Specs: Ethereum bridge recovery multisig

[cwgoes]

As discussed with @adrianbrink

• Require all Namada validators to create an Ethereum address and sign it
• Create a threshold 2/3 multisignature contract on Ethereum with voting weights and addresses of the validators
• Keep that contract up to date when there are validator set updates
• After a delay period with no regular updates, the contract can recover the funds in the Namada bridge contract

[cwgoes]

cc @Fraccaman

[Fraccaman]

The current contract implements a recovery mechanism but there is no delay period. How should that be implemented?

[cwgoes]

We should keep a timestamp of the last (regular) header update from Namada, and recovery from the multisig can only be initiated if now - lastUpdateTimestamp > delayPeriod. delayPeriod can be a week or something like that.

[cwgoes]

@Fraccaman @batconjurer have we implemented a recovery multisig yet, or not yet?

[batconjurer]

@cwgoes Not yet, no

[sug0]

I presume this is related to anoma/ethereum-bridge#62 ??

[cwgoes]

Yes, unless you had another, different plan for enabling emergency withdrawals.

[sug0]

@cwgoes was just checking. all namada side things are complete, then. only the smart contracts need to be updated, so I'm closing the issue on this side