热门标签 | HotTags
当前位置:  开发笔记 > 编程语言 > 正文

ADeepDiveIntoAcrossProtocol’sSecurity

https://www.reddit.com/r/AcrossProtocol/comments/tgwvl1/%E6%B7%B1%E5%85%A5%E4%BA%86%E8%A7%A3across%E

https://www.reddit.com/r/AcrossProtocol/comments/tgwvl1/%E6%B7%B1%E5%85%A5%E4%BA%86%E8%A7%A3across%E5%8D%8F%E8%AE%AE%E7%9A%84%E5%AE%89%E5%85%A8%E6%80%A7/

A Deep Dive Into Across Protocol’s Security

Across is a cross-chain bridge that allows you to securely send assets from L2 to L1. Across prides itself on its two pillars of security and trust: UMA’s Optimistic Oracle and tested smart contracts. The Optimistic Oracle showcases theoretical and economic guarantees, while the strength of our contracts is proven by UMA’s history, strong audit reports and the TVL. Across Protocol is the best bridge if you’re looking for somewhere quick, instant and secure to send assets cross-chain.

What is Across Protocol?

Across is a bridging method that uses bonded relayers, single-sided liquidity pools and UMA’s Optimistic Oracle, which when put all together allows for decentralized, instant transfers. Across’ cross-chain bridge allows you to return assets to Ethereum Mainnet, L1, in a cheap, secure and quick manner.

When analyzing Across Protocol’s security, two pillars are exceptionally clear: the Optimistic Oracle and tested smart contracts, which is proven by our audits, TVL in Across’ bridge and our contracts standing the test of time.

About the Optimistic Oracle.

An important driver of Across’s security is its use of UMA’s Optimistic Oracle, which allows smart contracts to bring off-chain data to on-chain. The function of the oracle is optimistic, which means it assumes the answers are true unless they are disputed.True to UMA’s vision of decentralization, Optimistic Oracle solves the oracle problem by providing decentralization in the following ways:

1 Multiple robots within the system fact-check each other, making sure the other robot notices that one of them is broken. The dispute window also allows for human intervention.2 Allow UMA token holders to vote to resolve disputes.UMA token holders are incentivized to vote because they are rewarded if they are on the winning side (more on this later). Finally, if the disputer is correct, they get the proposer’s bond, and vice versa. These deposits act as insurance for both parties.If you want to learn more about Optimistic Oracle, click the link here Introduction | UMA Docs (umaproject.org)

Here are some major security perks that go with Across using the Optimistic Oracle:

1.No singular admin or key master

Anyone can request a price or dispute an answer. Utilizing the Optimistic Oracle means that no one or thing has a centralized, decision-overriding power that could enable corruption.

2. Simple reward system to incentivize correct voting

If you’re correct? You receive $UMA inflation rewards generated by the protocol. Incorrect? No reward and perhaps a large amount of FOMO.

3.Decentralized kill switch

UMA voters can ignore or block clearly malicious or spam-like requests. In addition to this, spam-like requests that would aim to flood the system are unlikely in the first place, as it costs money for each DVM price request.

4.Token holder incentives

Investment-wise, token holders are incentivized to vote correctly because if the system tanks, so does their investment. In particular, very large UMA holders are especially disincentivized to act dishonestly, because they would tank the price of the token if they ever corrupted the vote.

5.UMA Engineer, Nick Pai, summed up his trust for Across and its voting system by stating, “As an engineer, I would trust Across because the contracts are simple and all the security is resolved off-chain, through the human network of voters. I’m comforted by the simplicity of the on-chain code and the security of the economic incentives.”

To tie all of these points together, the Optimistic Oracle provides guarantees that no one can successfully hack this system without it costing them more money than they could make.

The Optimistic Oracle is mostly secured by economics. The code is simple because it automatically assumes that the DVM will return the correct price and that humans will resolve things accurately. You’re betting on the UMA voters and as the past has shown, that’s a very safe bet to make.

Smart Contracts and Audits.

Risk Labs, the team that is responsible for writing the code for the UMA Protocol, has historically built high-quality products, showcased by their strong audit reports. UMA Protocol has a history of working on security, not taking shortcuts and emphasizing decentralization. It has never been exploited.

You can take a look at Across Protocol’s audit by OpenZeppelin here. When you’re done reviewing that one, take a look at the rest of the Optimistic Oracle’s previous audits here.

Summing Things Up.

Across prioritizes a goal of building something fantastically secure, ensuring that its mechanisms set the stage for a cheap, fast and safe transfer between chains.

The Optimistic Oracle provides both theoretical and economic guarantees, while our audit reports, TVL and millions that have crossed the bridge so far showcase our previous history of security and tested smart contracts.

All in all, if you’re looking for the best bridge to send assets cross-chain quickly, instantly and securely, look no further than Across Protocol.

