Optimism's Security Model
The Optimism blockchain is a work in progress. Constantly pushing to improve the security guarantees that users have while using Optimism is a top priority. At the moment, it’s important to understand that the security of the Optimism blockchain is dependent on a multisig wallet (opens new window) managed by several anonymous individuals. This multisig wallet can be used to upgrade core Optimism smart contracts without upgrade delays.
Please also keep in mind that just like any other system, the Optimism codebase may contain unknown bugs that could lead to the loss of some or all of the assets held within the system. Optimism’s smart contract codebase has been audited repeatedly (opens new window) but audits are not a stamp of approval and a completed audit does not mean that the audited codebase is free of bugs. It’s important to understand that using Optimism inherently exposes you to the risk of bugs within the Optimism codebase, and that you use Optimism at your own risk.
# Security Model FAQ
# Does Optimism have fault proofs?
No, Optimism does not currently have fault proofs. Fault proofs do not meaningfully improve the security of a system if that system can be upgraded within the 7 day challenge window (”fast upgrade keys”). A system with fast upgrade keys, such as Optimism, is fully dependent on the upgrade keys for security. Optimism’s goal is to be the first system that deploys fault proofs that can secure the system by themselves, without fast upgrade keys.
# Who manages the multisig?
The multisig is managed by an anonymous set of individuals. Members are anonymous in order to make the multisig more difficult to compromise.
# How is Optimism planning to remove the multisig?
Check out Optimism’s detailed Pragmatic Path to Decentralization (opens new window) post for a detailed view into how the multisig may be removed in a way that makes Optimism the first chain with true fault proof security.
# How can I help make Optimism more secure?
Optimism has one of the biggest bug bounties (ever). You can earn up to $2,000,042 by finding critical bugs in the Optimism codebase. You can also run your own verifier node (opens new window) to detect network faults.