Skip to main content

Multilayer Security

Introduction

The original smart contract's security is out of the XP.NETWORK's scope. All the responsibility for its security lies on the collection team.

Bridge Security Scope

Summary of the bridge hacks

According to Defilama, since the blockchain technology birth, 39% or $2.53 billion was stolen from the fungible token bridges out of the total value hacked (TVH) is $6.46 billion.

As we can see, the largest known hacks were caused by the Private key Compromise of 16.4% + 7.66% + 1.96% = 26.02% via social engineering or other methods.

Access control exploits occupy 8.08%.

Flashloans are involved with 4.74% + 2.42% + 2.22% + 2.22% = 11.6% attacks.

Math or logical mistakes are responsible for 6.99% + 2.65% + 1.67% + 1.84% = 13.5%.

Latest bridge attacks

DateChainBridgeAmount in $
Apr 2 2023BinanceAllbridge570 K
Nov 12 2022Eth, SolanaFTX450 M
Oct 6, 2022BinanceBinance Bridge570 M
Oct 2, 2022Eth, BinanceTransit Swap21 M
Jun 23, 2022Eth, BinanceHarmony Bridge100 M
Feb 2, 2022SolanaWormhole326 M
Nov 7, 2021Eth, BinanceChainSwap4.4 M

Bridge components as dungeons

The bridge is built with modular components. Every component is equipped with internal security mechanisms. Neither component blindly trusts any incoming information.

Bridge components' Security in detail

  1. NFT Contract Security
  2. Known NFT Attacks
  3. Bridge Contract
  4. Fee oracles
  5. Bridge Validators
  6. TypeScript API library
  7. The bridge UI