If you would like to learn more about Across and stay up to date on our protocol, we encourage you to follow us on Twitter, read our docs site and join our Discord to take part in our fair, fair launch.

translator:sunbeam#9098

Article source: Lana Foglio

Chinese translation: scarlet131419


推荐阅读
  • Java容器中的compareto方法排序原理解析
    本文从源码解析Java容器中的compareto方法的排序原理,讲解了在使用数组存储数据时的限制以及存储效率的问题。同时提到了Redis的五大数据结构和list、set等知识点,回忆了作者大学时代的Java学习经历。文章以作者做的思维导图作为目录,展示了整个讲解过程。 ... [详细]
  • 本文介绍了OC学习笔记中的@property和@synthesize,包括属性的定义和合成的使用方法。通过示例代码详细讲解了@property和@synthesize的作用和用法。 ... [详细]
  • 本文主要解析了Open judge C16H问题中涉及到的Magical Balls的快速幂和逆元算法,并给出了问题的解析和解决方法。详细介绍了问题的背景和规则,并给出了相应的算法解析和实现步骤。通过本文的解析,读者可以更好地理解和解决Open judge C16H问题中的Magical Balls部分。 ... [详细]
  • Spring特性实现接口多类的动态调用详解
    本文详细介绍了如何使用Spring特性实现接口多类的动态调用。通过对Spring IoC容器的基础类BeanFactory和ApplicationContext的介绍,以及getBeansOfType方法的应用,解决了在实际工作中遇到的接口及多个实现类的问题。同时,文章还提到了SPI使用的不便之处,并介绍了借助ApplicationContext实现需求的方法。阅读本文,你将了解到Spring特性的实现原理和实际应用方式。 ... [详细]
  • Oracle分析函数first_value()和last_value()的用法及原理
    本文介绍了Oracle分析函数first_value()和last_value()的用法和原理,以及在查询销售记录日期和部门中的应用。通过示例和解释,详细说明了first_value()和last_value()的功能和不同之处。同时,对于last_value()的结果出现不一样的情况进行了解释,并提供了理解last_value()默认统计范围的方法。该文对于使用Oracle分析函数的开发人员和数据库管理员具有参考价值。 ... [详细]
  • sklearn数据集库中的常用数据集类型介绍
    本文介绍了sklearn数据集库中常用的数据集类型,包括玩具数据集和样本生成器。其中详细介绍了波士顿房价数据集,包含了波士顿506处房屋的13种不同特征以及房屋价格,适用于回归任务。 ... [详细]
  • importjava.util.ArrayList;publicclassPageIndex{privateintpageSize;每页要显示的行privateintpageNum ... [详细]
  • 关键词:Golang, Cookie, 跟踪位置, net/http/cookiejar, package main, golang.org/x/net/publicsuffix, io/ioutil, log, net/http, net/http/cookiejar ... [详细]
  • 本文介绍了一个在线急等问题解决方法,即如何统计数据库中某个字段下的所有数据,并将结果显示在文本框里。作者提到了自己是一个菜鸟,希望能够得到帮助。作者使用的是ACCESS数据库,并且给出了一个例子,希望得到的结果是560。作者还提到自己已经尝试了使用"select sum(字段2) from 表名"的语句,得到的结果是650,但不知道如何得到560。希望能够得到解决方案。 ... [详细]
  • 本文详细介绍了Spring的JdbcTemplate的使用方法,包括执行存储过程、存储函数的call()方法,执行任何SQL语句的execute()方法,单个更新和批量更新的update()和batchUpdate()方法,以及单查和列表查询的query()和queryForXXX()方法。提供了经过测试的API供使用。 ... [详细]
  • 个人学习使用:谨慎参考1Client类importcom.thoughtworks.gauge.Step;importcom.thoughtworks.gauge.T ... [详细]
  • 本文讨论了如何使用IF函数从基于有限输入列表的有限输出列表中获取输出,并提出了是否有更快/更有效的执行代码的方法。作者希望了解是否有办法缩短代码,并从自我开发的角度来看是否有更好的方法。提供的代码可以按原样工作,但作者想知道是否有更好的方法来执行这样的任务。 ... [详细]
  • Python SQLAlchemy库的使用方法详解
    本文详细介绍了Python中使用SQLAlchemy库的方法。首先对SQLAlchemy进行了简介,包括其定义、适用的数据库类型等。然后讨论了SQLAlchemy提供的两种主要使用模式,即SQL表达式语言和ORM。针对不同的需求,给出了选择哪种模式的建议。最后,介绍了连接数据库的方法,包括创建SQLAlchemy引擎和执行SQL语句的接口。 ... [详细]
  • Java自带的观察者模式及实现方法详解
    本文介绍了Java自带的观察者模式,包括Observer和Observable对象的定义和使用方法。通过添加观察者和设置内部标志位,当被观察者中的事件发生变化时,通知观察者对象并执行相应的操作。实现观察者模式非常简单,只需继承Observable类和实现Observer接口即可。详情请参考Java官方api文档。 ... [详细]
  • 本文讨论了在VMWARE5.1的虚拟服务器Windows Server 2008R2上安装oracle 10g客户端时出现的问题,并提供了解决方法。错误日志显示了异常访问违例,通过分析日志中的问题帧,找到了解决问题的线索。文章详细介绍了解决方法,帮助读者顺利安装oracle 10g客户端。 ... [详细]
author-avatar
手机用户2702933733
这个家伙很懒,什么也没留下!
PHP1.CN | 中国最专业的PHP中文社区 | DevBox开发工具箱 | json解析格式化 |PHP资讯 | PHP教程 | 数据库技术 | 服务器技术 | 前端开发技术 | PHP框架 | 开发工具 | 在线工具
Copyright © 1998 - 2020 PHP1.CN. All Rights Reserved | 京公网安备 11010802041100号 | 京ICP备19059560号-4 | PHP1.CN 第一PHP社区 版权所有