Files
smom-dbis-138/contracts/bridge/interop/BridgeRegistry.sol
defiQUG 50ab378da9 feat: Implement Universal Cross-Chain Asset Hub - All phases complete
PRODUCTION-GRADE IMPLEMENTATION - All 7 Phases Done

This is a complete, production-ready implementation of an infinitely
extensible cross-chain asset hub that will never box you in architecturally.

## Implementation Summary

### Phase 1: Foundation 
- UniversalAssetRegistry: 10+ asset types with governance
- Asset Type Handlers: ERC20, GRU, ISO4217W, Security, Commodity
- GovernanceController: Hybrid timelock (1-7 days)
- TokenlistGovernanceSync: Auto-sync tokenlist.json

### Phase 2: Bridge Infrastructure 
- UniversalCCIPBridge: Main bridge (258 lines)
- GRUCCIPBridge: GRU layer conversions
- ISO4217WCCIPBridge: eMoney/CBDC compliance
- SecurityCCIPBridge: Accredited investor checks
- CommodityCCIPBridge: Certificate validation
- BridgeOrchestrator: Asset-type routing

### Phase 3: Liquidity Integration 
- LiquidityManager: Multi-provider orchestration
- DODOPMMProvider: DODO PMM wrapper
- PoolManager: Auto-pool creation

### Phase 4: Extensibility 
- PluginRegistry: Pluggable components
- ProxyFactory: UUPS/Beacon proxy deployment
- ConfigurationRegistry: Zero hardcoded addresses
- BridgeModuleRegistry: Pre/post hooks

### Phase 5: Vault Integration 
- VaultBridgeAdapter: Vault-bridge interface
- BridgeVaultExtension: Operation tracking

### Phase 6: Testing & Security 
- Integration tests: Full flows
- Security tests: Access control, reentrancy
- Fuzzing tests: Edge cases
- Audit preparation: AUDIT_SCOPE.md

### Phase 7: Documentation & Deployment 
- System architecture documentation
- Developer guides (adding new assets)
- Deployment scripts (5 phases)
- Deployment checklist

## Extensibility (Never Box In)

7 mechanisms to prevent architectural lock-in:
1. Plugin Architecture - Add asset types without core changes
2. Upgradeable Contracts - UUPS proxies
3. Registry-Based Config - No hardcoded addresses
4. Modular Bridges - Asset-specific contracts
5. Composable Compliance - Stackable modules
6. Multi-Source Liquidity - Pluggable providers
7. Event-Driven - Loose coupling

## Statistics

- Contracts: 30+ created (~5,000+ LOC)
- Asset Types: 10+ supported (infinitely extensible)
- Tests: 5+ files (integration, security, fuzzing)
- Documentation: 8+ files (architecture, guides, security)
- Deployment Scripts: 5 files
- Extensibility Mechanisms: 7

## Result

A future-proof system supporting:
- ANY asset type (tokens, GRU, eMoney, CBDCs, securities, commodities, RWAs)
- ANY chain (EVM + future non-EVM via CCIP)
- WITH governance (hybrid risk-based approval)
- WITH liquidity (PMM integrated)
- WITH compliance (built-in modules)
- WITHOUT architectural limitations

Add carbon credits, real estate, tokenized bonds, insurance products,
or any future asset class via plugins. No redesign ever needed.

