You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/threat-model.md
+8-14Lines changed: 8 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -114,8 +114,6 @@ See also the [CIP draft](https://github.com/input-output-hk/ouroboros-leios/pull
114
114
115
115
Notable threats to the system that could impact assets.
116
116
117
-
### Network-Level Threats
118
-
119
117
#### T1: Mempool Partitioning
120
118
**Description**: Attacker deliberately partitions the mempools of block producing nodes by submitting conflicting transactions (spending the same inputs) to different network segments, creating inconsistent views of valid transactions across the network.
121
119
@@ -130,10 +128,12 @@ Notable threats to the system that could impact assets.
**Cost**: HIGH - Requires significant network infrastructure, multiple nodes, and sustained coordination
135
+
136
+
**Likelihood**: LOW - Reduced attack surface due to coupled RB/EB production model, though possible when there are multiple eligible producers (slot / height battles).
137
137
138
138
**Impact**:
139
139
-**Throughput**: Different SPOs create conflicting EBs, causing vote splits and potential certification failures. This leads to throughput reduction when EBs fail certification, though system recovers in subsequent stages
@@ -168,7 +168,7 @@ Notable threats to the system that could impact assets.
168
168
169
169
**Assets Affected**: Blockchain Safety, High Throughput
170
170
171
-
#### T3: Vote Flooding Attack
171
+
#### T3: Vote Flooding
172
172
**Description**: Malicious nodes flood the network with invalid or duplicate votes to overwhelm voting infrastructure and waste network resources.
173
173
174
174
**Prerequisites**:
@@ -193,10 +193,8 @@ Notable threats to the system that could impact assets.
193
193
194
194
**Assets Affected**: Operational Sustainability, High Throughput
195
195
196
-
### Consensus-Level Threats
197
-
198
-
#### T4: EB Withholding Attack
199
-
**Description**: Eligible stake pools deliberately withhold EBs they are entitled to create, reducing network throughput and potentially enabling censorship.
196
+
#### T4: EB Withholding
197
+
**Description**: Eligible stake pools deliberately they are entitled to create, reducing network throughput and potentially enabling censorship.
200
198
201
199
**Prerequisites**:
202
200
- Stake pool eligibility for EB creation (via VRF lottery)
@@ -333,8 +331,6 @@ Notable threats to the system that could impact assets.
0 commit comments