SECURITY

Security Model & Cryptographic Invariants

PointPass implements multiple defense-in-depth security layers to prevent unauthorized minting, double spending, and overflow vulnerabilities.

Security Guarantees

AUTHORITY ISOLATION

Only the merchant signer can award points for their own program. Customers can only burn tokens that belong to their own Associated Token Account.

MATH OVERFLOW DEFENSE

Every addition and counter increment uses checked_add() with explicit PointPassError::MathOverflow reversion.

ZERO FRACTIONAL TOKENS

SPL mint decimals are fixed to 0. It is impossible to split or mint fractional loyalty points.

DETERMINISTIC PDA REPLAY DEFENSE

Receipts use monotonic receipt_number seed. Replaying a transaction fails at the Solana runtime account initialization check.

NEXT SECTION