Axelar

<h2 id="header-0">Tldr</h2><ul><li>Security is complex, and achieving robust security comes down to the right designs, engineering, processes &amp; operations.</li><li><a href="https://axelar.network/blog/a-technical-introduction-to-the-axelar-network" rel="noopener noreferrer nofollow">Axelar continues to lead the innovation front for cross-chain security</a> with its latest release adding new features.</li><li>Axelar security is powered by a combination of:<br />Proof-of-stake decentralized design at the core.<br />Novel quadratic voting mechanism increases decentralization of the network.<br />Validator security policies, such as mandatory key rotations.<br />Network functions that enable mitigation of malicious interconnected chains [suspend traffic from them].<br />Contract limits that specify how much can be transferred over a time period.<br />Rigorous audits &amp; bug bounties.</li></ul><h2 id="header-1">Introduction</h2><p>Managing complexity, risks and benefits is something we’re used to by nature. Think of nuclear energy: the risk of catastrophic failure is widely understood; motivated by the benefit of a powerful energy source, we apply robust engineering to contain it.</p><p>In the end, security is a multidimensional problem with binary outcomes. Defining the security of a system is an incredibly complex task, but with rigorous models, designs and engineering practices, we can build systems that stand up to the worst attacks.</p><p>When it comes to cross-chain communication, security is the core that it must deliver. As we know too well, most cross-chain offerings to date have failed to deliver it, resulting in lost funds now counted in the billions. Beyond coding errors, most projects are failing at achieving robustness in one or both of two core properties.</p><ul><li>Safety: how many nodes in the system does an adversary need to compromise to double-spend or maliciously execute a transaction [that may lead to an invalid asset transfer, for instance]?</li><li>Liveness: how many nodes in the system does the adversary need to compromise to halt the system?</li></ul><p>At first glance, it might be attractive to tell the application developers to rely on their own validators or oracles to meet the above core properties. However, 30&#43; years of the history of security on the internet shows that application developers do not want to or cannot make security decisions due to time or resourcing constraints.</p><p>In security, “the more features the better” is false. Features add complexity and, when it comes to security, fewer options are better. Only absolute must-haves should be exposed to developers. There is a reason that encryption protocols have gone through decades of debates between cryptography and security experts to achieve strong security. Meanwhile, application developers simply know internet security as the “https” protocol they must use.</p><p>So how do we achieve the above properties with maximal robustness?</p><h2 id="header-2">Step 1: Decentralize</h2><p>In most Byzantine systems, if you break liveness, the system halts its operation, but an adversary would need to do much more to break safety. For instance, a blockchain may halt under a denial-of-service attack on its validators, limiting their ability to send messages and reach consensus. But to break the safety of the blockchain, the adversary might need to find vulnerabilities in validator nodes and extract their secret keys.</p><p>Robustness of such systems is thus achieved via diversification of software deployments. One validator might deploy on an Ubuntu machine, another on Debian, some in cloud environments, some on-premise [definitely the preferred route].</p><p>This kind of decentralization is critical to satisfy strong safety and liveness properties needed to handle cross-chain functions. This is why Axelar is built using the battle-tested proof-of-stake consensus with a diverse and dynamic validator set. Anyone can join, anyone can participate, anyone can contribute to the security of the network.</p><p><img src="https://academy-public.coinmarketcap.com/optimized-uploads/3f4435e58951430cbbb207dda5b66b54.jpeg" /></p><h2 id="header-3">Step 2: Decentralize even more with quadratic voting</h2><p>Once you have a system that is technologically capable of decentralization, you need to determine a mechanism to increase decentralization over time, and counteract concentration of power. Validators that do a good job operating their nodes tend to receive more delegations from the community and have higher stake in the system. Standard proof-of-stake systems use delegated weight to count how many votes a validator should have in the system. The unfortunate side effect of this is stake concentration: if a single validator has a lot of stake, they have a lot of influence in the system.</p><p>Vitalik Buterin and others have <a href="https://vitalik.ca/general/2019/12/07/quadratic.html" rel="noopener noreferrer nofollow">written about this problem</a>, but to date no major blockchain has implemented a solution. Axelar is breaking new ground in this area. (You can <a href="https://axelar.network/blog/quadratic-voting-DAOs-dPoS-and-decentralization" rel="noopener noreferrer nofollow">read more here about Axelar&#39;s approach to quadratic voting</a> and potential applications in DAOs, dPoS and PoS systems.)