Security & Privacy Guarantees
Agora combines cryptographic security with Canton ledger immutability to deliver the highest standards of privacy and verifiability.
Security First — Seven Cryptographic Guarantees
Security and privacy are not optional features at Agora — they are the product. Every user action (vote, post, comment, boost, claim) is protected by at least one of seven cryptographic guarantees, each backed by auditable circom circuits, a DAML attribution ledger on the Canton Network, or formally-enforced infrastructure controls.
Unlike traditional systems that rely on trust in centralized authorities, Agora uses mathematical proofs to guarantee security properties. These guarantees hold even if the backend is fully compromised — as long as the Canton Network remains secure and the ZK circuits remain sound. The planned token economy is scheduled for a third-party security audit in Q2 2026.
The seven pillars below cover the full surface area: anonymous voting (Semaphore), spam-resistant posts (RLN), pseudonymous reputation (UniRep), Canton ledger integrity (DAML attribution ledger), privacy-preserving analytics (k ≥ 25), shielded fee proofs, and public verifiability.
Semaphore v4 Zero-Knowledge Proofs
Semaphore v4 ZK circuits ensure voter identity is cryptographically separated from vote choice. No backend, blockchain node, or attacker can link a vote to a voter, even with full system access.
Security Guarantees:
- Identity commitment is a Poseidon2 hash — not reversible
- ZK proof verifies membership without identity disclosure
- Nullifier prevents double-voting while maintaining anonymity
- Client-side proof generation — secrets never leave the device
- ZK proofs validated before anchoring on the Canton ledger
RLN — Rate-Limiting Nullifier
RLN (Rate-Limiting Nullifier) provides cryptographically-enforced per-epoch rate limits on anonymous posts and comments. Users who exceed the quota automatically reveal their secret; honest users remain fully anonymous.
Security Guarantees:
- Per-epoch quota enforced by rln.circom
- Spammers self-identify on quota overflow (Shamir secret sharing)
- Honest users remain fully anonymous
- Offline quota tracking on mobile with server sync
UniRep Pseudonymous Reputation
UniRep provides epoch-based reputation that can be proved in zero-knowledge. Users can demonstrate reputation ≥ threshold, boost/squash content, and transition state — all without revealing who they are.
Security Guarantees:
- epoch_key.circom generates fresh pseudonyms per epoch
- reputation_proof.circom proves rep ≥ threshold without disclosure
- state_transition.circom enforces honest epoch transitions
- Sybil resistance through reputation cost, not identity checks
Canton Ledger Immutability
Votes and settlement records are anchored on Agora's live Canton Network mainnet validator through a DAML attribution ledger. Canton Coin settlement keeps poll-activation fees and rewards private via a shielded fee pool.
Security Guarantees:
- Cryptographically secured by the Canton Network
- Anchored on a DAML attribution ledger — tamper-evident audit trail
- Vote receipts (BatchAnchored / VoteRecorded) recorded on the Canton ledger
- Shielded fee pool (Poseidon2 + Merkle proofs) hides settlement amounts
k-Anonymity Analytics (k ≥ 25)
Agora's analytics engine enforces k-anonymity with k ≥ 25 on every metric exposed to organization dashboards. Individual user behavior is never exposed — only aggregates that satisfy the threshold are released.
Security Guarantees:
- Every metric query validated against k ≥ 25 threshold
- Event store + schema registry for auditable aggregation
- Daily aggregate tables (PollDailyAggregate, CommunityDailyAggregate, PostDailyAggregate)
- Raw events purged after aggregation window
Shielded Fee Proofs
shielded_fee.circom hides the exact poll-activation cost. Settlement amounts are committed with Poseidon2 and proven with Merkle inclusion proofs, so the Canton ledger records that a fee settled without revealing how much.
Security Guarantees:
- Shielded fee proofs hide exact transfer amounts
- Poseidon2 commitments + Merkle proofs on the shielded fee pool
- Fees and rewards settle privately in Canton Coin
- Settlement recorded on a DAML attribution ledger
Public Verifiability
Vote receipts are anchored on Agora's live Canton mainnet validator. Anyone can audit vote counts and settlement records through the DAML attribution ledger — without compromising voter or user privacy.
Security Guarantees:
- DAML attribution ledger for full audit
- ZK proofs verified before anchoring on the Canton ledger
- Merkle tree root validation
- Vote receipts anchored on the Canton Network
Privacy Guarantees
Identity Protection
Voter identities are never stored with votes. Only identity commitments (hashes) are used, which cannot be reversed to reveal the original identity.
Vote Anonymity
Zero-knowledge proofs ensure that even with access to all system data, it's mathematically impossible to link a vote to a specific voter.
No Correlation
Multiple votes from the same user cannot be correlated. Each vote is independently anonymous, even if the same identity is used.
Coercion Resistance
Since votes cannot be linked to identities, voters cannot be coerced or intimidated based on their voting choices.
