Create Your Own ISM

Developers can specify or override the default ISM by implementing the ISpecifiesInterchainSecurityModule interface in their application.

​

ISM Interface

ISMs must implement the InterchainSecurityModule interface. This implementation can be configured, composed, and customized according to the needs of their application.

Specifically, this interface must be implemented in the same smart contract that implements handle().

The interface consists of two functions: verify and moduleType.

​

Verify

/**
 * @notice Defines a security model responsible for verifying interchain
 * messages based on the provided metadata.
 * @param _metadata Off-chain metadata provided by a relayer, specific to
 * the security model encoded by the module (e.g. validator signatures)
 * @param _message Hyperlane encoded interchain message
 * @return True if the message was verified
 */
function verify(
    bytes calldata _metadata,
    bytes calldata _message
) external returns (bool);

The primary function that ISMs must implement is verify(). The Mailbox will call IInterchainSecurityModule.verify() before delivering a message to its recipient. If verify() reverts or returns false, the message will not be delivered.

​

Parameters

• _metadata: consists of arbitrary bytes provided by the Relayer. Typically, these bytes are specific to the ISM. For example, the _metadata for a Multisig ISM must include validator signatures.

• _message: consists of the Hyperlane message being verified. ISMs can use this to inspect details about the message being verified. For example, a Multisig ISM could change validator sets based on the origin chain of the message.

​

Module Type

The secondary function that ISMs must implement is moduleType().

function moduleType() external view returns (uint8);

This is used to signal to the Relayer what to include in _metadata. ISMs must return one of the supported module types.

enum ModuleType {
    UNUSED,
    ROUTING,
    AGGREGATION,
    LEGACY_MULTISIG,
    MERKLE_ROOT_MULTISIG,
    MESSAGE_ID_MULTISIG,
    NULL, // used with relayer carrying no metadata
    CCIP_READ,
    ARB_L2_TO_L1,
    POLYGON_POS,
    OP_STACK
}