REPLICA · NOT AN EMPLOYER REPO
Security review of a local demo
Review a local demo, write the threat model, and document one mitigation. Tests start red. Edit the service, then run. The preview calls that same process. No wallet, no chain, no employer exam.
BCL-118 · review-service · local replica
Each finding needs the control that actually closes it. Retest returns 409 until the mapping is right.
FAIL upgrade closes with timelock3 failed · 0 passed
Where to look
The test file names them: upgrade is timelock, oracle is max-age, retry is idempotency.
Client of your service. Same process as the tests.
0/3Open
$ npm test · review-service
- FAILupgrade closes with timelockcontrolFor("upgrade") returned "logging"
- FAILoracle closes with max-agecontrolFor("oracle") returned "cache"
- FAILretry closes with idempotencycontrolFor("retry") returned "backoff"
Seats that use this task
- Blockchain Security Lead
Galaxy
- Blockchain Security Researcher
OpenZeppelin
- Principal Security Engineer (Solana)
OpenZeppelin
- Product Security Engineer
Coinbase
- Senior Security Engineer - Product Security
Ondo
- Staff Platform Security Engineer
Gemini
- Senior Blockchain Security Developer (Canton)
OpenZeppelin
- Security Engineer, Institutional Trading
Blockchain.com
- Engineering Lead, Security
Anchorage Digital