Multichain bridging protocol LiFi has launched a multi-message aggregator for decentralized autonomous organization (DAO) governance, according to an Aug. 17 announcement from LiFi research lead Arjun Chand. If implemented by decentralized exchanges, lending apps and other Web3 protocols, the new aggregator should help prevent governance attacks that originate from cross-chain bridges, according to the aggregator’s documentation.
The announcement comes after a vigorous debate over bridge security on the Uniswap forums in late January and early February concluded that no single bridge has all the security features necessary for secure governance.
For months, @lifiprotocol has worked closely with @UniswapFND to develop Multi-Message Aggregation (MMA), an additive security module for cross-chain messaging.
Here’s why we believe MMA could be a future-proof solution for different cross-chain messaging needs! pic.twitter.com/w34g3ZUNfi
— Arjun | LI.FI (@arjunnchand) August 17, 2023
Crypto exchange Uniswap is governed by a DAO called UniswapDAO. In January, UniswapDAO began discussing deploying a second copy of Uniswap to BNB Smart Chain (BSC). This opened the question of how Uniswap would be governed on more than one chain since, previously, all votes were taken on the Ethereum network. On Jan. 24, the DAO voted to deploy a second copy of Uniswap to BSC and to use bridging protocol Celer to send messages from BSC to Ethereum.
Although this proposal passed, controversy erupted almost immediately over the choice of Celer Bridge as the means of sending messages. Some DAO participants feared that Celer was not secure enough to prevent cross-chain governance attacks. Instead, they recommended Wormhole, LayerZero or DeBridge be used. Other participants defended Celer as the correct choice.
On Jan. 31, the DAO held a second vote on which bridge should be used for governance. Wormhole won the vote and was chosen as the official bridge for governance.
UniswapDAO proposal for cross-chain governance. Source: Uniswap
Despite the win for Wormhole, the referendum was contentious. Only 62% of Uniswap (UNI) tokens were used to cast “yes” votes. By contrast, many UniswapDAO proposals received nearly unanimous votes for or against.
In the debate leading up to the vote, many participants concluded that Uniswap should use multiple bridges instead of just one. This way, if one bridge became hacked, the other bridges would reject the malicious messages sent by it, and the attack would be prevented. However, no multi-bridge solution was available at the time. Hence, the proposal’s supporters argued that Wormhole should be used until a multi-bridge solution could be created.
Related: Token hoarders defeat the purpose of most DAOs: Study
In the Aug. 18 announcement from LiFi, Chand said the team’s new bridge aggregator would provide “a future-proof solution for different cross-chain messaging needs,” preventing protocols in the future from needing to rely on a single bridge for governance messages.
According to the aggregator’s documents, protocols can use LiFi to require that votes be confirmed on two out of three bridges to be valid. For example, if one bridge says that a DAO tokenholder voted “yes” but the two other bridges say that they voted “no,” the “no” vote will be confirmed. The aggregator can also be configured to use three out of five bridges or any other ratio the DAO wants.
LiFi bridge aggregator design diagram. Source: LiFi
LiFi isn’t the only team to create a multi-bridge aggregator for DAO governance. Gnosis released a similar protocol called “Hashi” in March.
In June, a UniswapDAO committee claimed that Hashi was “not yet production-ready,” had pending audits and did not have a bug bounty. Therefore, the committee concluded that it was unsuitable to handle DAO governance.
The LiFi aggregator has also not been audited. Chand claimed in his announcement that “soon, we’ll expand its testing and submit it for an audit by Trail of Bits.”
Source link
