“In principle, Tools for Humanity’s servers can re-bind an existing iris code to a new identity commitment. They can then send that new commitment to the chain using a special call in the smart contract.”
Worldcoin swears your iris code exists only to stop duplicate signups. The company also keeps raw iris scans for users who opt into “data custody,” encrypted under a key it holds. The server can quietly reassign whose eyeball owns which account. A Johns Hopkins cryptographer went in expecting a Bond villain and still puts it at 40% that this is a biometric database for e-commerce in disguise.