deso-protocol / deso-protocol/core
Centralized Single Point Of Failure - TrustedBlockProducer
- Dominant language
- Go
- Stars
- 327
- Forks
- 106
- PR merge metrics
- No merged PRs in 30d
Description
Currently only the holders of 5 keys may create new blocks on the BitClout chain, as listed in the "trusted-block-producer-public-keys" config value.
It is not clear how well distributed these keys are. At best, only 5 entities need to be compromised to have full veto power over what transactions are included in the chain. At worst, the five keys are under a central entity's control, and only one entity needs to compromised. This severely undermines BitClout's claim to be a decentralized platform. With permission based block acceptance, BitClout is more akin to a publisher than a decentralized platform.
Recommendation: Trusted Block Producer setup should be replaced as soon as possible.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.