Bridge validator-set rotation recency
A cross-chain & bridge factor in the v1.7.0 rubric. Measured per protocol on a e cadence.
Methodology how we score #
**What this measures** This factor records the number of months since the bridge's validator set was last changed — including additions, removals, and key rotations. The value is derived from bridge contract events and protocol governance records. This factor applies only to bridge-touching protocols; non-bridge protocols show this factor as N/A.
**Why it matters** A validator set that has not rotated for an extended period increases the risk that compromised keys are retained without detection. Key rotation is a standard operational security practice for high-value custody systems: it limits the window of exposure if a signing key is exfiltrated and ensures that long-dormant keys do not accumulate undetected privilege. Radiant Capital II ($53M, 2024) involved a suspected nation-state compromise of signing hardware that may have involved extended reconnaissance; a shorter key-rotation cycle would have limited the window. Conversely, overly frequent rotation without ceremony is also a concern — it may indicate operational instability or governance attacks.
**Green / Yellow / Red** Green is scored when the validator set has been rotated or reviewed within the past 12 months with documented ceremony and the rotation policy is publicly stated. Yellow is scored when the last rotation was 12–24 months ago or the rotation policy is undocumented. Red is scored when the validator set has not changed for over 24 months or has never been rotated since bridge deployment.
**Common gray cases** Gray is applied when bridge contract events cannot be fully decoded to identify signer-set changes, or when the bridge uses an off-chain governance process that is not mirrored on-chain.
**Notable historical examples** No cross-hacked incidents are currently linked in the database for this factor.
Measurement what to look for #
Measure the number of months since the last validator-set change for the bridge.