Research summary
The thin validator set supports rejection and remains a standing weakness. Gnosis Chain is an independent proof-of-stake EVM chain, not an Ethereum rollup, so its canonical bridge does not inherit Ethereum-native fraud-proof or validity-proof security the way every rollup bridge in this registry does. Instead, message execution requires signatures from only 4 of 7 bridge validators. That is a much smaller trust set than the already-rejected Wormhole/Portal's 13-of-19 Guardian quorum, which suffered a $325M signature-forgery loss in 2022. A clean incident record to date does not offset a validator set this small securing an entire independent chain's bridge with no cryptographic or economic backstop if those signatures were ever forged or the validators colluded.
Observable review triggers
- The message-signing threshold is confirmed to require mandatory trustless verification for every message, not optional redundancy alongside trusted signers
- The bridge validator set expands materially, for example doubling, with full public disclosure of validator identities and any conflicts of interest among the Bridge Governors
- Twelve consecutive months with no validator-signature compromise or forged-message incident, counted from this review's date
- An independent, dated audit of the current validator-signing and governance-multisig configuration is published with no unresolved high-severity findings
Facts on file
- Verdict
- Rejected
- Type
- Other
- Chains examined
- Ethereum
- Reviewed
- Last confirmed