Security Measures
Cryptographic Security
- Semaphore v4 + RLN + UniRep — 6 custom circom circuits
- Poseidon2 hash function for commitments
- EdDSA signatures + Groth16 verification
- Merkle tree depth 20 (supports 1M+ members per group)
- crypto.randomInt() (not Math.random) across all ZK paths
Ledger & Settlement Security
- DAML settlement package on Agora's live Canton mainnet validator
- Canton Coin settlement with a shielded fee pool (Poseidon2 + Merkle proofs)
- DAML contract authorization on privileged settlement operations
- HSM-backed validator keys (AWS KMS, EU-West-1)
- Vote receipts (BatchAnchored / VoteRecorded) anchored on the DAML ledger
- Third-party security audit — Planned Q2 2026
Infrastructure Security
- HTTPS/TLS encryption for all communications
- AWS KMS key management (EU-West-1) for Canton validator
- Rate limiting (RLN + application-level throttling)
- Prometheus + Grafana monitoring for the prover, validator, and settlement pipeline
- Proof verification isolated on a private subnet
Audit & Verification
Agora's security model is designed for transparency and verifiability. All critical components are open-source and can be independently audited:
Settlement Ledger
- Open-source DAML settlement package
- Anchored on Agora's live Canton mainnet validator
- Third-party audit recommendations
ZK Circuits
- Semaphore protocol (battle-tested)
- Circom circuit source code available
- Trusted setup ceremony participation
Security Best Practices
Users should always use official frontends and keep their identity secrets and keys secure. Never share your identity secret or private keys with anyone.
Threat Model & Mitigations
Backend Compromise
Threat: Attacker gains access to backend database and servers.
Mitigation: ZK proofs ensure votes remain anonymous even if backend is compromised. Identity secrets are never sent to servers. Canton ledger verification is independent of the backend.
Canton Network Attack
Threat: Consensus attack or settlement-logic exploit.
Mitigation: Canton's security model and DAML best practices. Immutable records prevent retroactive tampering. Public verifiability enables detection of anomalies.
Identity Correlation
Threat: Attempts to link votes to identities through metadata or timing analysis.
Mitigation: ZK proofs prevent any correlation. Nullifiers prevent double-voting without revealing identity. Merkle tree structure hides individual memberships.
Comprehensive Risk Analysis
Technical Risks
ZK Proof Complexity
Risk: ZK proof generation requires significant computational resources, especially on mobile devices. Complex proofs may take 10-30 seconds to generate.
Mitigation: Client-side proof generation with progress indicators. Optimized Semaphore circuits. Future mobile optimizations planned.
Settlement Costs
Risk: High settlement costs on public blockchains can limit accessibility. Agora avoids this by settling on the Canton Network.
Mitigation: Settlement on the Canton Network avoids public-chain fee markets. Batched anchoring keeps per-action overhead low. Fees settle privately in Canton Coin.
Scalability Limitations
Risk: Merkle tree depth of 20 supports up to 1,048,576 voters per poll. Very large polls may face performance challenges.
Mitigation: Batch processing for large polls. Off-chain aggregation with verification anchored on the Canton ledger. Future support for larger tree depths.
Settlement Logic Vulnerabilities
Risk: Potential bugs in settlement logic could compromise vote integrity.
Mitigation: DAML settlement logic with comprehensive testing. Planned third-party audits. Formal verification for critical settlement functions.
Regulatory & Legal Risks
Voting Regulations
Risk: Different jurisdictions have varying regulations for electronic voting. Some may require specific certifications or compliance.
Mitigation: Platform designed for non-binding polls and surveys. Legal consultation for binding vote use cases. Compliance framework development.
Securities Regulations
Risk: AGR token may be subject to securities regulations in some jurisdictions.
Mitigation: Token designed as utility token for platform use. Legal review of token structure. Compliance with applicable regulations.
Data Protection Laws
Risk: GDPR, CCPA, and other data protection regulations may apply to user data.
Mitigation: Privacy-by-design architecture. Minimal data collection. Anonymization through ZK proofs. Compliance framework development.
Market & Adoption Risks
Low Adoption
Risk: Platform may struggle to gain traction if users don't see value or find it too complex.
Mitigation: User-friendly interfaces. Educational content. Incentive mechanisms (token rewards). Strategic partnerships. Community building.
Competition
Risk: Established platforms (Snapshot, Aragon) or new competitors may capture market share.
Mitigation: Unique value proposition (true anonymity via ZKP). Continuous innovation. Strong community engagement. Technical superiority.
Token Economy Design
Risk: The AGR token economy is still in design. Miscalibrated fee or reward parameters could affect platform sustainability if introduced prematurely.
Mitigation: The token economy remains in design and is not yet deployed. Parameters will be modeled, reviewed, and phased in gradually — the platform runs fully on Canton settlement in the meantime.
Operational Risks
Infrastructure Failures
Risk: Backend servers, databases, or Canton Network issues could disrupt service.
Mitigation: Redundant infrastructure. Monitoring and alerting. Disaster recovery plans. Canton Network decentralization reduces single points of failure.
Key Personnel Risk
Risk: Loss of key team members could impact development and operations.
Mitigation: Documentation and knowledge sharing. Team expansion. Community contributions. Future decentralization.
Treasury Management
Risk: Poor treasury management could deplete reserves and affect sustainability.
Mitigation: Automated dynamic reward system. Minimum reserve requirements (40%). Transparent treasury reporting. Future DAO governance.