Area
Backend API / Soroban contracts
What problem does this solve?
During high cross-chain throughput, sophisticated bridge exploits (like double-minting tokens across multiple EVM-Stellar bridge relayers or re-entrancy attacks during cross-chain state updates) can occur within sub-second block windows before standard reconciliation cron jobs trigger.
Proposed solution
- Build a real-time stream graph analyzer (
crossChainAnomalyEngine.service.ts) operating over Horizon SSE and EVM WebSocket event feeds.
- Track pending mint/burn transaction sequence IDs across both source and target chains using Redis sliding windows.
- Detect double-spend attempts, out-of-order sequence nonce jumps, or duplicate deposit tx hashes in real time.
- If a cross-chain anomaly threshold is breached within a 5-second window, trigger an automated Flash-Pause directly invoking Soroban
pause_contract RPC and setting emergency breaker flags.
- Create comprehensive unit and integration test suites simulating double-mint scenarios, network latency partitions, and emergency recovery flows.
Alternatives considered
Relying solely on periodic batch reconciliation jobs (which run every few minutes), but real-time stream graph analysis is required to catch exploits before funds leave liquidity pools.
Area
Backend API / Soroban contracts
What problem does this solve?
During high cross-chain throughput, sophisticated bridge exploits (like double-minting tokens across multiple EVM-Stellar bridge relayers or re-entrancy attacks during cross-chain state updates) can occur within sub-second block windows before standard reconciliation cron jobs trigger.
Proposed solution
crossChainAnomalyEngine.service.ts) operating over Horizon SSE and EVM WebSocket event feeds.pause_contractRPC and setting emergency breaker flags.Alternatives considered
Relying solely on periodic batch reconciliation jobs (which run every few minutes), but real-time stream graph analysis is required to catch exploits before funds leave liquidity pools.