Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Verify Bytecode | Contents | next: Implement Upgrade Safety Controls

Verify Access Control

Statement of Requirement

For Application Transactions, Signature Managers MUST ensure that initialization of a proxy contract is atomic, or enforces strong Access Control, before signing.

See it in the specification

Applicability

Purpose

Ensure Application Transactions are only signed when the code they deploy is protected against unauthorised initialization

Audit Procedure

Verify that the Signature Manager checks Application Transactions and rejects them unless the code for deployment either has atomic initialization, or applies strong access control to initialization.

Success Criteria

The Signature Manager tests Application Transactions code, and verifies that it only enables one-time initialization, or applies strong access control for initialization.

Failure Criteria

An Application Transaction is signed without verifying that the code it deploys is protected against unauthorized initialization

Key Evidence

previous: Verify Bytecode | Contents | next: Implement Upgrade Safety Controls