mina
mina copied to clipboard
A method to delete accounts
We need a way to remove accounts so that an attacker does not flood the database with stale accounts. Previously, we removed accounts if their balance is assigned to zero. However, this is not convenient for the user.
It's not that it's just inconvenient for the user, the way we were doing it was unsafe and potentially made replaying transactions possible. We will have to think through more deeply a safe way of accomplishing it.
@imeckler I think we discussed some sort of "replacement" transaction that, if an account has zero (or negligible) balance, lets us install a new public key into that index (but not resetting the nonce). I'm still a bit leery of this- it basically turns into a minimum deposit to hold an account, else some cowboy can kick you out of the ledger.
Currently we have the deleteAccount daemon's GraphQL Mutation.
Hope it helps. Closing.
That's unrelated, this is about reusing space in the merkle tree.
related but just old issue for reference, once account deletes is done, this can be closed