2b52cc6e32
- Archived multiple non-EVM adapters (Algorand, Hedera, Tron, TON, Cosmos, Solana) and compliance contracts (IndyVerifier) to `archive/solidity/contracts/`. - Updated documentation to reflect the historical status of archived components. - Adjusted `foundry.toml` and `README.md` for clarity on historical dependencies and configurations. - Enhanced Makefile and package.json scripts for improved contract testing and building processes. - Removed obsolete contracts (AlltraCustomBridge, CommodityCCIPBridge, ISO4217WCCIPBridge, VaultBridgeAdapter) from the main directory. - Updated implementation reports to indicate archived status for various components.
20 lines
1.4 KiB
Markdown
20 lines
1.4 KiB
Markdown
# Bridge Upgrade and Pause Runbooks
|
|
|
|
Upgrade paths and pause procedures for bridge contracts (Tezos/Etherlink context).
|
|
|
|
## Upgrade paths
|
|
|
|
- **Upgradeable (UUPS)**: UniversalAssetRegistry, BridgeOrchestrator, GovernanceController, TokenlistGovernanceSync. Upgrade via UPGRADER_ROLE after timelock if policy requires. Run: prepare upgrade (new impl), schedule timelock, execute upgrade.
|
|
- **Non-upgradeable**: TezosAdapter, EVMAdapter, AlltraCustomBridge (historical; archived under `archive/solidity/contracts/bridge/AlltraCustomBridge.sol`). Deploy new version; register new adapter in ChainRegistry (or update adapter address); phase out old (revoke roles, drain if any).
|
|
- **CCIP Router**: Per Chainlink; DON upgrades are separate from application contracts.
|
|
|
|
## Pause procedures
|
|
|
|
- **BridgeRegistry**: If contract has Pausable, call pause() with appropriate role (e.g. DEFAULT_ADMIN_ROLE). Stops new token/destination registration and optionally bridge operations if enforced in routing.
|
|
- **TezosAdapter**: setIsActive(false) with DEFAULT_ADMIN_ROLE. Stops new bridge() calls; in-flight requests can still be confirmed by oracle.
|
|
- **UniversalCCIPBridge / WETH bridges**: If pausable, pause to stop new outbound messages; coordinate with DON/relay to avoid stuck messages.
|
|
|
|
## Security
|
|
|
|
- Document key holders for UPGRADER_ROLE and pause roles; use multisig where required. Runbooks: key rotation, incident response (pause first, then investigate).
|