Routers have three distinct roles for management:
Router Signer - The address associated with the private key that is available to the router at runtime to sign payloads which authorize liquidity to be used to facilitate cross-chain transfers. The Router Signer also has the ability to remove the router’s liquidity to the designated recipient.
<aside> ⚠️ The Router Signer key is effectively a hot wallet that must be accessible by an internet-connected router at all times, making it the least secure key in the system. It is important to understand the ramifications of a key compromise and configure the other roles appropriately to mitigate risks.
</aside>
Recipient - The address that will receive funds when liquidity is removed. Example secure options are: a DAO treasury, a secure multisig, a custodial centralized exchange account which you trust. Since this is only a receiver address, it is not required to be able to sign and send transactions (i.e. in the custodial case).
<aside>
ℹ️ There is an option to not set the recipient by setting it to address(0)
. This will allow the removeRouterLiquidity
functions to specify a recipient of their choice. This is a security risk and not recommended unless you are fully aware of the risks and have specific needs to do this.
</aside>
Router Owner - The address that is able to set and change the Recipient address, as well as change itself to a different Router Owner address. The Router Owner can also remove the router’s liquidity to the designated recipient. This address should be a secure multisig, since it needs to be able to sign transactions to carry out the functionality.
<aside>
ℹ️ Router Ownership can be burned (set to address(0)
). This is of course the most secure way to manage a router, but the implications are you can never change the designated recipient.
</aside>
Use this section if the router has never been initialized.
Coming soon!
nxtp/packages/deployments/contracts/deployments at main · connext/nxtp
Connext.json
deployment for that chain and copy the address.RoutersFacet
section and select the option for WRITE
and connect with the Router Signer account.initializeRouter
and fill in the details for _owner
and _recipient
and execute the transaction.<aside> ℹ️ Note: This is the easiest way to call the contract function but since it is an onchain function it can be called from any mechanism to send the correct function with the appropriate arguments.
</aside>
Use these instructions to modify a router that has already been initialized.