[DIS] CKB Integration for Rosen Bridge

[phroi]

@NightLantern

I realize this is a more secure bridge, then your standard bridge. But if it was to be hacked, what would a hacker need to acomplish to do so?

When I last reviewed the Rosen Bridge proposal, I said:

@phroi

At the moment I cannot really think of a good way of breaking the Rosen Bridge, even in the event that the RSN price was almost zero. This three level hierarchical division of roles seems really well thought.

Now that I have studied their integration kit and talked more deeply with the team, I can confirm my previous viewpoint.

For example, Force Bridge failed because of a Validator Takeover. That said, I suspect most of these losses could have been avoided if only they kept about 90% of funds in cold storage, with a mechanism blocking suspicious withdrawals. So, in a way, Force Bridge was a Soft Target.

By contrast, the Rosen team started by cataloging known attacks and designed the bridge precisely around these risks.

Here are a few slides from @Armeanio on the topic: