Hyperlane Interchain Security Modules (ISM) · Pluggable Verification Layer

Confidence: Likely Updated 2026-05-26 Review by 2026-09-22 Sources 1 Machine-translated Original (JA)
#systems#cross-chain#bridge#ism#hyperlane#security
On this page

Wiki route

This entry sits under systems index. Read it against cross chain four poles overview for peer / contrast context and fintech index for the broader system / regulatory boundary.

Key facts

  • Selectable from more than 5 standard ISM types
  • MultisigISM is the default · similar to the LayerZero DVN
  • OptimisticISM introduces a 7 -day challenge period + watcher
  • EigenLayerISM inherits cross-chain security from Ethereum L1 restaking
  • AggregationISM permits combinations of multiple ISMs (e.g., a multisig + optimistic double)
  • RoutingISM routes to different ISMs depending on message type

ISM Security Composition

Main ISM types:

ISMVerification methodApplicable scenario
MultisigISMN-of-M signatures · similar to LayerZero DVNDefault option · balance of security and speed
OptimisticISM7 -day challenge period + watcherHigh-value, low-frequency cross-chain · similar to OP withdrawal
CCIPReadISMCoordinates with Chainlink CCIPWhen using Hyperlane infrastructure while obtaining Chainlink backing
AggregationISMCombination of multiple ISMs (a multisig + optimistic double)Extremely high security requirements (institutional / large-lot)
RoutingISMRoutes to different ISMs depending on message typeComplex apps · different security levels per message type
EigenLayerISMRestaking-secured · ETH collateralWhen seeking to inherit Ethereum L1 economic security

ISM selection trade-offs:

  • Speed vs security: multisig is fast but carries single-point-of-failure risk · optimistic is secure but has a 7 -day delay
  • Cost vs trust: CCIPRead borrows Chainlink’s trust but increases cost · a self-operated multisig is cheap but requires operating validators yourself
  • Simple vs flexible: a single ISM is simple · Aggregation is secure but gas-heavy

The special significance of EigenLayerISM: it introduces the “crypto-economic security = ETH collateral” model into cross-chain verification. The ETH staked by validators is restaked to Hyperlane verifiers via EigenLayer —— if a verification error occurs · the slash takes place at the EigenLayer layer · and the loss is ultimately borne by the Ethereum L1 stake. This directly ties restaking to cross-chain security and is one of the early cases where the modular-middleware + restaking concept was realised (see Liquid Staking + Restaking Ecosystem + CEX Exposure).

Origin & evolution

The modularisation of ISMs was a core design at the time of the Hyperlane 2022 年 rename —— the team recognised that a “one-size-fits-all cross-chain security model” could not meet the requirements of every app. Initially there was only MultisigISM, but over 2023-2024 年 OptimisticISM / CCIPReadISM / AggregationISM were added in sequence.

The 2024 年 EigenLayer integration was an important milestone in ISM modularisation —— it showed that Hyperlane is compatible with arbitrary verification primitives · and is not limited to its own validator set. This contrasts with the closed verifier of the LayerZero DVN.

Sources