Control profile
- Transaction ordering
- Proof-of-stake with a seat auction: the top 100 stake-weighted validators produce blocks and chunks; further seats (418 active at review, capped at 500) only validate chunks. Seat price is set by the 300th largest proposal.
- Escape hatch
- n/a — L1. Exit to Ethereum runs through Omni Bridge, which relies on the Chain Signatures MPC network and, for most chains, Wormhole attestations rather than a light client alone.
- Upgrade authority
- A protocol version activates when 80% of stake runs a nearcore release that votes for it; the release is cut by the core client team on a weekly cadence. The 2025 inflation halving shipped through that path, as nearcore 2.9.0, after the tokenholder vote fell short of its two-thirds threshold.
- Liveness record
- The validator set is open and slashing exists, but block production is concentrated in the top 100 seats by stake. Protocol changes are activated by client adoption, and the failed 2025 community vote did not stop the change. The Omni Bridge exit adds an MPC signing set and a third-party attestation network between a NEAR balance and Ethereum.
Ketju control assessment
ADVERSE CONTROL ASSESSMENT. on upgrade and exit control. NEAR publishes its mechanics clearly: an 80% stake vote activates a protocol version, but that vote is cast automatically by nodes running the new binary, so the practical decision is the release itself, and the 2025 inflation change went live through validator adoption after the tokenholder vote failed. The exit to Ethereum is Omni Bridge, whose security is a Chain Signatures MPC network plus Wormhole for most destinations, neither of which a holder can bypass. Open validator entry and slashing are real positives and do not offset a control plane that can change the protocol against a failed vote and a bridge a holder cannot force.
Observable review triggers
- A holder can withdraw to Ethereum through a light-client-verified path that needs no MPC or Wormhole signature
- Protocol version activation requires an explicit stake-weighted vote separate from running the release binary
- A published, current map of independent operators behind the top 100 block-producing seats
- Any consensus, bridge, or MPC interruption prevents finality or exit for more than 6 hours
These triggers make the assessment monitorable. They are not predictions; each identifies a fact that would change or reopen the current control assessment.
Advisor implementation questions
- Does the client’s thesis require censorship resistance, or primarily low-cost settlement?
- Can the client exit without cooperation from the normal transaction-ordering party?
- Who can upgrade bridges or contracts, and what delay applies?
- Does the asset introduce an issuer weaker than the chain grade?
- What evidence will show a halt, censorship event, or governance change?
Research sources
- NEAR Docs — Validators — top 100 validators produce blocks and chunks, seat price from the 300th largest proposal, chunk validators, slashing burns stake
- nearcore developer guide — Protocol Upgrade — 80% of stake activates a protocol version, upgraded nodes vote automatically, weekly release then vote cadence
- NEAR Docs — Omni Bridge overview — Chain Signatures MPC, Wormhole plus Chain Signatures for Solana, Base, BNB, Arbitrum, Polygon, light client plus MPC for Ethereum
- nearcore — release 2.9.0 (inflation reduction activated by validator adoption) — protocol change shipped as a client release, activation by 80% of stake running the binary
- Nearblocks — validator list — 418 active validators
Sources were accessed 2026-09-22. Primary documents and measured control conditions can change; the review triggers above govern off-cycle reassessment.