FigureTechnologies / digital-currency-consortium

Digital Currency Consortium middleware - interface between banks and digital currency smart contracts.
Apache License 2.0
12 stars 3 forks source link

Require join proposal deposits #100

Closed leeduan closed 2 years ago

leeduan commented 2 years ago

Summary of Bug

Join proposals are easy to add and can increase chances of ddos attacks by an individual.

Require a deposit of hash for join proposals separate from gas fees to make cost of joins much higher that can be returned if complete.

Version

Since beginning.

Steps to Reproduce

Generate any number of key pairs, give it some hash and add join proposals.


For Admin Use

leeduan commented 2 years ago

Removing join proposal flow from smart contract supersedes this issue