THE xONE LAB Explore the performance record
xone.sh

Security.

4 stories

Validator9 min read

XDC validator key custody and seat rotation with xOne

Where an xOne validator key lives, what the node never does with it, and the exact steps to rotate or hand off an XDC seat, one signer at a time, on net2040.

Nov 15, 2026Read story
Snapshot6 min read

How xOne snapshots and backups are made and verified

What xOne hashes and what it signs in chain snapshots and datadir backups: the manifest, chunk checks, the pins file, the anchor proof, and the ADR-006 gap.

Nov 15, 2026Read story
Release7 min read

How to verify an xOne release artifact on XDC

Check an xOne release download: SHA256SUMS, the version stamp against the tag, what ci/qualify-artifact.sh tests, and what the release page lacks today.

Nov 15, 2026Read story
RPC5 min read

Securing xOne RPC without a proxy: native TLS, client certificates and method ACLs

How to serve xOneRS JSON-RPC over TLS, require client certificates, and give each JWT principal its own method list with --rpc.acl, with the errors to expect.

Nov 15, 2026Read story

Edit this page on GitHub opens the page source (app/blog/tags/[tag]/page.jsx). GitHub may ask you to sign in. Report a correction opens a prefilled GitHub issue for this page.

Was this page helpful?

Feedback is public on GitHub and needs a GitHub account. Nothing is sent until you submit the issue there. Page: /blog/tags/security/. Reviewed version: 14 November 2026.

YOUR NEXT STEP

Build your way.

Choose an implementation to see its source-based build recipe.

Use the pinned Rust toolchain and platform build prerequisites in the repository.

git clone https://github.com/XDCIndia/xOneRS.git
cd xOneRS
cargo build --locked --release -p xone
./target/release/xone --version

This recipe builds the client; it does not start a node. Mainnet operation is not yet qualified.

Open source guide