Skip to content

HAL-03 — Delegated revocation is replayable #102

Open
Open
HAL-03 — Delegated revocation is replayable#102

Description

@nullthefirst
nullthefirst
opened on Apr 21, 2026

HAL-03 — Delegated revocation is replayable

  • Severity: Medium
  • Status: Complete
  • Remediation: Make delegated revocation single-use by short-circuiting if the attestation is already revoked to prevent replay-driven event spam and revocation_time rewrites.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions