Blockchain Transaction Lifecycle Security Standard Audit Framework
previous: Verify
Deployment Authorization | Contents | next: Broadcast to Authorized RPC
Nodes
Log All Delivery Attempts
Statement of Requirement
Deployers MUST
log all delivery attempts with information including:
- RPC nodes the request was sent to,
- whether the outcome was success or failure,
- timestamps,
- transaction identifiers,
- gas or fee parameters offered, and
- the transaction hash, block number, and confirmation count for
successfully deployed transactions
See it
in the specification
Applicability
Purpose
Ensure records are sufficient for forensic analysis
Audit Procedure
Verify that all transactions submitted are logged, with
- accurate descriptions of the RPC nodes to which they were
submitted,
- whether the transaction was incorporated into a block,
- timestamps
- gas or transaction fees offered, and
- block numbers for inclusion and transaction hashes of successfully
deployed transactions
Success Criteria
All transactions submitted for deployment are logged, with outcomes
and identifying information accurately described
Failure Criteria
- Some transaction deployments or their outcomes are not logged
- Rejected or failed deployment attempts are not logged
- Logs do not capture all the required information
Key Evidence
- Deployment logs
- Reperformance
previous: Verify
Deployment Authorization | Contents | next: Broadcast to Authorized RPC
Nodes