juno

Prop 380: Emergency: temporarily restrict x/cw-hooks contract execution

Expedited parameter change for the x/cw-hooks module, submitted as a precautionary security measure following a privately reported issue.

Changes:

  • contract_gas_limit: 250000 -> 1. Hook contracts run out of gas before executing, so no hook contract code runs.
  • contract_failure_removal_threshold: 3 -> 1. Any registered contract is unregistered on its first failed call.
  • max_contracts: 0 (no cap) -> 1. The module rejects 0 in a parameter update, so 1 is the lowest valid value, and it also caps new registrations at one contract per hook module.

Impact: no contracts are currently registered for staking or gov hooks, so no existing integration is affected.

Full details will be published after a code fix ships in a software upgrade. Governance can then restore the previous values.