Using Blacklisting Tokens as Currency
Using a token that allows backlisting (e.g. USDC) as your assertTruth currency opens up a griefing vector that integrators should be aware of.
The assertTruth and disputeAssertion functions allow the caller to set any address as the asserter and disputer that will receive payouts if their assertion/dispute is correct upon settlement. If a bad actor calls these functions and specifies a blacklisted address for repayment, the settle function will revert and cause the request to be frozen unless the address is unblacklisted. This costs malicious users their bonds and does not result in any gain, but freezing the assertion could cause issues for the integrator.
Integrations that use tokens with blacklisting functionality should ensure that they have a way to manage frozen assertions (e.g. an admin function that can ignore a frozen assertion) without negatively affecting their integration.
Last updated
Was this helpful?
