CCA Security & Risk Analysis 3

Question 1

Which type of oracle manipulation attack artificially moves the price reported to a DeFi protocol within a single block to exploit lending or liquidation logic?

Accepted Answer

Flash loan oracle attack

Answer

Flash loan oracle attacks use uncollateralized loans within one transaction to manipulate spot price oracles and exploit protocols relying on them.

Question 2

What cryptographic property ensures that a transaction signed with a private key cannot be repudiated by the signer in blockchain systems?

Accepted Answer

Non-repudiation

Answer

Non-repudiation via digital signatures means the key owner cannot deny authorizing a transaction because only they possess the private key.

Question 3

When auditing a cryptocurrency exchange, which control is most effective at detecting unauthorized access to production systems?

Accepted Answer

Implementing privileged access management (PAM) with session recording

Answer

PAM with session recording provides granular logging and replay of all privileged actions, enabling detection and forensic investigation of unauthorized access.

Question 4

A blockchain auditor discovers that a protocol's emergency pause function is controlled by a single externally owned account (EOA). What risk does this represent?

Accepted Answer

Single point of failure and key-person risk for critical safety functions

Answer

A single EOA controlling emergency functions creates a key-person dependency where compromise or loss of one key disables the protocol's safety mechanism.

Question 5

What is the primary purpose of a Merkle proof in the context of cryptocurrency exchange audits and proof-of-reserves?

Accepted Answer

To cryptographically prove a specific account balance is included in the exchange's total reserve set

Answer

Merkle proofs allow a user to verify their balance is included in the exchange's liability tree without the exchange revealing all other customer balances.

(CCA) Certified Cryptocurrency Auditor Practice Test

(CCA) Certified Cryptocurrency Auditor Practice Test

CCA Security & Risk Analysis 3