热门标签 | HotTags
当前位置:  开发笔记 > 编程语言 > 正文

ADeepDiveIntoAcrossProtocol’sSecurity

https://www.reddit.com/r/AcrossProtocol/comments/tgwvl1/%E6%B7%B1%E5%85%A5%E4%BA%86%E8%A7%A3across%E

https://www.reddit.com/r/AcrossProtocol/comments/tgwvl1/%E6%B7%B1%E5%85%A5%E4%BA%86%E8%A7%A3across%E5%8D%8F%E8%AE%AE%E7%9A%84%E5%AE%89%E5%85%A8%E6%80%A7/

A Deep Dive Into Across Protocol’s Security

Across is a cross-chain bridge that allows you to securely send assets from L2 to L1. Across prides itself on its two pillars of security and trust: UMA’s Optimistic Oracle and tested smart contracts. The Optimistic Oracle showcases theoretical and economic guarantees, while the strength of our contracts is proven by UMA’s history, strong audit reports and the TVL. Across Protocol is the best bridge if you’re looking for somewhere quick, instant and secure to send assets cross-chain.

What is Across Protocol?

Across is a bridging method that uses bonded relayers, single-sided liquidity pools and UMA’s Optimistic Oracle, which when put all together allows for decentralized, instant transfers. Across’ cross-chain bridge allows you to return assets to Ethereum Mainnet, L1, in a cheap, secure and quick manner.

When analyzing Across Protocol’s security, two pillars are exceptionally clear: the Optimistic Oracle and tested smart contracts, which is proven by our audits, TVL in Across’ bridge and our contracts standing the test of time.

About the Optimistic Oracle.

An important driver of Across’s security is its use of UMA’s Optimistic Oracle, which allows smart contracts to bring off-chain data to on-chain. The function of the oracle is optimistic, which means it assumes the answers are true unless they are disputed.True to UMA’s vision of decentralization, Optimistic Oracle solves the oracle problem by providing decentralization in the following ways:

1 Multiple robots within the system fact-check each other, making sure the other robot notices that one of them is broken. The dispute window also allows for human intervention.2 Allow UMA token holders to vote to resolve disputes.UMA token holders are incentivized to vote because they are rewarded if they are on the winning side (more on this later). Finally, if the disputer is correct, they get the proposer’s bond, and vice versa. These deposits act as insurance for both parties.If you want to learn more about Optimistic Oracle, click the link here Introduction | UMA Docs (umaproject.org)

Here are some major security perks that go with Across using the Optimistic Oracle:

1.No singular admin or key master

Anyone can request a price or dispute an answer. Utilizing the Optimistic Oracle means that no one or thing has a centralized, decision-overriding power that could enable corruption.

2. Simple reward system to incentivize correct voting

If you’re correct? You receive $UMA inflation rewards generated by the protocol. Incorrect? No reward and perhaps a large amount of FOMO.

3.Decentralized kill switch

UMA voters can ignore or block clearly malicious or spam-like requests. In addition to this, spam-like requests that would aim to flood the system are unlikely in the first place, as it costs money for each DVM price request.

4.Token holder incentives

Investment-wise, token holders are incentivized to vote correctly because if the system tanks, so does their investment. In particular, very large UMA holders are especially disincentivized to act dishonestly, because they would tank the price of the token if they ever corrupted the vote.

5.UMA Engineer, Nick Pai, summed up his trust for Across and its voting system by stating, “As an engineer, I would trust Across because the contracts are simple and all the security is resolved off-chain, through the human network of voters. I’m comforted by the simplicity of the on-chain code and the security of the economic incentives.”

To tie all of these points together, the Optimistic Oracle provides guarantees that no one can successfully hack this system without it costing them more money than they could make.

The Optimistic Oracle is mostly secured by economics. The code is simple because it automatically assumes that the DVM will return the correct price and that humans will resolve things accurately. You’re betting on the UMA voters and as the past has shown, that’s a very safe bet to make.

Smart Contracts and Audits.

Risk Labs, the team that is responsible for writing the code for the UMA Protocol, has historically built high-quality products, showcased by their strong audit reports. UMA Protocol has a history of working on security, not taking shortcuts and emphasizing decentralization. It has never been exploited.

You can take a look at Across Protocol’s audit by OpenZeppelin here. When you’re done reviewing that one, take a look at the rest of the Optimistic Oracle’s previous audits here.

Summing Things Up.

Across prioritizes a goal of building something fantastically secure, ensuring that its mechanisms set the stage for a cheap, fast and safe transfer between chains.

The Optimistic Oracle provides both theoretical and economic guarantees, while our audit reports, TVL and millions that have crossed the bridge so far showcase our previous history of security and tested smart contracts.

All in all, if you’re looking for the best bridge to send assets cross-chain quickly, instantly and securely, look no further than Across Protocol.

