Worldcoin Addresses Orb’s Privacy Concerns with Third-Party Audit Worldcoin has released the results of a third-party audit conducted by Trail of Bits focused on its iris-scanning Orb technology. According to a recent report, Tools for Humanity (TFH) and the
Worldcoin Foundation enlisted Trail of Bits to perform a detailed audit of the Orb’s software. This audit went beyond standard security checks to assess specific privacy and
functionality aspects of the Orb.
The audit investigated
Worldcoin’s Orb devices, focusing on how they handle and secure user data. The findings indicated that the devices do not store personal information, except for iris codes, which are encrypted and uploaded for
verification purposes.
During the default opt-out signup process, the Orb is
designed to collect only the user’s iris code, avoiding any storage or transfer of personally identifiable information (PII) other than this.
The goal is to ensure no PII is written to the Orb’s persistent storage or uploaded from the device, except for the iris code. For users opting into a more data-inclusive signup flow, any PII saved on the device’s SSD is encrypted asymmetrically, making it inaccessible for decryption by the
Orb itself.
