diff --git a/security.txt b/security.txt index cedfe8d1..b31ce8e4 100644 --- a/security.txt +++ b/security.txt @@ -8,14 +8,15 @@ Encryption: https://keybase.io/piotrd/pgp_keys.asc Acknowledgments: https://keep.network/disclosed-vulnerabilities Preferred-Languages: en, es, fr Canonical: https://tbtc.network/.well-known/security.txt -Policy: https://github.com/keep-network/tbtc/tree/master/SECURITY.adoc +Policy: https://github.com/keep-network/tbtc-v2/tree/main/SECURITY.adoc -----BEGIN PGP SIGNATURE----- -wsBcBAEBCAAQBQJf+JBBCRCv8ib0prZHlwAAQ74IAKiUl8EydYCSCMgwC8b5m0NE -eiwznavw4NlAN8mBiofTjLVGNmk2FU+4iY9wm98BawfwA/VAuUsrzCWgfLKkUoJc -yGHx8efprTh2PuG2P5irO69ssdMD3gZWabOFwd1M/bNcO4e29jnzfRkReV1HLBsT -AdVLd1DfY4Y54ovR3k6NFXtudm7kxqlOnIpTpQkOU8vzn/VRyJ6RcsuhmDSGiI+B -KjDhWVBSvC6pTYqAXrTQsHNoTubTB1a6n82EHN1Zg4xJc/cnjPSKd1Yf4zZAOknY -JzFipwzWwMNH+0mXvZ9Ke+Px/DZRCL0XVF/BIfmUVkbPfmnS9BJZ9H5jBOWXTDc= -=5U8y +iQEzBAEBCAAdFiEEkXss9aTVhBTmGyuQr/Im9Ka2R5cFAmbPdzUACgkQr/Im9Ka2 +R5c5TQf+J1/0wIR9vJWMA9/ARTai0r/AJ5QOZ8qOVJLHTq9wUl2L0Jq/IQuKhVjD +UjiQgQN2lkIsO1XvZnm/gDBfHlqg55q37q+kskxO4XBdEvfQIz79jAumGuV1s3Ol +jRnWoY5zS1/1BevntYTbUO+vPaxbcuJRgBdPq8jYcKKb3GS+1uPwu51vSB6rV6EJ +TdfgKLzGsceZ2Xc49p3/HkORJBUyj+z74yKizLAsePbGvNQroZJAe4k92V8P8Y+W +qj8wMUHLe2HEoyx34ieDARE/KdlPdKlrptLeNjF5X9e7tPG1gxZWDjsXSgTTeOvq +vRQKc6Kryfb5M1oBr8v5YaPDVQ/3qg== +=NFoI -----END PGP SIGNATURE----- diff --git a/src/pages/developers/tbtc-technical-system-overview.md b/src/pages/developers/tbtc-technical-system-overview.md index f9d0af41..2f3af0e0 100644 --- a/src/pages/developers/tbtc-technical-system-overview.md +++ b/src/pages/developers/tbtc-technical-system-overview.md @@ -12,9 +12,10 @@ tags: --- tBTC v2 securely and quickly bridges Bitcoin to any other chain 24 hours a day, -7 days a week, leveraging the [Threshold Network's](https://threshold.network) -decentralized set of nodes for security, as well as select additional partners -for faster operations. +7 days a week, leveraging the security of the [Threshold +Network's](https://threshold.network) decentralized set of nodes and their +staked [T tokens](https://docs.threshold.network/resources/t-token), as well as +select additional partners for accelerated operations. This piece explains the four core pillars of tBTC's design: threshold signatures, walet generation & signer selection, deposit sweeping, and @@ -46,11 +47,13 @@ _Deeper details are available [in the Threshold documentation](https://docs.thre tBTC v2 generates Bitcoin wallets that are backed by a governable number of signers (100 per wallet) from the Threshold Network's node pool. Signers are selected randomly from the available nodes in the Threshold Network, with -probability weighted by their staked T. One node may have multiple signers in a -given wallet, and tBTC relies on an honest majority assumption and -probabilistic security to ensure the security of each wallet (see the [tBTC -security model](/developers/tbtc-security-model) docs for more). Staked T -on the Threshold Network is the economic value used to secure the system. +probability weighted by how much of the [Threshold T +token](https://docs.threshold.network/resources/t-token) each node has staked +(with a 40,000 T minimum). One node may have multiple signers in a given +wallet, and tBTC relies on an honest majority assumption and probabilistic +security to ensure the security of each wallet (see the [tBTC security +model](/developers/tbtc-security-model) docs for more). Staked T on the +Threshold Network is the economic value used to secure the system. A new wallet is generated at a governable interval (every 2 weeks as of this writing), and new deposits are directed to the new wallet once it is set up. diff --git a/src/pages/faq/index.md b/src/pages/faq/index.md index 1f524c0f..115aabbd 100644 --- a/src/pages/faq/index.md +++ b/src/pages/faq/index.md @@ -17,7 +17,7 @@ questions: Not yet. Integration work is required to build tBTC minting and redemption into a dApp. The