POISONKEY
An experiment in credential-leak incentives.
A Stellar Testnet and Soroban access-control experiment by Shubham Sahu that pairs credentials with a bond and uses Ed25519 signatures to demonstrate proof of credential possession.
Experimental Stellar Testnet project; unaudited and not a production security product.
What I built
Access credentials can be copied. This experiment explores how a predefined bond-and-bounty mechanism could change the incentive to redistribute them.
- Built a hackathon experiment at Build On Stellar Build Station, Mumbai.
- Implemented publish, bond, prove_leak, and release operations in a Soroban smart contract.
- Connected a web interface to the testnet deployment and credential-possession proof flow.
- Bound the proof to a claimant address so a copied proof cannot redirect the demonstrated bounty.
Tools: Stellar Testnet, Soroban, Rust, TypeScript, Ed25519.
Website & project links
This project is documented here as a prototype or source project. A current deployed website has not been verified.
- Public repository ↗https://github.com/https-shubhamsahu/POISONKEY
About the builder
Shubham Sahu is the founder of NO SUS and co-founder of Aurigen, based in Mumbai. He builds privacy-focused software, web and mobile applications, embedded systems, and robotics, alongside studying Electronics & Computer Engineering at TSEC.
Shubham Sahu’s official profile and social accounts ↗