cacti
cacti copied to clipboard
Recovery mechanisms for incidents
It is still not clear what a good incident response framework and interfaces should be for cross-chain applications. [Some info in our recent paper ](https://www.techrxiv.org/users/687326/articles/691934-sok-security-and-privacy-of-blockchain-interoperability(more). We expect the requirements of this issue to be clearer in the next months.
Requirements:
- Define processes that deal after a violation for the cross-chain model has been solved(and their different scenarios). Processes should include recovery mechanisms (such as revert transactions, update allow and deny lists, etc)
- Implement recovery mechanisms in the smart contract
- Implement recovery mechanisms in SATP core, namely the ability to send transactions to the bridge that trigger the recovery, and messages to counterparty gateways
- Expose endpoint in SATP that administers the recovery mechanisms (for example, manually contacting counterparty gateway)
- Update Prometheus metrics for incidents (time to resume normal operations, e.g., volume)
I will do this task.