flow icon indicating copy to clipboard operation
flow copied to clipboard

Move BFT insecure code to BFTune repo

Open gomisha opened this issue 11 months ago • 0 comments

Issue To Be Solved

The code inside https://github.com/onflow/flow-go/tree/master/insecure is part of the BFT testing framework, BFTune. This code was meant to stand in a separate BFTune repository. The insecure code introduces vulnerabilities in Flow in order to make it more testable for different attack scenarios. The original plan was to move this code out to a separate repository and then consume it within flow-go. That way, flow-go doesn't have vulnerabilities baked into the code that were only meant for testing environments.

Suggest A Solution

@thep2p and @gomisha volunteer to:

References

BFT Testing Framework for Flow Blockchain - Conference Paper BFTune: BFT Testing Framework for Flow Blockchain - Blockchain '23 Congress - Presentation on YouTube

cc @peterargue @vishalchangrani @Kay-Zee @AlexHentschel @dete

gomisha avatar Feb 16 '25 16:02 gomisha