Bridge validator threshold (k-of-M)

Chainlink CCIP's assessment for RD-F-149 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RMN Ethereum ARM v1: 2/3 bless threshold, 2/3 curse threshold (verified on-chain). OCR3 Commit DON: 2F+1 quorum. RMNRemote: requires F+1 signatures; config enforces 2F+1 total signers (Byzantine fault tolerant). YELLOW: ARM v1 2/3 threshold is BFT minimum for 3 nodes - meets mathematical safety requirement but is low absolute count for $7B secured value.

Sources #

GitHub
Chainlink CCIP RMNRemote.sol (2024-11 audit scope)RMNRemote.sol: setConfig checks signers.length < 2*f+1 reverts with NotEnoughSigners; threshold enforcement confirmedretrieved 2026-05-16
Etherscan
Chainlink ARM/RMN Contract - Etherscan ReadARM contract 0x8B63b3DE93431C0f756A493644d128134291fA1b: blessWeightThreshold=2 (of 3), curseWeightThreshold=2 (of 3)retrieved 2026-05-16

Methodology #

Read the signature threshold required to approve a cross-chain message (for non-LZ bridges).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-149 score yellow collected_at 2026-05-16 01:55:09