Renbridge
Active Bridges ↗
Renbridge Security Architecture
The primary security guarantee of Renbridge lay in the decentralized management of its vaults using Secure Multi-Party Computation (sMPC) rather than centralized trust.
Secure Multi-Party Computation (sMPC)
Centralized wrapped assets present a single point of failure because a single entity controls the private keys to the underlying asset vaults. Renbridge mitigated this by utilizing the sMPC algorithm (specifically a variant of the Shamir Secret Sharing scheme). The private keys for the Bitcoin vaults were never assembled or stored in one place. Instead, they were split into encrypted shards distributed across thousands of independent validator nodes (Darknodes).
The Darknode Collateral Model
To prevent Sybil attacks, where a malicious entity spins up thousands of nodes to take over the network, RenVM enforced an economic bond. Darknode operators were required to stake 100,000 REN tokens as collateral. If a group of nodes attempted to steal the locked Bitcoin, their staked REN tokens would be slashed. This model ensured that the value of the staked tokens always exceeded the value of the locked assets in each node subgroup.
Security Audits & Patch History
RenVM underwent regular audits by top-tier security firms, including Trail of Bits and ConsenSys Diligence. In 2020, a vulnerability in the Shamir backup mechanism was identified and quickly patched before any funds were lost. Despite these security models, the project's reliance on Alameda Research for developer salaries ultimately led to its operational shutdown, highlighting the importance of organizational decentralization alongside cryptographic decentralization.