> ## Documentation Index
> Fetch the complete documentation index at: https://docs.filter.fun/llms.txt
> Use this file to discover all available pages before exploring further.

# Threat model

> The seven adversaries the settlement pipeline defends against

## threat-model — structured facts

### Adversaries

```
adversaries:
  - id: whale_manipulator
    target: filter_outcome
    vector: late_stage_hp_gaming
    defense: hp_component_math + concentration_component

  - id: settlement_front_runner
    target: pol_deployment_value
    vector: mev_sandwich
    defense: atomic_settlement + oracle_only + deterministic_execution

  - id: reentrancy_attacker
    target: state_mutating_functions
    vector: external_call_callback
    defense: reentrancy_guard_on_all_state_mutations

  - id: merkle_proof_gamer
    target: rollover_or_bonus_claims
    vector: forged_or_replayed_proof
    defense: root_immutable + proof_verify + per_claim_nullifier

  - id: oracle_impersonator
    target: settlement_submission
    vector: msg_sender_spoof
    defense: immutable_oracle_address + no_upgrade_path

  - id: storage_corrupter
    target: contract_state
    vector: admin_setter_misuse
    defense: input_validation + zero_address_reject + bps_range_reject + one_shot_setters

  - id: dust_exploiter
    target: rounding_residual
    vector: integer_division_extraction
    defense: dust_routes_to_treasury
```

### Out of scope for the on-chain threat model

| Surface                             | Why out of scope                                   |
| ----------------------------------- | -------------------------------------------------- |
| Indexer                             | Off-chain; not the contract pipeline               |
| Oracle (operator process)           | Off-chain; oracle authority boundary is on-chain   |
| Web app                             | Off-chain; presentation layer                      |
| Third-party (V4 PoolManager, WETH9) | Inherited; not re-stated                           |
| Wash trading                        | Game-design / scoring concern, not contract threat |
| Coordinated whale strategy          | Game-theory concern, not contract threat           |

### References

| Resource                 | URL                                                                                            |
| ------------------------ | ---------------------------------------------------------------------------------------------- |
| Settlement security page | [https://docs.filter.fun/security/settlement](https://docs.filter.fun/security/settlement)     |
| Audit status page        | [https://docs.filter.fun/security/audit-status](https://docs.filter.fun/security/audit-status) |