Skip to content

Commit

Permalink
grammarly check
Browse files Browse the repository at this point in the history
  • Loading branch information
Ilaria Enache authored and Ilaria Enache committed Jul 26, 2024
1 parent b574fd5 commit 7384065
Showing 1 changed file with 16 additions and 16 deletions.
32 changes: 16 additions & 16 deletions learn/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,12 +2,12 @@

## Core Security Assumptions

At the core, Wormhole is secured by a network of **[Guardians](#){target=\_blank}** nodes that validate and sign messages. If a super majority (e.g. 13 out of 19) Guardians sign the same message, it can be considered valid. A smart contract on the target chain will verify the signatures and format of the message before approving any transaction.
At the core, Wormhole is secured by a network of **[Guardians](#){target=\_blank}** nodes that validate and sign messages. If a super majority (e.g., 13 out of 19) Guardians sign the same message, it can be considered valid. A smart contract on the target chain will verify the signatures and format of the message before approving any transaction.

- Wormhole's core security primitive is its signed messages (signed VAAs)
- The Guardian network is currently secured by a collection of 19 of the world's top **[validator companies](https://wormhole-foundation.github.io/wormhole-dashboard/#/?endpoint=Mainnet){target=\_blank}**
- Guardians produce signed state attestations (signed VAAs), when requested by a Core Contract integrator
- Every Guardian runs full nodes (rather than light nodes) of every blockchain in the Wormhole network. This means that if a blockchain suffers a consensus attack or hard fork, the blockchain will disconnect from the network, rather than potentially produce invalid signed VAAs
- Guardians produce signed state attestations (signed VAAs) when requested by a Core Contract integrator
- Every Guardian runs full nodes (rather than light nodes) of every blockchain in the Wormhole network, so if a blockchain suffers a consensus attack or hard fork, the blockchain will disconnect from the network rather than potentially produce invalid signed VAAs
- Any Signed VAA can be verified as authentic by the Core Contract of any other chain
- Relayers are considered untrusted in the Wormhole ecosystem

Expand All @@ -17,23 +17,23 @@ In summary:
- By default, you only trust Wormhole's signing process and the Core Contracts of the chains you're on
- You can expand your contract and chain dependencies as you see fit

Core assumptions aside, there are many other factors which impact the real-world security of decentralized platforms. Here is more information on additional measures which have been put in place to ensure the security of Wormhole.
Core assumptions aside, many other factors impact the real-world security of decentralized platforms. Here is more information on additional measures that have been put in place to ensure the security of Wormhole.

## Guardian Network

Wormhole is an evolving platform. While the Guardian set currently comprises 19 validators, this is mostly a limitation of current blockchain technology.
Wormhole is an evolving platform. While the Guardian set currently comprises 19 validators, this is a limitation of current blockchain technology.

### Governance

Governance is the process through which contract upgrades happen. Guardians manually vote on governance proposals which originate inside the Guardian Network and are then submitted to ecosystem contracts.
Governance is the process through which contract upgrades happen. Guardians manually vote on governance proposals that originate inside the Guardian Network and are then submitted to ecosystem contracts.

This means that **governance actions are held to the same security standard** as the rest of the system. A 2/3 super-majority of the Guardians are required to pass any Governance action.
This means that **governance actions are held to the same security standard** as the rest of the system. A 2/3 supermajority of the Guardians is required to pass any Governance action.

Governance messages can target any of the various wormhole modules, including the core contracts as well as all currently deployed token bridge contracts. When a guardian signs such a message, its signature implies a vote on the action in question. Once more than 2/3 of the guardians have signed, the message and governance action are considered valid.
Governance messages can target any of the various wormhole modules, including the core contracts and all currently deployed token bridge contracts. When a guardian signs such a message, its signature implies a vote on the action in question. Once more than 2/3 of the guardians have signed, the message and governance action are considered valid.