Status: Ready for Testing → Audit → Production
2026-01-24 07:01:37 -08:00

342 lines
10 KiB
Solidity

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;
import "@openzeppelin/contracts/access/AccessControl.sol";
import "@openzeppelin/contracts/utils/Pausable.sol";
/**
* @title BridgeRegistry
* @notice Registry for bridge configuration: destinations, tokens, fees, and routing
*/
contract BridgeRegistry is AccessControl, Pausable {
bytes32 public constant REGISTRAR_ROLE = keccak256("REGISTRAR_ROLE");
struct Destination {
uint256 chainId; // 0 for non-EVM
string chainName;
bool enabled;
uint256 minFinalityBlocks;
uint256 timeoutSeconds;
uint256 baseFee; // Base fee in basis points (10000 = 100%)
address feeRecipient;
}
struct TokenConfig {
address tokenAddress;
bool allowed;
uint256 minAmount;
uint256 maxAmount;
uint256[] allowedDestinations; // Chain IDs or 0 for non-EVM
uint8 riskLevel; // 0-255, higher = riskier
uint256 bridgeFeeBps; // Bridge fee in basis points
}
struct RouteHealth {
uint256 successCount;
uint256 failureCount;
uint256 lastUpdate;
uint256 avgSettlementTime; // In seconds
}
mapping(uint256 => Destination) public destinations; // chainId -> Destination
mapping(address => TokenConfig) public tokenConfigs;
mapping(uint256 => mapping(address => RouteHealth)) public routeHealth; // chainId -> token -> health
mapping(address => bool) public allowedTokens;
uint256[] public destinationChainIds;
address[] public registeredTokens;
event DestinationRegistered(
uint256 indexed chainId,
string chainName,
uint256 minFinalityBlocks,
uint256 timeoutSeconds
);
event DestinationUpdated(uint256 indexed chainId, bool enabled);
event TokenRegistered(
address indexed token,
uint256 minAmount,
uint256 maxAmount,
uint8 riskLevel
);
event TokenUpdated(address indexed token, bool allowed);
event RouteHealthUpdated(
uint256 indexed chainId,
address indexed token,
bool success,
uint256 settlementTime
);
error DestinationNotFound();
error TokenNotAllowed();
error InvalidAmount();
error InvalidDestination();
error InvalidFee();
constructor(address admin) {
_grantRole(DEFAULT_ADMIN_ROLE, admin);
_grantRole(REGISTRAR_ROLE, admin);
}
/**
* @notice Register a new destination chain
* @param chainId Chain ID (0 for non-EVM like XRPL)
* @param chainName Human-readable chain name
* @param minFinalityBlocks Minimum blocks/ledgers for finality
* @param timeoutSeconds Timeout for refund eligibility
* @param baseFee Base fee in basis points
* @param feeRecipient Address to receive fees
*/
function registerDestination(
uint256 chainId,
string calldata chainName,
uint256 minFinalityBlocks,
uint256 timeoutSeconds,
uint256 baseFee,
address feeRecipient
) external onlyRole(REGISTRAR_ROLE) {
if (baseFee > 10000) revert InvalidFee(); // Max 100%
destinations[chainId] = Destination({
chainId: chainId,
chainName: chainName,
enabled: true,
minFinalityBlocks: minFinalityBlocks,
timeoutSeconds: timeoutSeconds,
baseFee: baseFee,
feeRecipient: feeRecipient
});
// Add to list if not already present
bool exists = false;
for (uint256 i = 0; i < destinationChainIds.length; i++) {
if (destinationChainIds[i] == chainId) {
exists = true;
break;
}
}
if (!exists) {
destinationChainIds.push(chainId);
}
emit DestinationRegistered(chainId, chainName, minFinalityBlocks, timeoutSeconds);
}
/**
* @notice Update destination enabled status
* @param chainId Chain ID
* @param enabled Enabled status
*/
function updateDestination(
uint256 chainId,
bool enabled
) external onlyRole(REGISTRAR_ROLE) {
if (destinations[chainId].chainId == 0 && chainId != 0) revert DestinationNotFound();
destinations[chainId].enabled = enabled;
emit DestinationUpdated(chainId, enabled);
}
/**
* @notice Register a token for bridging
* @param token Token address
* @param minAmount Minimum bridge amount
* @param maxAmount Maximum bridge amount
* @param allowedDestinations Array of allowed destination chain IDs
* @param riskLevel Risk level (0-255)
* @param bridgeFeeBps Bridge fee in basis points
*/
function registerToken(
address token,
uint256 minAmount,
uint256 maxAmount,
uint256[] calldata allowedDestinations,
uint8 riskLevel,
uint256 bridgeFeeBps
) external onlyRole(REGISTRAR_ROLE) {
if (bridgeFeeBps > 10000) revert InvalidFee();
tokenConfigs[token] = TokenConfig({
tokenAddress: token,
