{
  "product": "Ghostnonce",
  "generated_at": "2026-09-05T20:28:37.545194+00:00",
  "signers": [
    "A1FGsvF7c87UgjYxDyC22rAKAqchBAcFLSMcAGhECLKV"
  ],
  "findings": [],
  "limitation": "Authority-owned nonce inventory is necessary but not sufficient. An attacker-owned nonce + evil fee-payer can still hide durable-nonce txs (OtterSec).",
  "method": "System Program getProgramAccounts dataSize=80 memcmp authority@offset 8, plus creation-sig enrichment.",
  "report_sha256": "f7558a823ac125e1bc38fbd75ebde64f7383efda5849cb7f3eab032b17077f57"
}