Structurally correct spoofs exploit tolerance thresholds and sampled checks

Fang et al., including the original proposers, present spoofing strategies that work across PoL configurations at "a fraction of the cost of previous spoofing strategies" ⁴. The strategies exploit the tolerance that verification must allow for hardware noise, and the choice of which updates the verifier re-runs ⁴.