You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/threat-model.md
+8-14Lines changed: 8 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -116,8 +116,6 @@ For each asset we define what could be impacted in respect to its Confidentialit
116
116
117
117
Notable threats to the system that could impact assets.
118
118
119
-
### Network-Level Threats
120
-
121
119
#### T1: Mempool Partitioning
122
120
**Description**: Attacker deliberately partitions the mempools of block producing nodes by submitting conflicting transactions (spending the same inputs) to different network segments, creating inconsistent views of valid transactions across the network.
123
121
@@ -132,10 +130,12 @@ Notable threats to the system that could impact assets.
**Cost**: HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
137
+
138
+
**Likelihood**: LOW - Reduced attack surface due to coupled RB/EB production model, though possible when there are multiple eligible producers (slot / height battles).
139
139
140
140
**Impact**:
141
141
-**Throughput**: Different SPOs create conflicting EBs, causing vote splits and potential certification failures. This leads to throughput reduction when EBs fail certification, though system recovers in subsequent stages
@@ -170,7 +170,7 @@ Notable threats to the system that could impact assets.
170
170
171
171
**Assets Affected**: Blockchain Safety, High Throughput
172
172
173
-
#### T3: Vote Flooding Attack
173
+
#### T3: Vote Flooding
174
174
**Description**: Malicious nodes flood the network with invalid or duplicate votes to overwhelm voting infrastructure and waste network resources.
175
175
176
176
**Prerequisites**:
@@ -195,10 +195,8 @@ Notable threats to the system that could impact assets.
195
195
196
196
**Assets Affected**: Operational Sustainability, High Throughput
197
197
198
-
### Consensus-Level Threats
199
-
200
-
#### T4: EB Withholding Attack
201
-
**Description**: Eligible stake pools deliberately withhold EBs they are entitled to create, reducing network throughput and potentially enabling censorship.
198
+
#### T4: EB Withholding
199
+
**Description**: Eligible stake pools deliberately they are entitled to create, reducing network throughput and potentially enabling censorship.
202
200
203
201
**Prerequisites**:
204
202
- Stake pool eligibility for EB creation (via VRF lottery)
@@ -335,8 +333,6 @@ Notable threats to the system that could impact assets.
0 commit comments