Orbiter Finance is actively advancing its integration within the Ethereum ecosystem. Recently, the company co-released a study on cross-chain bridge security with Kyle Charbonnet from the Ethereum Foundation, a professor from the University of California, Santa Barbara, and the founder of Nubit, Feng Yu (@captain8299), titled (Scutum: Temporal Verification for Cross-Rollup Bridges via Goal-Driven Reduction). This paper was co-authored by experts and academic professors in the field of Ethereum ecosystem security, proposing a mathematical model and backtesting the on-chain data of the Orbiter bridge from the past 2-3 years, aimed at proactively identifying fraudulent transactions through modeling. This collaboration aims to provide theoretical support and practical guidance for Orbiter's Maker system.
Core Content of the Research Paper
This paper delves into how to evaluate the security of cross Rollup bridging through a scalable validator system. The research team emphasizes three key points:
Scalable Validators: Scutum's evaluation of mainstream cross Rollup bridges (including Orbiter Finance) has uncovered multiple zero-day vulnerabilities. The approach utilizes a comprehensive multi-model framework, capturing the temporal attributes of the complex interactions between individual behaviors and various components. Additionally, to enhance scalability, the paper introduces reachability analysis through contract graph representation.
Security Model Construction: Scutum approximates temporal security validation through reachability analysis of contract graphs, combined with program analysis techniques. Furthermore, it employs a conflict-driven refinement loop to eliminate false positives, thereby improving the model's predictive accuracy across different bridging models.
Performance: The Scutum tool demonstrates good runtime performance, making efficient analysis applicable to real-time or near-real-time scenarios.
Commitment to Security
Since its establishment in 2021, Orbiter has been deeply exploring security, aiming to become a reliable infrastructure in the cross-chain domain. Juson Xia, the head of Vizing technology at Orbiter Finance, stated: "We will never give up on building a more secure cross-chain bridge model. In addition to proactively identifying potential fraudulent transactions through backtesting on-chain data, we will also deepen academic communication and engineering collaboration with Ethereum and cryptographers."