Our security philosophy, practices, and audit commitments — built on cryptographic guarantees.
Every AI decision and memory operation is recorded with SHA‑256 commitments and Ed25519 signatures — verifiable without trusting any single party.
All LLM outputs are grounded in cited memory entries, blocking hallucinations and ensuring 100% precision on factual claims.
Data erasure is cryptographically proven — 100% deletion verification with tamper‑evident root hash changes.
Data is erasure‑coded (k=3, n=5) across independent nodes, ensuring 96% recovery even with 20% node failure.
Validator voting power is weighted by AI‑derived reliability scores, creating an incentive‑aligned security model.
Every decision, training event, and deletion is recorded on the immutable ledger — auditable by regulators and users alike.
| Category | Attack Vector | Result | Defence Mechanism |
|---|---|---|---|
| Transaction | Signature forgery | BLOCKED | Ed25519 signature verification |
| Transaction | Replay attack (resubmit old TX) | BLOCKED | TX hash persisted to RocksDB — duplicate detection |
| Transaction | Integer overflow (u64 max amount) | BLOCKED | MAX_TX_AMOUNT enforced in Transaction.verify() |
| Transaction | Zero amount | BLOCKED | amount > 0 validated before signature check |
| Transaction | Self-transfer | BLOCKED | from ≠ to enforced — prevents balance loops |
| Transaction | Null address (0x000…) | BLOCKED | Null address rejection in Transaction.verify() |
| Injection | SQL/JSON injection in address field | BLOCKED | Strict 64‑character lowercase hex validation |
| Injection | XSS/command injection | BLOCKED | Same hex validation — HTML and shell metacharacters rejected |
| Mempool | Nonce gap flooding (nonce+9999) | BLOCKED | Maximum nonce gap: +10 ahead of current account nonce |
| Cryptographic | Wrong chain ID (cross‑chain replay) | BLOCKED | Chain ID bound into SHA‑256 transaction hash |
| API | DDoS (200+ rapid requests) | BLOCKED | Per‑IP: 30 req/s. Global: 200 req/s. Auto‑ban after 100 violations. |
| Governance | Pause without validator key | BLOCKED | Ed25519 verified against genesis validator set |
| Governance | Vote/propose without validator key | BLOCKED | Validator‑only operations — HTTP 403 for non‑validators |
| Governance | IP blacklist abuse | BLOCKED | Blacklist requires valid validator Ed25519 signature |
| Payload | 1MB oversized body | BLOCKED | 128KB global body limit — HTTP 413 |
| Payload | Malformed JSON | BLOCKED | Axum deserialisation — HTTP 400 |
| Protocol | HTTP method confusion (PUT/DELETE) | BLOCKED | CORS restricted to GET/POST/OPTIONS only |
| Protocol | AI reject decision bypass | BLOCKED | decision="reject" blocks TX unconditionally |
Independent review of SHA‑256 commitments and Ed25519 signature implementation. All tests passed.
Full compliance with India's Digital Personal Data Protection Act — including provable deletion and data subject rights.
Full‑stack penetration test across 18 attack categories. All attacks blocked with a 100% success rate.
Independent review of the iPoS consensus algorithm, BFT safety proofs, and validator scoring mechanism.
Review of the WASM execution environment, REST API security, and JWT authentication implementation.
If you discover a security vulnerability, please report it responsibly. We take all reports seriously and will investigate promptly.
Reach out to our security team directly or read the full technical documentation.