The security audit reports for the Proof of Humanity protocol have been released, stating that most of the identified issues have been fixed or mitigated. The audits were conducted by security consulting firms Nethermind and Least Authority. Nethermind found 26 security issues, of which 24 were fixed and one was mitigated. Least Authority discovered three issues and made six suggestions, all of which have been resolved or have planned resolutions.
Worldcoin, the project behind the protocol, gained attention in 2021 for its plan to give away free tokens to users who verify their humanity through iris scanning. The project was co-founded by Sam Altman, co-founder of OpenAI. The protocol’s documentation states that the iris scan is hashed and not stored.
Worldcoin recently launched publicly after two years of development and beta testing, but faced immediate criticism. The UK’s Information Commissioner’s Office is reportedly considering investigating the project for potential data protection law violations, while the French data protection agency has questioned its legality. The crypto community has been divided on the project, with some viewing it as a dystopian future and others seeing it as a necessary defense against malicious AI.
The audit reports cover various security topics, including protection against denial of service attacks, implementation errors, key storage and encryption management, data leaks, and information integrity. Most issues were resolved, mitigated, or have planned fixes, with one remaining issue acknowledged but not yet fixed.
Summary:
– Proof of Humanity protocol’s security audit reports have been released.
– Most identified issues have been fixed or mitigated.
– Audits were conducted by Nethermind and Least Authority.
– Nethermind found 26 issues, with 24 fixed and one mitigated.
– Least Authority discovered three issues, all of which have been resolved or have planned resolutions.
– Worldcoin gained attention for its plan to give away tokens through iris scanning.
– The project launched publicly and faced criticism, including potential investigations by regulatory bodies.
– The audit reports cover various security topics and most issues have been resolved or mitigated, with one remaining acknowledged but not fixed.