AVM Opcodes

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x09	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x14	uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x13	any,any	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0b	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0a	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1a	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x10	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x18	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1b	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x08	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0c	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0e	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x12	any,any	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0d	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x0f	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x19	uint64,uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x11	uint64,uint64	bool	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1c	uint64	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x73	any	any,bool	2	v6	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1e	uint64,uint64	uint64,uint64	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x69	stateKey	-	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x64	stateKey	any	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x65	uint64,stateKey	any,bool	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x67	stateKey,any	-	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x68	any,stateKey	-	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x62	any,stateKey	any	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x63	any,uint64,stateKey	any,bool	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x66	any,stateKey,any	-	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x61	any,uint64	bool	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x72	uint64	any,bool	2	v5	1

Description X is field F from app A. Y is 1 if A exists, else 0

Notes params: Txn.ForeignApps offset or an available app id. Return: did_exist flag (1 if the application existed and 0 otherwise), value.

Groups State Access

Immediate Parameters

Name	Encoding	Description
F	uint8	app params field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2c	-	[]byte	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2d	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2e	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2f	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x30	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc3	uint64	[]byte	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x44	uint64	-	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x70	any,uint64	any,bool	2	v2	1

Description X is field F from account A’s holding of asset B. Y is 1 if A is opted into B, else 0

Notes params: Txn.Accounts offset (or, since v4, an available address), asset id (or, since v4, a Txn.ForeignAssets offset). Return: did_exist flag (1 if the asset existed and 0 otherwise), value.

Groups State Access

Immediate Parameters

Name	Encoding	Description
F	uint8	asset holding field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x71	uint64	any,bool	2	v2	1

Description X is field F from asset A. Y is 1 if A exists, else 0

Notes params: Txn.ForeignAssets offset (or, since v4, an available asset id. Return: did_exist flag (1 if the asset existed and 0 otherwise), value.

Groups State Access

Immediate Parameters

Name	Encoding	Description
F	uint8	asset params field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x42	-	-	3	v2	1

Description branch unconditionally to TARGET

Notes See bnz for details on how branches work. b always jumps to the offset.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa1	bigint,bigint	bigint	1	v4	10

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa9	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa3	bigint,bigint	[]byte	1	v4	20

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa2	bigint,bigint	bigint	1	v4	20

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xac	[]byte,[]byte	[]byte	1	v4	6

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xaa	bigint,bigint	bigint	1	v4	20

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xad	[]byte,[]byte	[]byte	1	v4	6

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa0	bigint,bigint	[]byte	1	v4	10

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa4	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa6	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa8	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa5	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xa7	bigint,bigint	bool	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xab	[]byte,[]byte	[]byte	1	v4	6

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xae	[]byte	[]byte	1	v4	4

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x60	any	uint64	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5e	[]byte	[]byte	2	v7	1 + 1 per 16 bytes of A

Description decode A which was base64-encoded using encoding E. Fail if A is not base64 encoded with encoding E

Notes Warning: Usage should be restricted to very rare use cases. In almost all cases, smart contracts should directly handle non-encoded byte-strings. This opcode should only be used in cases where base64 is the only available option, e.g. interoperability with a third-party that only signs base64 strings.

Decodes A using the base64 encoding E. Specify the encoding with an immediate arg either as URL and Filename Safe (URLEncoding) or Standard (StdEncoding). See RFC 4648 sections 4 and 5. It is assumed that the encoding ends with the exact number of = padding characters as required by the RFC. When padding occurs, any unused pad bits in the encoding must be set to zero or the decoding will fail. The special cases of \n and \r are allowed but completely ignored. An error will result when attempting to decode a string with a character that is not in the encoding alphabet or not one of =, \r, or \n.

Groups Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
E	uint8	encoding index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x93	any	uint64	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xd1	uint64	any	2	v7	1

Description field F of block A. Fail unless A falls between txn.LastValid-1002 and txn.FirstValid (exclusive)

Groups State Access

Immediate Parameters

Name	Encoding	Description
F	uint8	block field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x40	uint64	-	3	v1	1

Description branch to TARGET if value A is not zero

Notes The bnz instruction opcode 0x40 is followed by two immediate data bytes which are a high byte first and low byte second which together form a 16 bit offset which the instruction may branch to. For a bnz instruction at pc, if the last element of the stack is not zero then branch to instruction at pc + 3 + N, else proceed to next instruction at pc + 3. Branch targets must be aligned instructions. (e.g. Branching to the second byte of a 2 byte op will be rejected.) Starting at v4, the offset is treated as a signed 16 bit integer allowing for backward branches and looping. In prior version (v1 to v3), branch offsets are limited to forward branches only, 0-0x7fff.

