A third-party audit of the project reportedly claimed that Orb devices do not record users’ iris-codes onto persistent memory and that they only transmit codes through end-to-end encrypted messaging.
Human identity project Worldcoin has obtained a third-party audit of its Orb software, according to a draft of a March 14 report from the development team seen by Cointelegraph. The audit was performed by Trail of Bits, which claimed to have found no vulnerabilities that “can be directly exploited in relation to the Project Goals as described,” the report stated. The Trail of Bits' full report is expected to be published on March 14, according to an emailed statement from Worldcoin.
Worldcoin allows people to verify their humanity by registering with a phone number, email address, or by having their iris scanned by a device called an “Orb.” When a user performs this registration, they obtain a “World ID” that can be used to prove they are a real human. The project was co-founded by Sam Altman, who also co-founded ChatGPT developer OpenAI. Altman claimed that he helped to create Worldcoin out of a fear that AI bots may soon be able to pose as humans effectively.
Privacy advocates have criticized Worldcoin on the grounds that it risks leaking users' iris-scans to hackers or governments. These iris-scans could potentially be used to reveal all of the activity a person performs with their World ID, critics claim.