</p><p>We previously experimented with a dual-key approach: some requests were weighted by stake, as in standard proof-of-stake systems; for other operations, each validator had only one vote, and top validators were chosen. However, the problem with the one-vote approach comes up if you start scaling it to large validator sets. If, say, the top 100 validators are chosen, and in the bottom part of the list, each validator has 0.1% of the stake, then to collect 10 votes (representing 10% of all votes), the adversary needs to have only 1.1% of the stake.</p><p>Quadratic voting is a way to continue decentralizing the system while making it harder for validators to accumulate more votes. In sum, the number of votes each validator gets becomes a square root of their stake. A threshold of validators, weighted by the square root of the stakes, then must collectively co-authorize every cross-chain request. As validators accumulate stake, it becomes more difficult for them to accumulate voting power.</p><p>Note that Axelar implements quadratic voting for validation and processing of cross-chain transactions, but the underlying consensus follows the standard PoS staking model [1 token, 1 vote] for block production and rewards. <a href="https://axelar.network/blog/axelar-implements-quadratic-voting-with-maeve-upgrade" rel="noopener noreferrer nofollow">Axelar implemented quadratic voting in its upgrade, code-named Maeve, announced Tuesday</a>.</p><p><img src="https://academy-public.coinmarketcap.com/optimized-uploads/b4bcd11e50d64f39a6224661b392ff2f.jpeg" /></p><h2 id="header-4">Step 3: Amplify stake security</h2><p>With <a href="https://cryptoslate.com/interchain-security-and-why-is-it-so-important-to-cosmos/" rel="noopener noreferrer nofollow">Interchain Security</a> available in the Cosmos ecosystem in the coming months, one network can “borrow” security of other networks. This would allow it to increase the stake used for validation on the network, making any economic attack much more difficult.</p><h2 id="header-5">Step 4: Plan for failures</h2><p>No system, no matter how well designed, is invulnerable. A system must know how to react to failures, whether malicious or accidental. The Axelar network is architectured with a number of additional safety measures in mind.</p><h3 id="rate-limits">Rate limits</h3><p>The Axelar network supports arbitrary message passing, but certain major assets (USDC, FRAX, ETH) are implemented as “routing” assets on the network, which allows applications to send tokens with messages in one function. These assets are subsequently locked and minted across the Axelar gateways. The gateways have a rate limiting function, putting a cap on how much of each asset can be transferred in a given time interval.</p><h3 id="key-rotations-on-the-network">Key rotations on the network</h3><p>Validators of the Axelar network maintain keys that allow them to co-authorize cross-chain requests, similarly to how they co-authorize every block on the blockchain. Validators are strongly encouraged to implement best practices for isolating these keys, and are <a href="https://docs.axelar.dev/validator/operations/mnemonic-rotation" rel="noopener noreferrer nofollow">required to rotate them periodically</a>. Key rotations secure the network against a persistent attacker, who might try to accumulate malicious keys by compromising validators sequentially.</p><h3 id="audits">Audits</h3><p>Axelar network code goes through continuous and rigorous audits.   <a href="https://github.com/axelarnetwork/audits" rel="noopener noreferrer nofollow">https://github.com/axelarnetwork/audits</a></p><p>Axelar network and contracts are all open-source. We actively encourage comments and revision from white-hat hackers. An active <a href="https://immunefi.com/bounty/axelarnetwork/" rel="noopener noreferrer nofollow">bug-bounty program</a> incentivizes submissions.</p><h2 id="header-6">Step 5: Application-level security add-ons</h2><p>Atop its core liveness and safety properties, the <a href="https://axelar.network/blog/general-message-passing-and-how-can-it-change-web3" rel="noopener noreferrer nofollow">Axelar network supports Turing-complete general message passing</a>. This functionality enables application developers to build their own custom cross-chain security policies. For instance, a <a href="https://axelar.network/blog/cross-chain-defi-building-web3-finance-future" rel="noopener noreferrer nofollow">DeFi application</a> may impose additional limits on the volume of transferred funds, repeat transactions, co-authoring large transfers, etc. These application-specific features can work alongside the network requirements to deliver even stronger security guarantee.</p>

Security at Axelar Core

Table of Contents

Axelar

Other articles published on May 19, 2023

Public debts: A risk for the markets?

Secure Your Chance to Compete for a $100,000 Prize Pool with AI GameToEarn

Singapore’s Whampoa Group to set up digital bank HQ in Bahrain

The real story behind Bitcoin Pizza Day- and the man who started it all

Wanchain Bridges BTC with BTC XFlows

Uwerx(WERX) And Arbitrum(ARB) Are Two Cryptocurrencies That Could Kickstart A Bull Run

Join our free newsletter for daily crypto updates!