{"id":583361,"date":"2023-07-29T02:21:32","date_gmt":"2023-07-29T01:21:32","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=583361"},"modified":"2023-07-29T02:21:43","modified_gmt":"2023-07-29T01:21:43","slug":"worldcoin-audit-report-privacy-concerns","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/worldcoin-audit-report-privacy-concerns\/","title":{"rendered":"Worldcoin Publishes Audit Reports Amid Scrutiny From French Privacy Regulator"},"content":{"rendered":"\n<ul><li>Worldcoin has published two security audit reports that cover areas like key encryption, vulnerabilities, and data privacy.&nbsp;<\/li><li>The three-month-long security audits were performed by audit firms Nethermind and Least Authority.&nbsp;<\/li><li>The audits revealed 29 issues, which were subsequently resolved by the blockchain protocol.&nbsp;<\/li><li>The audit reports were published just hours after France\u2019s privacy watchdog launched a probe into Worldcoin.&nbsp;<\/li><\/ul>\n\n\n\n<p>Worldcoin, the ambitious crypto project recently launched by ChatGPT founder <a href=\"https:\/\/en.ethereumworldnews.com\/sam-altmans-worldcoin-wld-up-70\/\">Sam Altman<\/a>, has published security audit reports amid mounting concerns regarding its privacy and safety. The audit reports came just hours after France\u2019s top privacy watchdog stated that it was investigating the blockchain protocol.\u00a0<\/p>\n\n\n\n<h2><strong>Auditors Find 29 Security Issues In Worldcoin<\/strong><\/h2>\n\n\n\n<p>According to a <a href=\"https:\/\/worldcoin.org\/blog\/worldcoin\/worldcoin-protocol-security-audit-reports\" rel=\"nofollow noopener\">blog post<\/a> by Worldcoin, two separate audit firms were tapped to carry out separate suits that lasted three months. During the audit, audit firms Nethermind and Least Authority focused on several key areas, including the correctness of the implementation, appropriate use of smart contract constructs, adversarial actions, exposure of critical information during user interaction, etc.\u00a0<\/p>\n\n\n\n<p>The audit firms also scanned the blockchain protocol for case-specific implementation errors, resistance to attacks like DDoS, vulnerabilities in the codebase, etc. From a privacy and security point of view, the audit also covered areas like secure key storage, proper management of encryption and signing keys, data privacy, information integrity, etc.&nbsp;<\/p>\n\n\n\n<p>Nethermind\u2019s audit focused on Worldcoin\u2019s smart contracts, including the World ID contracts, World ID example airdrops, the WLD ERC-20 token contract, and the associated vesting wallet, etc. The firm found 26 issues during the assessment, 2 of which were critical and 2 were medium issues. The protocol has resolved 24 issues and mitigated one so far.&nbsp;<\/p>\n\n\n\n<p>Least Authority\u2019s audit took a closer look at Worldcoin\u2019s use of cryptography, particularly the cryptographic design and implementation. The audit firm identified three issues, all of which were solved. According to Least Authority, the cryptographic component was generally well-designed and implemented.&nbsp;<\/p>\n\n\n\n<p>Worldcoin\u2019s audit reports came amid mounting concerns regarding the protocol\u2019s privacy and safety. <a href=\"https:\/\/www.reuters.com\/technology\/frances-privacy-watchdog-says-worldcoin-legality-seems-questionable-2023-07-28\/\" rel=\"nofollow noopener\">Reuters<\/a> reported earlier today that France\u2019s privacy watchdog CNIL launched an investigation into the blockchain protocol\u2019s operations, particularly the collection of biometric data. Questioning the legality of extracting and storing the public\u2019s biometric data, the CNIL joined hands with the Bavarian state authority in Germany to conduct the investigation.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sam Altman&#8217;s Worldcoin has published two security audit reports that assessed the protocol&#8217;s security and data privacy concerns.<\/p>\n","protected":false},"author":62,"featured_media":583363,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[826,17,2],"tags":[109028,108817,109016,4377,109017],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583361"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=583361"}],"version-history":[{"count":2,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583361\/revisions"}],"predecessor-version":[{"id":583364,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/583361\/revisions\/583364"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/583363"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=583361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=583361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=583361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}