Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
@arichiv
arichiv authored Jul 18, 2024
1 parent 0d909e9 commit 344d11f
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -235,6 +235,11 @@ We have a number of mitigations against this attack:

When the issuer detects a site is attacking its token supply, it can fail redemption (before the token is revealed) based on the referring origin, and prevent browsers from spending tokens there.

### Issuer Exhaustion

Given a cap on the issuers usable per top-level origin, there might be a race between third-party scripts to call `hasPrivateToken(issuer)` to ensure their preferred issuer is available.
The top-level document can control this process by calling `hasPrivateToken(issuer)` for its preferred issuers before any other scripts are loaded.
This would ensure the availability of the desired issuers and prevent a race to determine availability.

### Double-Spend Prevention

Expand Down

0 comments on commit 344d11f

Please sign in to comment.