mantra

Prop 36: Parameter Update: Restrict CosmWasm Instantiate Permissions to Allowlist Across Existing Code IDs (Expedited)

Cosmwasm Parameter Updates

This is a parameter-only proposal, no binary upgrade is required.

Summary

This proposal restricts CosmWasm contract instantiation to a governance-controlled address allowlist for all existing code IDs on MANTRA Chain that currently allow instantiation by Everybody.

What This Does

As of this proposal's drafting, GET /cosmwasm/wasm/v1/code reports 85 uploaded code IDs. Of those, 4 (code IDs 2, 7, 11, and 12) already restrict instantiation to a specific address set and are left unchanged. The remaining 81 code IDs currently allow instantiation by Everybody.

This proposal issues one MsgUpdateInstantiateConfig per one of those 81 code IDs, setting each one's instantiate permission to AnyOfAddresses with the same 4-address allowlist already used for code_upload_access:

  • mantra1hze5xhd5d5mwysddrutmdt7f89lztrx2xm3nk8
  • mantra1f5456m24pzmfh240nc67csw2x0pdpwrdwmw56n
  • mantra1s53ugc5xnsj5yjnz2qqrrlrekgtrxg8unke9ff
  • mantra1azy7zyx7j06nae53ud5def7f5c25msfz4mglsw

Why

This aligns instantiate access with the existing upload-access allowlist, so that only the same governance-approved addresses that can upload new CosmWasm code can also instantiate contracts from it. Existing contract instances and their execution are unaffected; this only governs the creation of new contract instances from these code IDs going forward.