Ferrous Hub
IBC routing hub with packet-forward middleware.
A Cosmos SDK chain that routes ICS-20 transfers between app-chains using packet-forward middleware, with CosmWasm contracts for swap-and-forward routes.
- Ecosystem
- Cosmos
- Category
- Interoperability
- Languages
- Go (Cosmos SDK), Rust (CosmWasm)
- Launched
- Apr 2025
Grade A · Moderate risk
Sound posture; some improvements recommended.
+0.4 since Nov 2025 · ±0.0 since Jul 2026
Quantix Protocol Research · as of 24 Oct 2026 · About this data
Risk Index
How the score is built
| Component | Weight | Value | Points | Gap |
|---|---|---|---|---|
| Code Security | 30% | 84 | 25.2 | −4.8 |
| Operational Security | 20% | 82 | 16.4 | −3.6 |
| Governance Risk | 15% | 80 | 12.0 | −3.0 |
| Economic Security | 15% | 82 | 12.3 | −2.7 |
| Infrastructure Resilience | 10% | 84 | 8.4 | −1.6 |
| Transparency | 10% | 86 | 8.6 | −1.4 |
| Quantix Risk Index | 100% | 82.9 | −17.1 |
| Component | Ferrous Hub |
|---|---|
| Code | 84 |
| Operational | 82 |
| Governance | 80 |
| Economic | 82 |
| Infrastructure | 84 |
| Transparency | 86 |
Grade scale
- AAA90–100
- AA85–89.9
- A80–84.9
- BBB75–79.9
- BB70–74.9
- B65–69.9
- CCC60–64.9
- CC55–59.9
- C50–54.9
- D0–49.9
Score history
12 monthly snapshots
| Period | Quantix Risk Index |
|---|---|
| Nov ’25 | 82.5 |
| Dec ’25 | 82.5 |
| Jan ’26 | 82.9 |
| Feb ’26 | 82.9 |
| Mar ’26 | 82.9 |
| Apr ’26 | 82.9 |
| May ’26 | 82.9 |
| Jun ’26 | 82.9 |
| Jul ’26 | 82.9 |
| Aug ’26 | 82.9 |
| Sep ’26 | 82.9 |
| Oct ’26 | 82.9 |
27 Jan 2026
Economic
Channel rate limits
Per-channel flow limits enabled.
- Economic Security+3
Risk factors
MediumCode SecurityProfile analysis
Multi-hop refund handling
Funds forwarded through several chains can be stuck if an intermediate timeout is mishandled.
MediumInfrastructure ResilienceProfile analysis
Light-client expiry
Expired clients freeze channels until governance recovers them.
Recommendations
Code Security: 84 → 88
Refund-path tests
Simulate multi-hop timeouts in CI.
+1.2
→ 84.1
Infrastructure Resilience: 84 → 88
Client-expiry alerts
Alert well before trusting periods lapse and fund backup relayers.
+0.4
→ 83.3
Analysis
Contract, governance and operations
Contract analysis
- Source
- Verified
- Upgradeability
- Chain software upgrades through on-chain governance
- Administrative control
- Validator set and token governance
- Enforced delay
- None identified
- External dependencies
- IBC light clients; Relayers; Connected app-chains
- PassRate limits. Per-channel flow limits on ICS-20 transfers.
- CautionPacket forwarding. Refund paths on multi-hop timeouts depend on intermediate chains.
- CautionClient expiry. Light clients can expire if relayers stop updating them.
Governance exposure
Low
Software upgrades by on-chain governance with a voting period.
Operational resilience
Strong
Multiple relayer operators; client updates monitored.
Monitoring
Monitoring history
- 21 Sept 2026LowChannel-12 flow limit raisedConfiguration Change · Rate-limit moduleResolved
Research assessment
No Quantix assessment of Ferrous Hub has been published. Its security findings are represented by the contract-analysis signals above: 0 failed and 2 cautionary.
Research
Relevant research
Architecture
System components
- IBC transfer stack
- ICS-20 with packet forwarding
- Router contract (CosmWasm)
- Swap-and-forward routes
- Rate-limit module
- Per-channel flow limits
Turn risk factors into a remediation plan.
A research assessment traces each weakness to code, configuration or process, and verifies the fix before the score moves.