At v2 it became allowed to branch to the end of the program exactly after the last instruction: bnz to byte N (with 0-indexing) was illegal for a TEAL program with N bytes before v2, and is legal after it. This change eliminates the need for a last instruction of no-op as a branch target at the end. (Branching beyond the end—in other words, to a byte larger than N—is still illegal and will cause the program to fail.)

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb9	boxName,uint64	bool	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xbc	boxName	bool	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xba	boxName,uint64,uint64	[]byte	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xbe	boxName	[]byte,bool	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xbd	boxName	uint64,bool	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xbf	boxName,[]byte	-	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xbb	boxName,uint64,[]byte	-	1	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xd3	boxName,uint64	-	1	v10	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xd2	boxName,uint64,uint64,[]byte	-	1	v10	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x96	bigint	bigint	1	v6	40

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x17	[]byte	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x45	any	-	2	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x27	-	[]byte	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x28	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x29	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2a	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x2b	-	[]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x26	-	-	0	v1	1

Description prepare block of byte-array constants for use by bytec

Notes bytecblock loads the following program bytes into an array of byte-array constants in the evaluator. These constants can be referred to by bytec and bytec_* which will push the value onto the stack. Subsequent calls to bytecblock reset and replace the bytes constants available to the script.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
BYTES …	varuint count, [varuint length, bytes …]	a block of byte constant values

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x41	uint64	-	3	v2	1

Description branch to TARGET if value A is zero

Notes See bnz for details on how branches work. bz inverts the behavior of bnz.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xaf	uint64	[]byte	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x88	-	-	3	v4	1

Description branch unconditionally to TARGET, saving the next instruction on the call stack

Notes The call stack is separate from the data stack. Only callsub, retsub, and proto manipulate it.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET	int16 (big-endian)	branch offset

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x50	[]byte,[]byte	[]byte	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4e	any	any	2	v5	1

Description remove top of stack, and place it deeper in the stack such that N elements are above it. Fails if stack depth <= N.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4b	any	any,any	2	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1f	uint64,uint64,uint64,uint64	uint64,uint64,uint64,uint64	1	v4	20

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x97	uint64,uint64,uint64	uint64	1	v6	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x49	any	any,any	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4a	any,any	any,any,any,any	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x47	any	-	2	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe0	[]byte,[]byte	[]byte	2	v10	BN254g1=125; BN254g2=170; BLS12_381g1=205; BLS12_381g2=290

Description for curve points A and B, return the curve point A + B

Notes A and B are curve points in affine representation: field element X concatenated with field element Y. Field element Z is encoded as follows.
For the base field elements (Fp), Z is encoded as a big-endian number and must be lower than the field modulus.
For the quadratic field extension (Fp2), Z is encoded as the concatenation of the individual encoding of the coefficients. For an Fp2 element of the form Z = Z0 + Z1 i, where i is a formal quadratic non-residue, the encoding of Z is the concatenation of the encoding of Z0 and Z1 in this order. (Z0 and Z1 must be less than the field modulus).

The point at infinity is encoded as (X,Y) = (0,0).
Groups G1 and G2 are denoted additively.

Fails if A or B is not in G.
A and/or B are allowed to be the point at infinity.
Does not check if A and B are in the main prime-order subgroup.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe5	[]byte	[]byte	2	v10	BN254g1=630; BN254g2=3300; BLS12_381g1=1950; BLS12_381g2=8150

Description maps field element A to group G

Notes BN254 points are mapped by the SVDW map. BLS12-381 points are mapped by the SSWU map.
G1 element inputs are base field elements and G2 element inputs are quadratic field elements, with nearly the same encoding rules (for field elements) as defined in ec_add. There is one difference of encoding rule: G1 element inputs do not need to be 0-padded if they fit in less than 32 bytes for BN254 and less than 48 bytes for BLS12-381. (As usual, the empty byte array represents 0.) G2 elements inputs need to be always have the required size.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe3	[]byte,[]byte	[]byte	2	v10	BN254g1=3600 + 90 per 32 bytes of B; BN254g2=7200 + 270 per 32 bytes of B; BLS12_381g1=6500 + 95 per 32 bytes of B; BLS12_381g2=14850 + 485 per 32 bytes of B

Description for curve points A and scalars B, return curve point B0A0 + B1A1 + B2A2 + … + BnAn

