Update rln-contract.md

This commit is contained in:
Jimmy Debe 2025-05-28 17:05:21 -04:00 committed by GitHub
parent f5f1a8296e
commit dbfef374d2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -53,6 +53,8 @@ Membership registration MAY be initiated by a different entity from the one that
which is associated with the respective RLN `identity_commitment`.
Therefore, the holder role MAY be assigned to a blockchain address that is not derived from the `identity_secret`.
The contract SHOULD verify that the `identity_commitment` is valid.
If the `identity_commitment` is not checked or validated,
the contract MAY be exploited using malicious or malformed inputs.
When authorizing membership-related requests,
the contract MUST distinguish between the holder and non-holders,
and MAY also implement additional criteria.