developer documentation includes links to the tBTC SDK and SDK docs, enabling developers to build interfaces that match their products. To validate Bitcoin transactions, the best approach is to run an electrum server, which is very easy to spin up. - question: Has tBTC been audited? answer: > - tBTC has undergone multiple audits (3 for v1, 3 and counting for v2), as have the underlying node clients, and tBTC is a part of the Threshold Network bug bounty program. + tBTC has undergone multiple audits (3 for v1, 3 and counting for v2), as have the underlying node clients, and tBTC is a part of the Threshold Network bug bounty program. You can view v2 audits on this page. Additionally, Threshold has a bug bounty program on Immunefi for ongoing security work. - question: Does Signing for tBTC make you a MSB? answer: > Each user should undertake their own analysis as to whether there are any legal restrictions in their jurisdiction that would either prevent them from using tBTC or require the user to register with certain government entities. @@ -29,7 +29,16 @@ questions: tBTC’s signer sets use threshold ECDSA as a Bitcoin multisig replacement. For every deposit, a new signer set is pulled together (selected by the random beacon), and they generate a Bitcoin PKH address for the depositor, which is marked on the Ethereum chain. - question: Who are the signers? Can anyone become a signer? answer: > - Shortly after launch, there should be a group of roughly 80 private sale KEEP purchasers and a few other trusted parties signing for tBTC. Very soon an opportunity will be announced for more individuals to participate by staking ETH to become a signer. + Anyone who holds at least 40,000 T tokens can + stake them + and authorize the tBTC Threshold application to become a signer for tBTC. + Currently, the Threshold Council manages authorizing new operators to + participate in tBTC protocol operations to ensure system performance + while adjustments are made to allow operations by anyone who can run a + node. More details about staking T tokens and the Threshold Network are + available in the Threshold + Network documentation. - question: Why is this better than other BTC on Ethereum projects? answer: > Some people believe tBTC is better for several reasons. Some projects have built synthetic price pegs, which is not a true bridge. Other projects are supply pegs, but have centralized parties adding friction to the minting and redemption process and therefore, are not censorship-resistant systems. Some new bridges are decentralized supply pegs, however, those security models are less safe. They rely on a ⅔ honesty assumption, use brand new “roll your own crypto” rather than peer-reviewed, widely deployed t-ECDSA cryptography), or use an outdated capital-inefficient approach that tBTC has already outgrown in v2 of the protocol. diff --git a/src/pages/news/2024-08-26-4-years-of-tbtc.md b/src/pages/news/2024-08-26-4-years-of-tbtc.md index 8e818f61..312560bf 100644 --- a/src/pages/news/2024-08-26-4-years-of-tbtc.md +++ b/src/pages/news/2024-08-26-4-years-of-tbtc.md @@ -69,9 +69,9 @@ DAO](https://blog.threshold.network/decentralized-merger/). In early 2022, the first decentralized merger was completed to create the Threshold Network, whose nodes now operate the systems that back tBTC bridging. In the intervening time, Threshold has become a full-fledged DAO with an associated legal entity, -various guilds responsible for driving its priorities and products forward, bug -bounty programs associated with tBTC and other protocols backed by the network, -and more. +various guilds responsible for driving its priorities and products forward, [bug +bounty programs](https://immunefi.com/bounty/thresholdnetwork/) associated with +tBTC and other protocols backed by the network, and more. More recently, Threshold launched [thUSD](https://www.thresholdusd.org/en/), a stablecoin backed by Bitcoin based on tBTC, which is now being used by the