cacti
cacti copied to clipboard
Define and implement incident response mechanism
It is still not clear what a good incident response framework and interfaces should be for cross-chain applications. [Some info in our recent paper ](https://www.techrxiv.org/users/687326/articles/691934-sok-security-and-privacy-of-blockchain-interoperability(more). We expect the requirements of this issue to be clearer in the next months.
Requirements:
- Define processes that deal with a violation for the cross-chain model (and their different scenarios). Processes should include defense mechanisms (such as implementing circuit breakers in the smart contracts)
- Implement defense mechanisms in the smart contract
- Implement defense mechanisms in SATP core, namely the ability to send transactions to the bridge that trigger such behaviour.
- Expose endpoint in SATP that administers the defense mechanisms (for example, manually enable and disable bridge pausing)
- Update Prometheus metrics for incidents (number of incidents, average time to resolve incident, etc)
I will do this task.