Bridge validator threshold (k-of-M)
Curve Finance's assessment for RD-F-149 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
FastBridge: threshold 2-of-2 — adequate. CRV OFT (xDAO): threshold pre-suspension unconfirmed; if using default single-DVN, threshold = 1/1 = single-point-of-failure (catastrophic edge per taxonomy: 'threshold of 1 is single-factor sufficient for forged-message → unbacked mint'). Suspension removed immediate risk, but DVN configuration has not been confirmed as changed/improved as of 2026-04-28. Bridge effectively frozen so exposure is limited, but the structural vulnerability in the CRV OFT pathway is unresolved.
Sources #
- Docshttps://web.archive.org/web/2025*/docs.curve.finance/fast-bridge/overview/retrieved 2026-05-06
- Blockaid LayerZero DVN configuration audit toolBlockaid DVN audit tool — flags 1-of-N pathways: requiredDVNCount + optionalDVNThreshold <= 1 = EXPOSEDretrieved 2026-04-28
Methodology #
Read the signature threshold required to approve a cross-chain message (for non-LZ bridges).
See the full factor methodology and distribution across all protocols →