Skip to content

Commit 98867a7

Browse files
committed
Remove headings and update T1 likelihood
1 parent b940b66 commit 98867a7

File tree

1 file changed

+8
-14
lines changed

1 file changed

+8
-14
lines changed

docs/threat-model.md

Lines changed: 8 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -114,8 +114,6 @@ See also the [CIP draft](https://github.com/input-output-hk/ouroboros-leios/pull
114114

115115
Notable threats to the system that could impact assets.
116116

117-
### Network-Level Threats
118-
119117
#### T1: Mempool Partitioning
120118
**Description**: Attacker deliberately partitions the mempools of block producing nodes by submitting conflicting transactions (spending the same inputs) to different network segments, creating inconsistent views of valid transactions across the network.
121119

@@ -130,10 +128,12 @@ Notable threats to the system that could impact assets.
130128
2. Creates conflicting transaction pairs spending identical UTXOs
131129
3. Submits Transaction A to Network Segment 1, Transaction B to Network Segment 2
132130
4. Uses network position control (BGP, routing, eclipse techniques) to prevent cross-segment propagation
133-
5. SPOs in different segments create EBs endorsing different conflicting transactions
131+
5. Slot/height battling SPOs from different segments create RBs endorsing different, conflicting transactions
134132
6. Voting nodes must choose between conflicting EBs, potentially causing certification failures
135133

136-
**Cost**: MEDIUM-HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
134+
**Cost**: HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
135+
136+
**Likelihood**: LOW - Reduced attack surface due to coupled RB/EB production model, though possible when there are multiple eligible producers (slot / height battles).
137137

138138
**Impact**:
139139
- **Throughput**: Different SPOs create conflicting EBs, causing vote splits and potential certification failures. This leads to throughput reduction when EBs fail certification, though system recovers in subsequent stages
@@ -168,7 +168,7 @@ Notable threats to the system that could impact assets.
168168

169169
**Assets Affected**: Blockchain Safety, High Throughput
170170

171-
#### T3: Vote Flooding Attack
171+
#### T3: Vote Flooding
172172
**Description**: Malicious nodes flood the network with invalid or duplicate votes to overwhelm voting infrastructure and waste network resources.
173173

174174
**Prerequisites**:
@@ -193,10 +193,8 @@ Notable threats to the system that could impact assets.
193193

194194
**Assets Affected**: Operational Sustainability, High Throughput
195195

196-
### Consensus-Level Threats
197-
198-
#### T4: EB Withholding Attack
199-
**Description**: Eligible stake pools deliberately withhold EBs they are entitled to create, reducing network throughput and potentially enabling censorship.
196+
#### T4: EB Withholding
197+
**Description**: Eligible stake pools deliberately they are entitled to create, reducing network throughput and potentially enabling censorship.
200198

201199
**Prerequisites**:
202200
- Stake pool eligibility for EB creation (via VRF lottery)
@@ -333,8 +331,6 @@ Notable threats to the system that could impact assets.
333331

334332
**Assets Affected**: Operational Sustainability, Decentralization
335333

336-
### Transaction-Level Threats
337-
338334
#### T8: Transaction Availability Attack
339335
**Description**: Attacker creates EBs referencing unavailable transactions to waste network resources and disrupt certification.
340336

@@ -382,8 +378,6 @@ Notable threats to the system that could impact assets.
382378

383379
**Assets Affected**: Transaction Validity/Availability/Determinism, Decentralization
384380

385-
### Deployment-Level Threats
386-
387381
#### T10: Hard Fork Coordination Attack
388382
**Description**: Disruption during the hard fork transition period to split the network, cause instability, or prevent the hard fork from succeeding.
389383

@@ -442,7 +436,7 @@ Notable threats to the system that could impact assets.
442436
443437
| Threat | Impact | Likelihood | Risk Level | Priority |
444438
|-------------------------------|--------|------------|------------|----------|
445-
| T1: Mempool Partitioning | HIGH | MEDIUM | HIGH | P1 |
439+
| T1: Mempool Partitioning | HIGH | LOW | HIGH | P1 |
446440
| T2: Eclipse Attack | HIGH | MEDIUM | HIGH | P1 |
447441
| T8: Transaction Availability | HIGH | MEDIUM | HIGH | P1 |
448442
| T10: Hard Fork Coordination | HIGH | MEDIUM | HIGH | P1 |

0 commit comments

Comments
 (0)