Skip to main content

Security and assurance

This page describes Lineth (formerly the Linea Stack) protocol guarantees, operator-controlled security measures, and available assurance evidence.

For trust boundaries and privileged authority, see Trust and responsibilities.

This page does not include:

  • A complete audit catalog or proof-system maturity statement.
  • Production operations guidance (monitoring, incident response, disaster recovery).
  • Commercial support or SLA commitments.

Protocol-level guarantees​

Under the configured deployment model, Lineth provides:

  • State-transition correctness through zk-SNARK proof verification on the finalization layer. A valid proof means the operator cannot finalize an invalid state transition through the normal proof path.
  • Byzantine fault tolerant consensus for deployments that use QBFT with 3f+1 validators. Single-validator deployments do not use QBFT and rely on the operator trust model. See Multi-validator consensus.
  • Settlement finality on the selected finalization layer, scoped to that layer's own finality assumptions. A deployment finalizing to Ethereum inherits Ethereum L1 finality; a deployment finalizing to Linea Mainnet inherits Linea Mainnet's finality, which itself anchors to Ethereum.
  • Bridge and message execution gated by verified state commitments. Messages are tied to verified state transitions in the normal protocol path.

For the trust boundaries behind each of these, see Trust and responsibilities.

Operator-controlled security surfaces​

Operators define and operate their own security boundary. Lineth does not ship a production security operations program. Operators are responsible for:

  • Infrastructure isolation and network security controls
  • Role-based access control (RBAC) for APIs and services
  • Key management via KMS-backed signing and remote signing through Web3Signer
  • Governance contracts or multisig controls for privileged roles, proxy administration, and upgrades
  • Monitoring and incident response tooling

Governance contracts and multisig controls should be treated as critical security infrastructure. They can hold privileged roles, coordinate emergency response, or control upgrade authority depending on the deployment. Linea Mainnet's Security Council transaction record is one example of how such controls can be documented publicly. For upgrade mechanics, see the OpenZeppelin Transparent Upgradeable Proxy pattern.

Assurance evidence today​

What is published today:

What is not published here:

  • A consolidated audit or assurance hub covering component, version, and deployment scope
  • Proof-system maturity statements or current security-review conclusions
  • Per-deployment assurance artifacts

Operators who need assurance evidence for a specific deployment should confirm what is available with the operator of that deployment. Lineth does not generalize one audit or review to all deployments.

Was this page helpful?