2b52cc6e32
- Archived multiple non-EVM adapters (Algorand, Hedera, Tron, TON, Cosmos, Solana) and compliance contracts (IndyVerifier) to `archive/solidity/contracts/`. - Updated documentation to reflect the historical status of archived components. - Adjusted `foundry.toml` and `README.md` for clarity on historical dependencies and configurations. - Enhanced Makefile and package.json scripts for improved contract testing and building processes. - Removed obsolete contracts (AlltraCustomBridge, CommodityCCIPBridge, ISO4217WCCIPBridge, VaultBridgeAdapter) from the main directory. - Updated implementation reports to indicate archived status for various components.
1.4 KiB
1.4 KiB
Bridge Upgrade and Pause Runbooks
Upgrade paths and pause procedures for bridge contracts (Tezos/Etherlink context).
Upgrade paths
- Upgradeable (UUPS): UniversalAssetRegistry, BridgeOrchestrator, GovernanceController, TokenlistGovernanceSync. Upgrade via UPGRADER_ROLE after timelock if policy requires. Run: prepare upgrade (new impl), schedule timelock, execute upgrade.
- Non-upgradeable: TezosAdapter, EVMAdapter, AlltraCustomBridge (historical; archived under
archive/solidity/contracts/bridge/AlltraCustomBridge.sol). Deploy new version; register new adapter in ChainRegistry (or update adapter address); phase out old (revoke roles, drain if any). - CCIP Router: Per Chainlink; DON upgrades are separate from application contracts.
Pause procedures
- BridgeRegistry: If contract has Pausable, call pause() with appropriate role (e.g. DEFAULT_ADMIN_ROLE). Stops new token/destination registration and optionally bridge operations if enforced in routing.
- TezosAdapter: setIsActive(false) with DEFAULT_ADMIN_ROLE. Stops new bridge() calls; in-flight requests can still be confirmed by oracle.
- UniversalCCIPBridge / WETH bridges: If pausable, pause to stop new outbound messages; coordinate with DON/relay to avoid stuck messages.
Security
- Document key holders for UPGRADER_ROLE and pause roles; use multisig where required. Runbooks: key rotation, incident response (pause first, then investigate).