Notes A is a list of concatenated points, encoded and checked as described in ec_add. B is a list of concatenated scalars which, unlike ec_scalar_mul, must all be exactly 32 bytes long.
The name ec_multi_scalar_mul was chosen to reflect common usage, but a more consistent name would be ec_multi_scalar_mul. AVM values are limited to 4096 bytes, so ec_multi_scalar_mul is limited by the size of the points in the group being operated upon.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe2	[]byte,[]byte	bool	2	v10	BN254g1=8000 + 7400 per 64 bytes of B; BN254g2=8000 + 7400 per 128 bytes of B; BLS12_381g1=13000 + 10000 per 96 bytes of B; BLS12_381g2=13000 + 10000 per 192 bytes of B

Description 1 if the product of the pairing of each point in A with its respective point in B is equal to the identity element of the target group Gt, else 0

Notes A and B are concatenated points, encoded and checked as described in ec_add. A contains points of the group G, B contains points of the associated group (G2 if G is G1, and vice versa). Fails if A and B have a different number of points, or if any point is not in its described group or outside the main prime-order subgroup - a stronger condition than other opcodes. AVM values are limited to 4096 bytes, so ec_pairing_check is limited by the size of the points in the groups being operated upon.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe1	[]byte,[]byte	[]byte	2	v10	BN254g1=1810; BN254g2=3430; BLS12_381g1=2950; BLS12_381g2=6530

Description for curve point A and scalar B, return the curve point BA, the point A multiplied by the scalar B.

Notes A is a curve point encoded and checked as described in ec_add. Scalar B is interpreted as a big-endian unsigned integer. Fails if B exceeds 32 bytes.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe4	[]byte	bool	2	v10	BN254g1=20; BN254g2=3100; BLS12_381g1=1850; BLS12_381g2=2340

Description 1 if A is in the main prime-order subgroup of G (including the point at infinity) else 0. Program fails if A is not in G at all.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
G	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x06	[33]byte	[32]byte,[32]byte	2	v5	Secp256k1=650; Secp256r1=2400

Description decompress pubkey A into components X, Y

Notes The 33 byte public key in a compressed form to be decompressed into X and Y (top) components. All values are big-endian encoded.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x07	[32]byte,uint64,[32]byte,[32]byte	[32]byte,[32]byte	2	v5	2000

Description for (data A, recovery id B, signature C, D) recover a public key

Notes S (top) and R elements of a signature, recovery id and data (bottom) are expected on the stack and used to deriver a public key. All values are big-endian encoded. The signed data must be 32 bytes long.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x05	[32]byte,[32]byte,[32]byte,[32]byte,[32]byte	bool	2	v5	Secp256k1=1700; Secp256r1=2500

Description for (data A, signature B, C and pubkey D, E) verify the signature of the data against the pubkey => {0 or 1}

Notes The 32 byte Y-component of a public key is the last element on the stack, preceded by X-component of a pubkey, preceded by S and R components of a signature, preceded by the data that is fifth element on the stack. All values are big-endian encoded. The signed data must be 32 bytes long, and signatures in lower-S form are only accepted.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
V	uint8	curve index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x04	[]byte,[64]byte,[32]byte	bool	1	v1	1900

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x84	[]byte,[64]byte,[32]byte	bool	1	v7	1900

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x00	-	-	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x94	uint64,uint64	uint64	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x95	uint64,uint64	uint64,uint64	1	v4	10

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x57	[]byte	[]byte	3	v5	1

Description A range of bytes from A starting at S up to but not including S+L. If L is 0, then extract to the end of the string. If S or S+L is larger than the array length, the program fails

Groups Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position
L	uint8	length

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x59	[]byte,uint64	uint64	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5a	[]byte,uint64	uint64	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5b	[]byte,uint64	uint64	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x58	[]byte,uint64,uint64	[]byte	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x8c	any	-	2	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x8b	-	any	2	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3c	-	uint64	2	v4	1

Description ID of the asset or application created in the Tth transaction of the current group

Notes gaid fails unless the requested transaction created an asset or application and T < GroupIndex.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3d	uint64	uint64	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x53	any,uint64	uint64	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x55	[]byte,uint64	uint64	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb7	-	any	3	v6	1

Description field F of the Tth transaction in the last inner group submitted

Groups Inner Transactions

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb8	-	any	4	v6	1

Description Ith value of the array field F from the Tth transaction in the last inner group submitted

Groups Inner Transactions

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index
I	uint8	transaction field array index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc6	uint64	any	3	v6	1

Description Ath value of the array field F from the Tth transaction in the last inner group submitted

Groups Inner Transactions

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3a	-	any	3	v4	1

Description Ith scratch space value of the Tth transaction in the current group

Notes gload fails unless the requested transaction is an ApplicationCall and T < GroupIndex.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
I	uint8	position in scratch space to load from

