mirror of
https://github.com/hanzoai/papers.git
synced 2026-10-29 07:34:31 +00:00
23 lines
796 B
TeX
23 lines
796 B
TeX
\section{Security Analysis}
|
|
|
|
|
|
\subsection{Attack Vectors}
|
|
|
|
\paragraph{Front-running.} Identity claims are vulnerable to mempool observation. Mitigation: commit-reveal scheme for premium names.
|
|
|
|
\paragraph{Reentrancy.} The \texttt{unclaimIdentity} function transfers tokens after state updates, following checks-effects-interactions.
|
|
|
|
\paragraph{Integer Overflow.} Solidity 0.8+ provides automatic overflow checking.
|
|
|
|
\paragraph{Access Control.} The \texttt{\_requireOwner} modifier prevents unauthorized identity modification.
|
|
|
|
\subsection{Formal Verification}
|
|
|
|
We verified key invariants using Certora:
|
|
\begin{enumerate}
|
|
\item NFT ownership equals identity ownership
|
|
\item Total delegated $\leq$ total staked per identity
|
|
\item Identity uniqueness across namespaces
|
|
\end{enumerate}
|
|
|