Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Document Signing Process | Contents | next: Check Complete Hashes and Addresses

Enable Canceling Transactions

Statement of Requirement

Producers, Signature Managers, and Deployers MUST provide a mechanism to cancel a transaction, that results in the Actor securely deleting all artifacts with signed bytes, and activating any on-chain mechanism to invalidate signatures for that transaction

See it in the specification

Applicability

Producers, Signature Managers, and Deployers

Purpose

Enable secure transaction cancelation

Audit Procedure

Verify

• that there is a mechanism to cancel a proposed transaction,
• that it activates any onchain mechanism to invalidate signatures created for that transactions
• that it results in any signed artifacts being deleted, and
• that the canceled transaction is logged appropriately

Success Criteria

• A mechanism exists to cancel a transaction that has not yet been incorporated into a block
• Canceling a transaction results in any signed artifacts being securely destroyed
• Canceled transactions are logged

Best Practice

The Actor emits a warning or event that a transaction has been canceled with a transaction identifier.

Failure Criteria

• No procedure exists to cancel a transaction
• The procedure to cancel a transaction does not result in secure destruction of a signed transaction artifact
• Cancelation is not adequately logged

Key Evidence

• System documentation
• Source Code
• Reperformance
• Transaction Logs

previous: Document Signing Process | Contents | next: Check Complete Hashes and Addresses