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3b	uint64	any	2	v4	1

Description Ith scratch space value of the Ath transaction in the current group

Notes gloads fails unless the requested transaction is an ApplicationCall and A < GroupIndex.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
I	uint8	position in scratch space to load from

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc4	uint64,uint64	any	1	v6	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x32	-	any	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x33	-	any	3	v1	1

Description field F of the Tth transaction in the current group

Notes for notes on transaction fields available, see txn. If this transaction is i in the group, gtxn i field is equivalent to txn field.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x37	-	any	4	v2	1

Description Ith value of the array field F from the Tth transaction in the current group
gtxna can be called using gtxn with 3 immediates.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index
I	uint8	transaction field array index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc1	uint64	any	3	v5	1

Description Ath value of the array field F from the Tth transaction in the current group

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
T	uint8	transaction group index
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x38	uint64	any	2	v3	1

Description field F of the Ath transaction in the current group

Notes for notes on transaction fields available, see txn. If top of stack is i, gtxns field is equivalent to gtxn _i_ field. gtxns exists so that i can be calculated, often based on the index of the current transaction.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x39	uint64	any	3	v3	1

Description Ith value of the array field F from the Ath transaction in the current group
gtxnsa can be called using gtxns with 2 immediates.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	transaction field array index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc2	uint64,uint64	any	2	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x21	-	uint64	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x22	-	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x23	-	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x24	-	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x25	-	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x20	-	-	0	v1	1

Description prepare block of uint64 constants for use by intc

Notes intcblock loads following program bytes into an array of integer constants in the evaluator. These integer constants can be referred to by intc and intc_* which will push the value onto the stack. Subsequent calls to intcblock reset and replace the integer constants available to the script.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
UINT …	varuint count, [varuint …]	a block of int constant values

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x16	uint64	[8]byte	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb4	-	any	2	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb1	-	-	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb2	any	-	2	v5	1

Description set field F of the current inner transaction to A

Notes itxn_field fails if A is of the wrong type for F, including a byte array of the wrong size for use as an address when F is an address field. itxn_field also fails if A is an account, asset, or app that is not available, or an attempt is made extend an array field beyond the limit imposed by consensus parameters. (Addresses set into asset params of acfg transactions need not be available.)

Groups Inner Transactions

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb6	-	-	1	v6	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb3	-	-	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb5	-	any	3	v5	1

Description Ith value of the array field F of the last inner transaction

Groups Inner Transactions

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	a transaction field array index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc5	uint64	any	2	v6	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5f	[]byte,[]byte	any	2	v7	25 + 2 per 7 bytes of A

Description key B’s value, of type R, from a valid utf-8 encoded json object A

Notes Warning: Usage should be restricted to very rare use cases, as JSON decoding is expensive and quite limited. In addition, JSON objects are large and not optimized for size.

Almost all smart contracts should use simpler and smaller methods (such as the ABI. This opcode should only be used in cases where JSON is only available option, e.g. when a third-party only signs JSON.

Groups Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
R	uint8	return type index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x02	[]byte	[32]byte	1	v1	130

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x15	[]byte	uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x34	-	any	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3e	uint64	any	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xb0	[]byte	-	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x8e	-	-	0	v8	1

Description given match cases from A[1] to A[N], branch to the Ith label where A[I] = B. Continue to the following instruction if no matches are found.

Notes match consumes N+1 values from the stack. Let the top stack value be B. The following N values represent an ordered list of match cases/constants (A), where the first value (A[0]) is the deepest in the stack. The immediate arguments are an ordered list of N labels (T). match will branch to target T[I], where A[I] = B. If there are no matches then execution continues on to the next instruction.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET …	varuint count, [int16 (big-endian) …]	list of labels

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xe6	[]byte	[32]byte	2	v11	BN254Mp110=10 + 550 per 32 bytes of A; BLS12_381Mp111=10 + 550 per 32 bytes of A

Description MiMC hash of scalars A, using curve and parameters specified by configuration C

Notes A is a list of concatenated 32 byte big-endian unsigned integer scalars. Fail if A’s length is not a multiple of 32 or any element exceeds the curve modulus.

The MiMC hash function has known collisions since any input which is a multiple of the elliptic curve modulus will hash to the same value. MiMC is thus not a general purpose hash function, but meant to be used in zero knowledge applications to match a zk-circuit implementation.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
C	uint8	configuration index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x78	any	uint64	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x1d	uint64,uint64	uint64,uint64	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x75	-	uint64	1	v11	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x48	any	-	1	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x46	-	-	2	v8	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x8a	-	-	3	v8	1

Description Prepare top call frame for a retsub that will assume A args and R return values.

