You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Our Sudo helper in osmoutils currently allows for unbounded gas on contract calls. While this is handled properly for regular transactions, it is not properly handled for functions that are called in begin block. Adding a gas limit (even if high) to this helper would meaningfully reduce the attack surface for CW contract calls.
Suggested Design
Wrap the Sudo call below with a childCtx that has a 30M gas limit (similar to what exists for queries):
Background
Our Sudo helper in osmoutils currently allows for unbounded gas on contract calls. While this is handled properly for regular transactions, it is not properly handled for functions that are called in begin block. Adding a gas limit (even if high) to this helper would meaningfully reduce the attack surface for CW contract calls.
Suggested Design
Wrap the Sudo call below with a childCtx that has a 30M gas limit (similar to what exists for queries):
osmosis/osmoutils/cosmwasm/helpers.go
Line 121 in 7d734f6
Acceptance Criteria
The text was updated successfully, but these errors were encountered: