups: Arithmetic

~

Bytecode: 0x1c
Stack Input: uint64
Stack Output: uint64
Size: 1
Availability: v1
Cost: 1
Description: bitwise invert value A
Groups: Arithmetic