Search
Search for projects by name
Gnosis Bridge
About
Gnosis Bridge unites the former token bridges Omnibridge and xDai bridge as the official bridge between Gnosis Chain and Ethereum.
About
Gnosis Bridge unites the former token bridges Omnibridge and xDai bridge as the official bridge between Gnosis Chain and Ethereum.
2024 May 30 — 2025 May 30
Gnosis Bridge unites the former token bridges Omnibridge and xDai bridge as the official bridge between Gnosis Chain and Ethereum.
It uses a set of trusted validators to verify deposits for lock-mint bridging. Tokens sent to the bridge escrow can be further sent to yield generating contracts (e.g. AAVE, Spark) by permissioned actors to accrue interest.
Funds can be stolen if
Funds can be frozen if
Users can be censored if
Principle of operation
The Gnosis bridge is comprised of two standard multisig-validated token bridges (Omni and xDAI) with similar architecture and validators. While the xDAI bridge is only used for bridging DAI-related tokens (xDAI is Gnosis Chains gas token), the Omni bridge can be used to bridge many other ERC-20 tokens. Both bridges on ethereum are served by external validators that sign bridge messages via custom multisigs. Assets that are locked in one of the escrows on ethereum can be ‘invested’ by permissioned actors to generate yield. In the case of DAI / sDAI (Spark protocol), the yield is handed down to sDAI users on Gnosis Chain. The addition of Hashi (EVM Hash Oracle Aggregator) and light clients for message validation is being tested but remains optional for now.
Incoming transfers are externally verified
Incoming messages to Ethereum are validated by Multisigs with publicly known entities as their signers. The DAI bridge validators are validated by the 4/7 BridgeValidators_DAI Multisig and the Omni bridge by the 4/7 BridgeValidators_Omni Multisig. Only messages signed by at least the threshold amount of validators from the respective multisig are accepted for releasing funds from the escrow contract or for executing messages.
Users can be censored if validators decide to not pass selected messages between chains.
Funds can be stolen if validators sign a malicious message to mint or release tokens that they did not burn or lock on the other side.
Funds can be frozen if validators don't relay messages between chains.
Destination tokens
Users receive wrapped ERC677 tokens on Gnosis Chain. There’s a separate bridge for Dai.
Rehypothecation
User assets in the bridge escrow are not locked and can be moved by permissioned actors. This is usually done to generate yield, which can then be forwarded to the users.
Funds can be stolen if there's an exploit in external contracts that are used to invest user deposits.
Funds can be frozen if there are not enough tokens in the escrow to service withdrawals due to investing.
Ethereum
Roles:
Permissioned to sign crosschain messages, attesting to their validity.
Actors:
- A Multisig with 8/16 threshold.
- Can upgrade with no delay
- DaiForeignBridge
- ForeignAMB
- ForeignOmnibridge
- BridgeValidators_DAI
- BridgeValidators_Omni
- Can interact with DaiForeignBridge
- change all critical configurations like fees, yield farming for escrowed funds, limits, validating contract references
- Can interact with ForeignAMB
- change external validation logic refered to by this contract (e.g. Hashi)
- Can interact with ForeignOmnibridge
- change all critical configurations like yield farming for escrowed funds and limits
- Can interact with BridgeValidators_DAI
- change the threshold and manage signers
- Can interact with BridgeValidators_Omni
- change the threshold and manage signers
- A Multisig with 2/4 threshold.
- Can interact with HashiManager_Omni
- change critical configurations of the Hashi protocol like the validation contract addresses
- Can interact with HashiManager_DAI
- change critical configurations of the Hashi protocol like the validation contract addresses
- Can upgrade with no delay
- HashiManager_Omni
- HashiManager_DAI
Ethereum
Token bridge implementation and escrow for DAI-related tokens. Escrowed Dai can be invested in the Spark protocol for sDai.
Arbitrary Message Bridge validated by the BridgeValidators. Can be used for token bridges or any other cross-chain messaging.
Token bridge implementation and escrow for ERC-20 tokens.
Contract handling inbound messages for the Hashi protocol.
A hub contract for the Hashi protocol, an EVM Hash Oracle Aggregator.
- Roles:
- admin: EOA 1
- owner: Hashi Multisig
A hub contract for the Hashi protocol, an EVM Hash Oracle Aggregator.
- Roles:
- admin: EOA 1
- owner: Hashi Multisig
Contract handling outbound messages for the Hashi protocol.
The current deployment carries some associated risks:
Funds can be stolen if a contract receives a malicious code upgrade. There is no delay on code upgrades (CRITICAL).