Nova Exchange · Invite-only
Nova Exchange Abuse Resistance
Enrollment integrity and payout-risk intervention testing against the Nova sandbox exchange with simulated assets.
Authorized testing only
- —Use only approved accounts, systems, and scenarios.
- —Do not interact with uninvolved people.
- —Do not cause real financial loss.
- —Do not access accounts without authorization.
- —Do not obtain or submit stolen credentials.
- —Do not harass, dox, threaten, or extort anyone.
- —Stop testing if you encounter real victim harm.
Authorized scope
Sandbox KYC pipelineApproved identity fixtures
Simulated withdrawalsTestnet assets only
In-scope weakness categories
S1WE-100
Identity & Enrollment
Identity proofing, onboarding, enrollment, uniqueness and verification controls.
S1WE-600
Payments & Monetization
Risky transactions, fraudulent monetization, mule behavior, payout controls.
S1WE-900
Coordinated Abuse
Graph, cluster, cross-account, cross-device and campaign-level detection.
Public-safe disclosures
S1AV-2027-004315.6MediumNeeds More Info
Approved identity fixtures re-enroll repeatedly despite duplication control
Sanctioned test identities were able to complete enrollment repeatedly in the sandbox despite a control intended to prevent duplication.