Update all alAsset and ALCX bridging to utilize the a custom implementation of the OFT standard for cross-chain messaging. The new system will require at least 2 of the following messaging services (DVNs) to push a bridge transaction through:
Rate limits for each chain will be as follows:
The upgrade enhances the cross-chain security of Alchemix while also significantly reducing bridge times across all chains.
Most blockchains can't communicate with each other quickly, so transferring tokens between them requires a messaging service. It’s crucial to minimize trust of this system as much as possible, as it is extrinsic to Ethereum and has many off-chain components. However, we also want to make sure that users find the process of bridging tokens easy and quick.
The xERC20 standard allows Alchemix to select its own messaging service, ensuring better control over the risk in the event that a messaging service is compromised.
Alchemix currently utilizes the xERC20 system, which integrates two messaging services: Connext and Wormhole. Each has a separate rate limit. The potential damage is limited to the sum of rates on all chains for one specific service, OR the sum of rate limits on a single chain for all services. Thus, adding more chains and more messaging services both increase systematic risk.
The system operates with the following restrictions:
The xERC20 system is owned by the Alchemix DAO. The Alchemix DAO decides who the messaging service is. Connext is sunsetting, which means there will currently be only one operational service (Wormhole) which does not service all chains. All potential services with reasonable bridge times, including Wormhole, are fully dependent on off-chain components. Thus, it is a good time to upgrade the messaging system to the LayerZero standards.
The new system will still utilize the existing xERC20 contracts. However, a new custom messaging contract will be whitelisted on each chain. The new messaging contract will be owned by Alchemix and uses a custom implementation of LayerZero’s OFT and OAPP standards. The contract whitelists three messaging services per chain that may approve mints and burns of alAssets as well as manage the lockbox on Mainnet. At least two messaging services are required to validate any bridging transaction.
The result of the updated design is twofold:
The proposed DVNs and the reasons for selection are:
The new system will have significantly better UX in the following ways:
The contracts for this upgrade were built by Blockdudes, who also built the AMO Harvest tool grant. The grant project can be viewed here: https://questbook.app/dashboard/?grantId=0xeb75a84db372485817c5fd4bf59ea639dfca685c&chainId=10&role=admin&proposalId=67dd416067a7ee92b7e521b6&isRenderingProposalBody=true
The contracts are currently undergoing an internal review, and the custom pieces of the code will be audited through Immunefi this month.
For authorizes the Alchemix DAO to move forward with the OFT upgrade, targeting completion by end of June.