Security and status

#Where Opacus stands

• A testnet, on Solana devnet, with test money only. There is no Opacus on Solana's main network yet.
• Not audited. The circuit and the program have been tested thoroughly by the team, every attack we could think of tried and refused, and every asset's books checked to the unit after random runs. An independent audit comes before Solana's main network.
• Development keys. Groth16 proofs need a setup ceremony. The first phase uses PSE's Perpetual Powers of Tau, a public ceremony with many contributors, and its file was checked. The second phase has one contribution, made for testing: enough for test money, not for real money. A ceremony with many contributors comes before Solana's main network.

#What protects the pool

• The proofs. No proof can create money, spend a note twice, spend someone else's note, or pass one asset off as another.
• The program's checks. It accepts proofs only against the pool's recent records, refuses a note spent before, requires a deposit to arrive whole, and moves each asset's books with every payment in and out.
• Limits. Each asset has a largest deposit and a cap on what the pool may hold.
• Circuit breakers. The pool's authority can pause new deposits, while cash-outs still work, or pause everything.
• Bounded services. The relayer limits what one connection can do in a day, simulates every transaction before it spends anything, and can never change one.

#Who can change what

On the testnet, one key held by the team can pause the pool, add assets, set limits, and upgrade the program. An upgraded program could change anything about the pool, as with any upgradeable program on Solana. Before Solana's main network, these powers move behind a multisig with a timelock: several keys must agree, and every change waits in public before it takes effect.

#Screening

The relayer refuses to send a cash-out to an address on the United States' list of sanctioned Solana addresses (OFAC's).

#Before Solana's main network

1. An independent audit of the circuit and the program.
2. A setup ceremony with many contributors.
3. The pool's powers behind a multisig with a timelock.
4. A legal review.

#Found something?

If you find a problem, or something that looks wrong, tell The Opacus Team on Telegram or X. Please do not post a way to take anyone's money in public: ask us for a private channel first.