Link `Credential` authentication request to proof of scarce asset ? - Githubissues

civkit / staking-credentials-spec

Staking Credentials specification

4 stars 3 forks source link

Link `Credential` authentication request to proof of scarce asset ? #6

Open ariard opened 1 year ago

ariard commented 1 year ago

The current staking credential issuance flow sounds to suffer from the current vulnerability:

an Issuer announce a destination pubkey Y to be paid on-chain
a Requester wallet pay the destination pubkey with a Tx A
the Tx A is observed on-chain and correlated with Issuer policy destination pubkey Y
the Credentials are issued for the observer instead of the on-chain honest payer

The credentials asset proof could be linked to the on-chain transaction, e.g BIP322.