diff --git a/book/src/design/security-properties.md b/book/src/design/security-properties.md index cecfd42690a..3fdd62a4f67 100644 --- a/book/src/design/security-properties.md +++ b/book/src/design/security-properties.md @@ -6,7 +6,7 @@ Crosslink is designed and can be analyzed with respect to the following security Transactions enter a finalized state, and finalized transactions cannot be rolled back. Failure of this security property is called “rollback attack”. -Importantly, all participants who are sufficiently in sync with the consensus agree on finality status, or if there is a failure by the protocol to provide finality, all of those participants agree that this failure occurred. This contrasts with Proof-of-Work, which provides “probabilistic finality”. In that model, every participant must select their own rollback threshold at which point they consider a protocol failure event to have occurred (including malicious “rollback attacks”). Because these thresholds vary among users, rollbacks naturally fragment users into groups with competing interests in the event of protocol failures. +Importantly, all participants who are sufficiently in sync with the consensus agree on finality status, or if there is a failure by the protocol to provide finality, all of those participants agree that this failure occurred. This contrasts with Proof-of-Work, which provides “probabilistic finality”. In that model, every participant must select their own rollback threshold at which point they consider a protocol failure event to have occurred (including malicious rollback attacks). Because these thresholds vary among users, rollbacks naturally fragment users into groups with competing interests in the event of protocol failures. ## _Liveness/Availability_