What a validator does
The Cosmos Hub runs CometBFT consensus. A validator is a node whose consensus key signs prevotes and precommits on every block, and that proposes blocks in turn. The chance of proposing is proportional to voting power. Voting power is the ATOM bonded to the validator: its own self-delegation plus everything delegators bonded to it. Only the 180 validators with the most voting power are in the active set. Everyone else is a candidate: created on chain, able to receive delegations, but not signing and not earning. Being in the set means:- Signing every block. Missing too many gets you jailed (numbers below).
- Never signing two different blocks at the same height. That is a double sign, and the penalty is permanent.
- Upgrading at the governance-approved height, every time. See Upgrade with Cosmovisor.
- Voting on governance proposals. Delegators who do not vote inherit your vote.
- Running infrastructure that stays up through hardware failures, attacks, and maintenance.
The three keys
A validator uses three keys. On gaia v28.3.1 none of them can be rotated. Thegaiad tx staking --help output lists cancel-unbond, create-validator, delegate, edit-validator, redelegate, and unbond. There is no rotate command for any key.
- Operator key. An account key in the
gaiadkeyring. Itscosmosaddress holds funds. Itscosmosvaloperform identifies the validator on chain. It signscreate-validator,edit-validator,unjail, commission withdrawals, and governance votes. It can never be changed or replaced. Retiring it means creating a new validator and asking delegators to move. - Consensus key. An Ed25519 key written to
config/priv_validator_key.jsonbygaiad init, identified by acosmosvalconsaddress. It signs votes and proposals. It should be kept in a remote signer or hardware security module (HSM), not on the validator host. See Remote signing. - Node key.
config/node_key.json, the peer-to-peer identity. It has no on-chain state. It can be regenerated by deleting the file and restarting the node.
Live constraints
180 active seats, and the set is full.max_validators parameter is 180, and 180 validators are bonded. To enter the set your voting power must exceed the 180th validator’s. Check the current cutoff on Mintscan.
5 percent minimum commission.
min_commission_rate parameter is 0.05. A create-validator with a lower commission-rate is rejected by the chain. An edit-validator cannot go below it.
21 days unbonding.
unbonding_time parameter is 504 hours. Self-delegation you undelegate stays locked, and slashable, for 21 days.
Downtime: sign at least 5 percent of any 10,000-block window.
signed_blocks_window parameter is 10000 and min_signed_per_window is 0.05, so missing more than 9,500 of the last 10,000 blocks jails you. At the block time measured on 2026-10-15 (5.7 seconds average), 10,000 blocks is about 16 hours and 9,500 blocks is about 15 hours. The penalty is slash_fraction_downtime 0.0001 (0.01 percent of bonded stake) plus a jail of at least downtime_jail_duration 10 minutes. After that you send unjail yourself.
Double sign: 5 percent slash and permanent removal.
slash_fraction_double_sign parameter is 0.05. The validator is also tombstoned. A tombstoned validator can never be unjailed. The only way back is a new validator with a new consensus key and a new operator key.
Liquid staking caps: 25 percent of all bonded ATOM globally, 100 percent per validator.
global_liquid_staking_cap parameter is 0.25 and validator_liquid_staking_cap is 1.0. These are the only liquid staking parameters on the Hub today. There is no validator bond requirement. See Liquid staking.
Minimum self-delegation: your own floor, at least 1 uatom.
You set min-self-delegation in validator.json when you create the validator. It can only be raised afterwards. If your self-delegation drops below it, the validator is jailed. This is also the mechanism for a clean exit. See Create and manage a validator.
Economics
Rewards come from inflation and from transaction fees, pooled and split by voting power.inflation_min 7 percent and inflation_max 10 percent depending on how much ATOM is bonded against goal_bonded 67 percent. On 2026-10-15 it was 10 percent.
community_tax parameter takes 2 percent off the top for the community pool. Both base_proposer_reward and bonus_proposer_reward are 0. The block proposer earns nothing extra, so there is no advantage in waiting for more precommits. After the tax, each validator’s pool receives its share by voting power. Your commission is taken from the delegators’ part, and the rest is split among delegators by stake.
What this means for you:
- Your income is commission on delegators’ rewards plus the rewards on your own self-delegation. A validator with little stake earns little, whatever its commission.
- Fees are paid in
uatomat a dynamic minimum set by the fee market, 0.005 uatom per gas on 2026-10-15 (gaiad query feemarket gas-prices). Fees join the same reward pool. - Liquid staking providers can delegate tokenized stake to you inside the caps above, and a validator cannot opt out. The
gaiad tx liquid disable-tokenize-sharesmessage only locks the sending account, so the operator account can use it to protect its own self-delegation. - Costs are yours: the validator host, two or more sentry nodes, a remote signer or HSM, monitoring, and the time to follow every upgrade.
Before you commit
- Read Hardware and system requirements and size for growth. The chain adds state every day.
- Run the whole path on the testnet first, including a remote signer and an upgrade.
- Decide on your public identity. The validator description contains a moniker, a website, a security contact, and a Keybase identity that explorers use for your logo.
- Seek legal advice for your jurisdiction. Running a validator is operating financial infrastructure.
- Join the validator channels on the Interchain Discord, where upgrades and incidents are announced.
Verify
You can answer these from the queries above before moving on:- The current 180th validator’s voting power, and how much ATOM you need to exceed it.
- The commission floor, the unbonding time, and the downtime window in hours at the current block time.
- Which of the three keys you will keep in a remote signer, and which one can never be replaced.