Skip to content

Commit 5622133

Browse files
committed
Remove headings and update T1 likelihood
1 parent cfd5639 commit 5622133

File tree

1 file changed

+8
-14
lines changed

1 file changed

+8
-14
lines changed

docs/threat-model.md

Lines changed: 8 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -116,8 +116,6 @@ For each asset we define what could be impacted in respect to its Confidentialit
116116

117117
Notable threats to the system that could impact assets.
118118

119-
### Network-Level Threats
120-
121119
#### T1: Mempool Partitioning
122120
**Description**: Attacker deliberately partitions the mempools of block producing nodes by submitting conflicting transactions (spending the same inputs) to different network segments, creating inconsistent views of valid transactions across the network.
123121

@@ -132,10 +130,12 @@ Notable threats to the system that could impact assets.
132130
2. Creates conflicting transaction pairs spending identical UTXOs
133131
3. Submits Transaction A to Network Segment 1, Transaction B to Network Segment 2
134132
4. Uses network position control (BGP, routing, eclipse techniques) to prevent cross-segment propagation
135-
5. SPOs in different segments create EBs endorsing different conflicting transactions
133+
5. Slot/height battling SPOs from different segments create RBs endorsing different, conflicting transactions
136134
6. Voting nodes must choose between conflicting EBs, potentially causing certification failures
137135

138-
**Cost**: MEDIUM-HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
136+
**Cost**: HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
137+
138+
**Likelihood**: LOW - Reduced attack surface due to coupled RB/EB production model, though possible when there are multiple eligible producers (slot / height battles).
139139

140140
**Impact**:
141141
- **Throughput**: Different SPOs create conflicting EBs, causing vote splits and potential certification failures. This leads to throughput reduction when EBs fail certification, though system recovers in subsequent stages
@@ -170,7 +170,7 @@ Notable threats to the system that could impact assets.
170170

171171
**Assets Affected**: Blockchain Safety, High Throughput
172172

173-
#### T3: Vote Flooding Attack
173+
#### T3: Vote Flooding
174174
**Description**: Malicious nodes flood the network with invalid or duplicate votes to overwhelm voting infrastructure and waste network resources.
175175

176176
**Prerequisites**:
@@ -195,10 +195,8 @@ Notable threats to the system that could impact assets.
195195

196196
**Assets Affected**: Operational Sustainability, High Throughput
197197

198-
### Consensus-Level Threats
199-
200-
#### T4: EB Withholding Attack
201-
**Description**: Eligible stake pools deliberately withhold EBs they are entitled to create, reducing network throughput and potentially enabling censorship.
198+
#### T4: EB Withholding
199+
**Description**: Eligible stake pools deliberately they are entitled to create, reducing network throughput and potentially enabling censorship.
202200

203201
**Prerequisites**:
204202
- Stake pool eligibility for EB creation (via VRF lottery)
@@ -335,8 +333,6 @@ Notable threats to the system that could impact assets.
335333

336334
**Assets Affected**: Operational Sustainability, Decentralization
337335

338-
### Transaction-Level Threats
339-
340336
#### T8: Transaction Availability Attack
341337
**Description**: Attacker creates EBs referencing unavailable transactions to waste network resources and disrupt certification.
342338

@@ -384,8 +380,6 @@ Notable threats to the system that could impact assets.
384380

385381
**Assets Affected**: Transaction Validity/Availability/Determinism, Decentralization
386382

387-
### Deployment-Level Threats
388-
389383
#### T10: Hard Fork Coordination Attack
390384
**Description**: Disruption during the hard fork transition period to split the network, cause instability, or prevent the hard fork from succeeding.
391385

@@ -444,7 +438,7 @@ Notable threats to the system that could impact assets.
444438
445439
| Threat | Impact | Likelihood | Risk Level | Priority |
446440
|-------------------------------|--------|------------|------------|----------|
447-
| T1: Mempool Partitioning | HIGH | MEDIUM | HIGH | P1 |
441+
| T1: Mempool Partitioning | HIGH | LOW | HIGH | P1 |
448442
| T2: Eclipse Attack | HIGH | MEDIUM | HIGH | P1 |
449443
| T8: Transaction Availability | HIGH | MEDIUM | HIGH | P1 |
450444
| T10: Hard Fork Coordination | HIGH | MEDIUM | HIGH | P1 |

0 commit comments

Comments
 (0)