All governance actions and contract upgrades have been managed via Wormhole's **on-chain governance system**.

Via governance, the Guardians are able to:
Via governance, the Guardians can:

- Change the current Guardian set
- Expand the Guardian set
Expand All @@ -43,26 +43,26 @@ The Governance system is fully open source in the core repository. See the **[Op

## Monitoring

A key element of Wormhole's defense-in-depth strategy is that each Guardian is a highly-competent validator company with their own in-house processes for running, monitoring, and securing blockchain operations. This heterogeneous approach to monitoring increases the likelihood that fraudulent activity is detected and reduces the number of single failure points in the system.
A key element of Wormhole's defense-in-depth strategy is that each Guardian is a highly competent validator company with its own in-house processes for running, monitoring, and securing blockchain operations. This heterogeneous approach to monitoring increases the likelihood that fraudulent activity is detected and reduces the number of single failure points in the system.

Guardians are not just running Wormhole validators, they're running validators for **every blockchain inside of Wormhole** as well, which allows them to perform monitoring **holistically across decentralized computing**, rather than just at a few single points.
Guardians are not just running Wormhole validators; they're running validators for **every blockchain inside of Wormhole** as well, which allows them to perform monitoring **holistically across decentralized computing**, rather than just at a few single points.

Guardians Monitor:

- Block Production & Consensus of each blockchain. If a blockchain's consensus is violated it disconnects from the network until the Guardians resolve the issue.
- Block Production & Consensus of each blockchain. If a blockchain's consensus is violated it will be disconnected from the network until the Guardians resolve the issue.
- Smart Contract level data. Via processes like the Governor, Guardians constantly monitor the circulating supply and token movements across all supported blockchains.
- Guardian Level activity. The Guardian Network functions as an autonomous decentralized computing network, complete with its own blockchain (**[Gateway](#){target=\_blank}**).
- Guardian Level activity. The Guardian Network functions as an autonomous decentralized computing network, complete with its blockchain (**[Gateway](#){target=\_blank}**).

## Gateway & Asset Layer Protections

One of the most powerful aspects of the Wormhole ecosystem is that Guardians effectively have **the entire state DeFi available to them**.

Gateway is a Cosmos based blockchain which runs internally to the Guardian network, whereby the Guardians can effectively execute smart contracts against the current state of all blockchains, rather than just one blockchain.
Gateway is a Cosmos-based blockchain that runs internally to the Guardian network, whereby the Guardians can effectively execute smart contracts against the current state of all blockchains rather than just one blockchain.

This enables additional protection for the Wormhole Asset Layer in addition to the core assumptions:
- **Global Accountant** - the accountant tracks the total circulating supply of all Wormhole assets across all chains and prevents any blockchain from bridging assets which would violate the supply invariant

In addition to the Global Accountant, Guardians may only sign transfers that do not violate the requirements of the Governor. The **[Governor](https://github.com/wormhole-foundation/wormhole/blob/main/whitepapers/0007_governor.md){target=\_blank}** tracks inflows and outflows of all blockchains and delays suspicious transfers which may be indicative of a exploit.
In addition to the Global Accountant, Guardians may only sign transfers that do not violate the requirements of the Governor. The **[Governor](https://github.com/wormhole-foundation/wormhole/blob/main/whitepapers/0007_governor.md){target=\_blank}** tracks inflows and outflows of all blockchains and delays suspicious transfers which may be indicative of an exploit.

## Open Source

Expand Down Expand Up @@ -92,7 +92,7 @@ Wormhole has had audits performed by the following firms, and continues to seek

## Bug Bounties

Wormhole has one of the largest bug bounty programs in all of software development, and has repeatedly shown commitment to engaging with the white hat community.
Wormhole has one of the largest bug bounty programs in software development, and has repeatedly shown commitment to engaging with the white hat community.

Wormhole hosts two bug bounty programs:

Expand Down

0 comments on commit 7384065

Please sign in to comment.