Bridge uses same key custody for >30% validators
Aave v3's assessment for RD-F-156 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
For a.DI: multi-bridge design (CCIP + LZ + Hyperlane + native) means no single key custodian controls >30% of validation capacity since each bridge has independent validator sets. For GHO CCIP specifically: GHO cross-chain is 100% reliant on CCIP — a single bridge provider handles all GHO cross-chain transfers. No secondary bridge for GHO exists. If CCIP experiences key custody concentration or operational failure, GHO cross-chain liveness degrades completely.
Sources #
- URLGHO Stablecoin Live on Arbitrum — CCIP onlyGHO on Arbitrum via CCIP — single bridge for GHO cross-chainretrieved 2026-04-27
Methodology #
Determine whether >30% of bridge validators share a single key custodian.
See the full factor methodology and distribution across all protocols →