You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Nonce was primarly used for replay protection against unstake/withdraw operation (to prevent malicious attacker to unstake on behalf of honest users, excluding them from the consensus and paying only the fee)
Due to the fact that now tha TransferContract::withdraw function embeds mechanism for replay protection, the only use case left is to prevent malicious users to stake on behalf of victim. (indeed the nonce is now used only during stake transactions)
However, this scenario doesn't give any benefit to the attacker, that should still put a deposit on behalf of the user, leading to a loosing of money for the attacker itself.
Hence, the nonce is no useful anymore.
Additional context
This removal will allow for empty stakes to be removed (once unstaked and rewards are withdrawn)
The text was updated successfully, but these errors were encountered:
Summary
Nonce was primarly used for replay protection against unstake/withdraw operation (to prevent malicious attacker to unstake on behalf of honest users, excluding them from the consensus and paying only the fee)
Due to the fact that now tha TransferContract::withdraw function embeds mechanism for replay protection, the only use case left is to prevent malicious users to stake on behalf of victim. (indeed the nonce is now used only during stake transactions)
However, this scenario doesn't give any benefit to the attacker, that should still put a deposit on behalf of the user, leading to a loosing of money for the attacker itself.
Hence, the nonce is no useful anymore.
Additional context
This removal will allow for empty stakes to be removed (once unstaked and rewards are withdrawn)
The text was updated successfully, but these errors were encountered: