This document presents the security review performed by nethermind on the worldid contracts upgrade containing 449 lines of code. The worldcoin team has implemented a new feature that allows the removal of identities from the tree structure. To implement this feature, a new contract called worldididentitymanagerimplv2 has been created. This contract inherits from the v1 implementation and is responsible for receiving an array of identities to be deleted, verifying their proof, and updating the latest root accordingly.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Fixed | 1 | - | - | - | 1 |
Total | 1 | 0 | 0 | 0 | 1 |
# | Github Repository | Commit Hash | File | Url |
---|---|---|---|---|
1 | worldcoin/world-id-contracts | 42c26ecbd82fba56983addee6485d5b617960a2a | /src/WorldIDIdentityManager.sol | Check on Github |