L2BEAT Bridges is a work in progress. You might find incomplete research or inconsistent naming. Join our discord to suggest improvements!
StarGate (LayerZero)
...
Tokens:
Knowledge Nuggets
Description
StarGate is built on top of LayerZero protocol and is a liquidity network for cross-chain transfer for assets. It leverages an oracle and relayer for cross-chain security for the protocol.
If you find something wrong on this page you can submit an issue or edit the information.
Risk summary
Funds can be stolen if
Users can be censored if
Technology
Principle of operation
StarGate is a Liquidity Network. It relies on liquidity providers to supply tokens to liquidity pools on each chain. Users can swap tokens between chains by transferring their tokens to a pool and receive token from the pool on the destination chain.
Oracles and relayers
StarGate is built on top of LayerZero protocol. LayerZero relies on oracles to periodically submit source chain block hashes to the destination chain. Once block hash is submitted, relayers can provide the merkle proof for the transfers / swaps.
Users can be censored if oracles or relayers fail to facilitate the transfer (CRITICAL).
Funds can be stolen if oracles and relayers collude to submit fraudulent block hash and relay fraudulent transfer (CRITICAL).
Permissions
The system uses the following set of permissioned addresses:
Bridge owner, can create new pools, chainpaths, set fees. This is a Gnosis Safe with 3 / 6 threshold.
Those are the participants of the StarGate Multisig.
The owner of Endpoint, UltraLightNode and Treasury contracts. Can switch to a new UltraLightNode for an Endpoint. Can switch proof library for an UltraLightNode and change Treasury. This is a Gnosis Safe with 2 / 5 threshold.
Those are the participants of the LayerZero Multisig.
Contract authorized to relay messages and - as a result - withdraw funds from the bridge.
Can upgrade LayerZero relayer contract with no delay.
Can upgrade LayerZero oracle contract with no delay.
Smart Contracts
The system consists of the following smart contracts:
Entry point for the user interaction with StarGate Bridge, handles the logic of swaps and adding liquidity, send messages to the bridge.
Main bridge contract, receives messages from LayerZero Endpoint, stores bridge configuration.
LayerZero Ethereum Endpoint.
LayerZero UltraLight Node. Used by oracles to checkpoint source chain block hashes.
LayerZero UltraLight Node.
USDC Pool. This contract stores the following tokens: USDC.
USDT Pool. This contract stores the following tokens: USDT.
ETH Pool. This contract stores the following tokens: ETH.
The current deployment carries some associated risks:
the source code of unverified contracts contains malicious code (CRITICAL).