diff --git a/Dockerfile b/Dockerfile
index 37c1020a42..d7b4a5415b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -249,7 +249,10 @@ COPY --from=node-builder /workspace/target/bin/nitro /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/relay /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/nitro-val /usr/local/bin/
 COPY --from=node-builder /workspace/target/bin/seq-coordinator-manager /usr/local/bin/
+COPY --from=node-builder /workspace/target/bin/prover /usr/local/bin/
 COPY --from=machine-versions /workspace/machines /home/user/target/machines
+COPY ./scripts/validate-wasm-module-root.sh .
+RUN ./validate-wasm-module-root.sh /home/user/target/machines /usr/local/bin/prover
 USER root
 RUN export DEBIAN_FRONTEND=noninteractive && \
     apt-get update && \
diff --git a/arbitrator/prover/src/main.rs b/arbitrator/prover/src/main.rs
index 9ddd5020c8..006458b597 100644
--- a/arbitrator/prover/src/main.rs
+++ b/arbitrator/prover/src/main.rs
@@ -41,6 +41,9 @@ struct Opts {
     #[structopt(long)]
     /// print modules to the console
     print_modules: bool,
+    #[structopt(long)]
+    /// print modules to the console
+    print_wasmmoduleroot: bool,
     /// profile output instead of generting proofs
     #[structopt(short = "p", long)]
     profile_run: bool,
@@ -122,6 +125,18 @@ const DELAYED_HEADER_LEN: usize = 112; // also in test-case's host-io.rs & contr
 fn main() -> Result<()> {
     let opts = Opts::from_args();
 
+    if opts.print_wasmmoduleroot {
+        match Machine::new_from_wavm(&opts.binary) {
+            Ok(mach) => {
+                println!("0x{}", mach.get_modules_root());
+                return Ok(());
+            },
+            Err(err) => {
+                eprintln!("Error loading binary: {err}");
+                return Err(err.into());
+            }
+        }
+    }
     let mut inbox_contents = HashMap::default();
     let mut inbox_position = opts.inbox_position;
     let mut delayed_position = opts.delayed_inbox_position;
diff --git a/scripts/validate-wasm-module-root.sh b/scripts/validate-wasm-module-root.sh
new file mode 100755
index 0000000000..4de0278da8
--- /dev/null
+++ b/scripts/validate-wasm-module-root.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -e
+
+MACHINES_DIR=$1
+PROVER=$2
+
+for machine in "$MACHINES_DIR"/*/ ; do
+    if [ -d "$machine" ]; then
+        expectedWasmModuleRoot=$(basename "$machine")
+        actualWasmModuleRoot=$(cd "$machine" && "$PROVER" machine.wavm.br --print-wasmmoduleroot)
+        if [ "$expectedWasmModuleRoot" != "$actualWasmModuleRoot" ]; then
+            echo "Error: Expected module root $expectedWasmModuleRoot but found $actualWasmModuleRoot in $machine"
+            exit 1
+        fi
+    fi
+done
\ No newline at end of file