Notes Fails unless the last instruction executed was a callsub.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
A	uint8	number of arguments
R	uint8	number of return values

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x80	-	[]byte	0	v3	1

Description immediate BYTES

Notes pushbytes args are not added to the bytecblock during assembly processes

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
BYTES	varuint length, bytes	a byte constant

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x82	-	-	0	v8	1

Description push sequences of immediate byte arrays to stack (first byte array being deepest)

Notes pushbytess args are not added to the bytecblock during assembly processes

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
BYTES …	varuint count, [varuint length, bytes …]	a list of byte constants

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x81	-	uint64	0	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x83	-	-	0	v8	1

Description push sequence of immediate uints to stack in the order they appear (first uint being deepest)

Notes pushints args are not added to the intcblock during assembly processes

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
UINT …	varuint count, [varuint …]	a list of int constants

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5c	[]byte,[]byte	[]byte	2	v7	1

Description Copy of A with the bytes starting at S replaced by the bytes of B. Fails if S+len(B) exceeds len(A)
replace2 can be called using replace with 1 immediate.

Groups Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x5d	[]byte,uint64,[]byte	[]byte	1	v7	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x89	-	-	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x43	uint64	-	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4d	any,any,uint64	any	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x54	any,uint64,uint64	any	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x56	[]byte,uint64,uint64	[]byte	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x01	[]byte	[32]byte	1	v1	35

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x98	[]byte	[32]byte	1	v7	130

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x03	[]byte	[32]byte	1	v1	45

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x90	uint64,uint64	uint64	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x91	uint64,uint64	uint64	1	v4	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x92	uint64	uint64	1	v4	4

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x35	any	-	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x3f	uint64,any	-	1	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x51	[]byte	[]byte	3	v2	1

Description A range of bytes from A starting at S up to but not including E. If E < S, or either is larger than the array length, the program fails

Groups Byte Array Manipulation

Immediate Parameters

Name	Encoding	Description
S	uint8	start position
E	uint8	end position

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x52	[]byte,uint64,uint64	[]byte	1	v2	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4c	any,any	any,any	1	v3	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x8d	uint64	-	0	v8	1

Description branch to the Ath label. Continue at following instruction if index A exceeds the number of labels.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
TARGET …	varuint count, [int16 (big-endian) …]	list of labels

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x31	-	any	2	v1	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x36	-	any	3	v2	1

Description Ith value of the array field F of the current transaction
txna can be called using txn with 2 immediates.

Groups Loading Values

Immediate Parameters

Name	Encoding	Description
F	uint8	transaction field index
I	uint8	transaction field array index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xc0	uint64	any	2	v5	1

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x4f	any	any	2	v5	1

Description remove the value at depth N in the stack and shift above items down so the Nth deep value is on top of the stack. Fails if stack depth <= N.

Groups Flow Control

Immediate Parameters

Name	Encoding	Description
N	uint8	depth

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0x74	any	any,bool	2	v11	1

Description X is field F from online account A as of the balance round: 320 rounds before the current round. Y is 1 if A had positive algos online in the agreement round, else Y is 0 and X is a type specific zero-value

Groups State Access

Immediate Parameters

Name	Encoding	Description
F	uint8	voter params field index

Bytecode	Stack Input	Stack Output	Size	Availability	Cost
0xd0	[]byte,[80]byte,[32]byte	[64]byte,bool	2	v7	5700

Description Verify the proof B of message A against pubkey C. Returns vrf output and verification flag.

Notes VrfAlgorand is the VRF used in Algorand. It is ECVRF-ED25519-SHA512-Elligator2, specified in the IETF internet draft draft-irtf-cfrg-vrf-03.

Groups Cryptography

Immediate Parameters

Name	Encoding	Description
S	uint8	parameters index

AVM Opcodes

-

!

!=

*

/

&

&&

%

^

+

<

<=

==

>

>=

|

||

~

acct_params_get

addw

app_global_del

app_global_get

app_global_get_ex

app_global_put

app_local_del

app_local_get

app_local_get_ex

app_local_put

app_opted_in

app_params_get

arg

arg_0

arg_1

arg_2

arg_3

args

assert

asset_holding_get

asset_params_get

b

b-

b!=

b*

b/

b&

b%

b^

b+

b<

b<=

b==

b>

b>=

b|

b~

balance

base64_decode

bitlen

block

bnz

box_create

box_del

box_extract

box_get

box_len

box_put

box_replace

box_resize

box_splice

bsqrt

btoi

bury

bytec

bytec_0

bytec_1

bytec_2

bytec_3

bytecblock

bz