Zellic - Audit Reports

Assessment reports>Reclaim Protocol>Discussion>Node centralization risk

Findings

DiscussionSpoofing risk via website data format instability Spoofing risk via insecure contains/RegEx checks Sensitive data exposure risk User-phishing risk Lack of `postMessage` origin validation Proxy/scraping service usage Node centralization risk

Audit ResultsSummary

Node centralization risk

Reclaim nodes are currently only operated by CreatorOS Inc. Thus, CreatorOS Inc has full control over the network and can sign invalid claims. This is a significant risk to the network, as it is not decentralized and is not resistant to manipulation.