If you would like to learn more about Across and stay up to date on our protocol, we encourage you to follow us on Twitter, read our docs site and join our Discord to take part in our fair, fair launch.

translator:sunbeam#9098

Article source: Lana Foglio

Chinese translation: scarlet131419


推荐阅读
  • 在 Kubernetes 中,Pod 的调度通常由集群的自动调度策略决定,这些策略主要关注资源充足性和负载均衡。然而,在某些场景下,用户可能需要更精细地控制 Pod 的调度行为,例如将特定的服务(如 GitLab)部署到特定节点上,以提高性能或满足特定需求。本文深入解析了 Kubernetes 的亲和性调度机制,并探讨了多种优化策略,帮助用户实现更高效、更灵活的资源管理。 ... [详细]
  • javascript分页类支持页码格式
    前端时间因为项目需要,要对一个产品下所有的附属图片进行分页显示,没考虑ajax一张张请求,所以干脆一次性全部把图片out,然 ... [详细]
  • 本文介绍了如何利用 `matplotlib` 库中的 `FuncAnimation` 类将 Python 中的动态图像保存为视频文件。通过详细解释 `FuncAnimation` 类的参数和方法,文章提供了多种实用技巧,帮助用户高效地生成高质量的动态图像视频。此外,还探讨了不同视频编码器的选择及其对输出文件质量的影响,为读者提供了全面的技术指导。 ... [详细]
  • 在对WordPress Duplicator插件0.4.4版本的安全评估中,发现其存在跨站脚本(XSS)攻击漏洞。此漏洞可能被利用进行恶意操作,建议用户及时更新至最新版本以确保系统安全。测试方法仅限于安全研究和教学目的,使用时需自行承担风险。漏洞编号:HTB23162。 ... [详细]
  • 在Linux系统中,网络配置是至关重要的任务之一。本文详细解析了Firewalld和Netfilter机制,并探讨了iptables的应用。通过使用`ip addr show`命令来查看网卡IP地址(需要安装`iproute`包),当网卡未分配IP地址或处于关闭状态时,可以通过`ip link set`命令进行配置和激活。此外,文章还介绍了如何利用Firewalld和iptables实现网络流量控制和安全策略管理,为系统管理员提供了实用的操作指南。 ... [详细]
  • 投融资周报 | Circle 达成 4 亿美元融资协议,唯一艺术平台 A 轮融资超千万美元 ... [详细]
  • 本文详细介绍了在 CentOS 7 系统中配置 fstab 文件以实现开机自动挂载 NFS 共享目录的方法,并解决了常见的配置失败问题。 ... [详细]
  • 本文介绍如何使用 Python 的 DOM 和 SAX 方法解析 XML 文件,并通过示例展示了如何动态创建数据库表和处理大量数据的实时插入。 ... [详细]
  • poj 3352 Road Construction ... [详细]
  • DVWA学习笔记系列:深入理解CSRF攻击机制
    DVWA学习笔记系列:深入理解CSRF攻击机制 ... [详细]
  • 基于Net Core 3.0与Web API的前后端分离开发:Vue.js在前端的应用
    本文介绍了如何使用Net Core 3.0和Web API进行前后端分离开发,并重点探讨了Vue.js在前端的应用。后端采用MySQL数据库和EF Core框架进行数据操作,开发环境为Windows 10和Visual Studio 2019,MySQL服务器版本为8.0.16。文章详细描述了API项目的创建过程、启动步骤以及必要的插件安装,为开发者提供了一套完整的开发指南。 ... [详细]
  • 本文介绍了如何利用Struts1框架构建一个简易的四则运算计算器。通过采用DispatchAction来处理不同类型的计算请求,并使用动态Form来优化开发流程,确保代码的简洁性和可维护性。同时,系统提供了用户友好的错误提示,以增强用户体验。 ... [详细]
  • 本文深入解析了WCF Binding模型中的绑定元素,详细介绍了信道、信道管理器、信道监听器和信道工厂的概念与作用。从对象创建的角度来看,信道管理器负责信道的生成。具体而言,客户端的信道通过信道工厂进行实例化,而服务端则通过信道监听器来接收请求。文章还探讨了这些组件之间的交互机制及其在WCF通信中的重要性。 ... [详细]
  • 优化后的标题:深入探讨网关安全:将微服务升级为OAuth2资源服务器的最佳实践
    本文深入探讨了如何将微服务升级为OAuth2资源服务器,以订单服务为例,详细介绍了在POM文件中添加 `spring-cloud-starter-oauth2` 依赖,并配置Spring Security以实现对微服务的保护。通过这一过程,不仅增强了系统的安全性,还提高了资源访问的可控性和灵活性。文章还讨论了最佳实践,包括如何配置OAuth2客户端和资源服务器,以及如何处理常见的安全问题和错误。 ... [详细]
  • Python 程序转换为 EXE 文件:详细解析 .py 脚本打包成独立可执行文件的方法与技巧
    在开发了几个简单的爬虫 Python 程序后,我决定将其封装成独立的可执行文件以便于分发和使用。为了实现这一目标,首先需要解决的是如何将 Python 脚本转换为 EXE 文件。在这个过程中,我选择了 Qt 作为 GUI 框架,因为之前对此并不熟悉,希望通过这个项目进一步学习和掌握 Qt 的基本用法。本文将详细介绍从 .py 脚本到 EXE 文件的整个过程,包括所需工具、具体步骤以及常见问题的解决方案。 ... [详细]
author-avatar
手机用户2702933733
这个家伙很懒,什么也没留下!
PHP1.CN | 中国最专业的PHP中文社区 | DevBox开发工具箱 | json解析格式化 |PHP资讯 | PHP教程 | 数据库技术 | 服务器技术 | 前端开发技术 | PHP框架 | 开发工具 | 在线工具
Copyright © 1998 - 2020 PHP1.CN. All Rights Reserved | 京公网安备 11010802041100号 | 京ICP备19059560号-4 | PHP1.CN 第一PHP社区 版权所有