Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Log All Delivery Attempts | Contents | next: Use Backoff Logic with Retried Delivery

Broadcast to Authorized RPC Nodes

Statement of Requirement

Deployers SHOULD only broadcast transaction deployment requests to RPC nodes on a configured allowlist

See it in the specification

Applicability

• Deployers

Purpose

Reduce risk of timing attacks and malicious behavior by RPC nodes

Audit Procedure

Verify the Deployer only broadcasts transactions to RPC nodes on an allowlist configured per Enable Transaction Policies for Deployment

Success Criteria

Transactions are only submitted to authorized RPC nodes for delivery

Failure Criteria

• Some transaction requests are not logged
• Some requests are made to RPC nodes other than those on the allowlist

Justifiable Exceptions

Any failure to meet this requirement needs to be explicitly justified

Key Evidence

• Deployment logs
• Reperformance

previous: Log All Delivery Attempts | Contents | next: Use Backoff Logic with Retried Delivery