Docs · Network
Validators
Who produces blocks, and what happens when one misbehaves.
Consensus keys
A validator's consensus key is generated on the host that signs with it and must never travel. Bengar Custody does not hold one and is designed never to: a service holding several would make its compromise a coordinated double-sign, which is the one attack the slashing model cannot punish if it is simultaneous.
Slashing
Double-signing is objective misbehaviour and is slashed. The downtime penalty is currently zero and stays zero until real multi-host measurement says what a healthy validator's downtime actually looks like — a parameter guessed from a laptop would punish honest operators.