Halt Bridge in Case of Emergency
In a case of an emergency (e.g. a exploitable vulnerability found), the bridge needs to be halted so that no messages can be processed.
Halting Mechanism
The bridge is halted through a storage item in each Snowbridge pallet called OperatingMode
.
Possible operating mode states are:
Normal
Halted
(RejectingOutboundMessages
for thesystem
pallet)
If the operating mode is set to Halted
, no bridge messages will be processed. Each pallet needs to be disabled individually. Here are the pallets that need to be disabled, with the call hash to do so:
Ethereum client pallet:
0x520301
Inbound queue pallet:
0x500101
Outbound queue pallet:
0x510001
Ethereum system pallet:
0x530101
These extrinsics should be done from the relay chain, descending to the BridgeHub parachain origin, similar to the force beacon checkpoint call.
If the bridge was halted, no messages will be processed. When the operating mode is changed to normal
messages will be continue being processed.
Last updated