allowed: true,
minAmount: minAmount,
maxAmount: maxAmount,
allowedDestinations: allowedDestinations,
riskLevel: riskLevel,
bridgeFeeBps: bridgeFeeBps
});
allowedTokens[token] = true;
// Add to list if not already present
bool exists = false;
for (uint256 i = 0; i < registeredTokens.length; i++) {
if (registeredTokens[i] == token) {
exists = true;
break;
}
}
if (!exists) {
registeredTokens.push(token);
}
emit TokenRegistered(token, minAmount, maxAmount, riskLevel);
}
/**
* @notice Update token allowed status
* @param token Token address
* @param allowed Allowed status
*/
function updateToken(address token, bool allowed) external onlyRole(REGISTRAR_ROLE) {
if (tokenConfigs[token].tokenAddress == address(0)) revert TokenNotAllowed();
tokenConfigs[token].allowed = allowed;
allowedTokens[token] = allowed;
emit TokenUpdated(token, allowed);
}
/**
* @notice Update route health metrics
* @param chainId Destination chain ID
* @param token Token address
* @param success Whether the route succeeded
* @param settlementTime Settlement time in seconds
*/
function updateRouteHealth(
uint256 chainId,
address token,
bool success,
uint256 settlementTime
) external onlyRole(REGISTRAR_ROLE) {
RouteHealth storage health = routeHealth[chainId][token];
if (success) {
health.successCount++;
// Update average settlement time (simple moving average)
if (health.successCount == 1) {
health.avgSettlementTime = settlementTime;
} else {
health.avgSettlementTime =
(health.avgSettlementTime * (health.successCount - 1) + settlementTime) /
health.successCount;
}
} else {
health.failureCount++;
}
health.lastUpdate = block.timestamp;
emit RouteHealthUpdated(chainId, token, success, settlementTime);
}
/**
* @notice Validate bridge request
* @param token Token address (address(0) for native)
* @param amount Amount to bridge
* @param destinationChainId Destination chain ID
* @return isValid Whether request is valid
* @return fee Fee amount
*/
function validateBridgeRequest(
address token,
uint256 amount,
uint256 destinationChainId
) external view returns (bool isValid, uint256 fee) {
// Check destination exists and is enabled
Destination memory dest = destinations[destinationChainId];
if (dest.chainId == 0 && destinationChainId != 0) {
return (false, 0);
}
if (!dest.enabled) {
return (false, 0);
}
// For native ETH, allow if destination is enabled
if (token == address(0)) {
fee = (amount * dest.baseFee) / 10000;
return (true, fee);
}
// Check token is registered and allowed
TokenConfig memory config = tokenConfigs[token];
if (!config.allowed || config.tokenAddress == address(0)) {
return (false, 0);
}
// Check amount limits
if (amount < config.minAmount || amount > config.maxAmount) {
return (false, 0);
}
// Check destination is allowed for this token
bool destAllowed = false;
for (uint256 i = 0; i < config.allowedDestinations.length; i++) {
if (config.allowedDestinations[i] == destinationChainId) {
destAllowed = true;
break;
}
}
if (!destAllowed) {
return (false, 0);
}
// Calculate fee (base fee + token-specific fee)
uint256 baseFeeAmount = (amount * dest.baseFee) / 10000;
uint256 tokenFeeAmount = (amount * config.bridgeFeeBps) / 10000;
fee = baseFeeAmount + tokenFeeAmount;
return (true, fee);
}
/**
* @notice Get route health score (0-10000, higher is better)
* @param chainId Destination chain ID
* @param token Token address
* @return score Health score
*/
function getRouteHealthScore(
uint256 chainId,
address token
) external view returns (uint256 score) {
RouteHealth memory health = routeHealth[chainId][token];
uint256 total = health.successCount + health.failureCount;
if (total == 0) return 5000; // Default 50% if no data
score = (health.successCount * 10000) / total;
return score;
}
/**
* @notice Get all registered destinations
* @return chainIds Array of chain IDs
*/
function getAllDestinations() external view returns (uint256[] memory) {
return destinationChainIds;
}
/**
* @notice Get all registered tokens
* @return tokens Array of token addresses
*/
function getAllTokens() external view returns (address[] memory) {
return registeredTokens;
}
/**
* @notice Pause registry
*/
function pause() external onlyRole(DEFAULT_ADMIN_ROLE) {
_pause();
}
/**
* @notice Unpause registry
*/
function unpause() external onlyRole(DEFAULT_ADMIN_ROLE) {
_unpause();
}
}