Summary
This proposal gives governance, which includes validators, a path for distribution of code that has been developed for proposal 3568 (for the 1.2% burn) and for 4095 (re-enable delegation and staking) - both of which passed governance votes. This proposal only deals with the distribution of the code, and the code itself, and a security proposal regarding code for 4095.
Proposal
Disclaimer: While I have contributed to aspects of the Terra Rebels community, this proposal is being submitted personally as a fellow member of the Terra v1 governance community.
Proposal Description:
In accordance with Terra governance, this proposal is being created to distribute code for proposal 3568 (for the 1.2% burn) and for 4095 (re-enable delegation and staking). The Terra v1 governance community (which includes validators) must decide the appropriate trusted distribution path for the code for these two proposals. This proposes the following distribution path, for this code listed in these repositories:
- https://github.com/terra-rebels/classic-core/
- https://github.com/terra-rebels/cosmos-sdk/
- https://github.com/terra-rebels/classic-docs/
Minus any minor adjustments to blockheight to meet agreements stated in proposal 4095, or any minor adjustments required for due diligence review, rework, or testing on the part of an independent reviewer.
The code being proposed (minus any minor adjustments) can be seen below:
- classic-core (between dates 06/12/2022 - 7/20/2022):
- cosmos-sdk (between dates 06/12/2022 - 7/20/2022):
- classic-docs:
It is proposed that TFL either develop a novel solution or support the proposed implementation of proposal 3568 and 4095:
- If TFL does not provide any communication, and does not merge, build, and distribute the code in support of 3568 and 4095 in 10 business days from the time this proposal may pass governance
Else It is proposed that,
- v0.5.21 code will be distributed to validators from the following repository, https://github.com/terra-rebels/classic-core/ and the build instructions will be provided in this document source for validators, including support contact information as seen here:
The following outlined steps were done to ensure due diligence for code review, security, and testing:
-
Review:
- PASSED - Partial Independent Code Review of Pull Request From TFL and Cosmos Developers, see fix: Immediately Re-enable delegations and staking on Luna Classic. Re-enable the creation of new validators at block height 8905758 by edk208 · Pull Request #80 · terra-money/cosmos-sdk · GitHub
- PASSED - Full Internal Code Review by Members of the Terra Rebels
- UNDER REVIEW - Full Independent Code Review Requested from Current Classic Validators with Technical Expertise
- PENDING RESPONSE - Full Independent Code Review Requested from SCV-Security
- PENDING RESPONSE - Full Independent Code Review Requested from members of TFL
-
Testing:
- PASSED - Unit Testing of the uLuna Denom Tax
- PASSED - Unit Testing of the Burn AnteHandler
- PASSED - Integration Testing of the 3568 and 4095 on TestNet
- PASSED - Upgrade Testing of 3568 and 4095 on TestNet
- Full details of the code (minus any minor adjustments allowed for in this proposal) and testing results can be found in the Terra Rebel’s white paper:
-
Security:
- In addition to security related aspects in independent review, and testing: In consultation with the concerns of the community and validators, the following was added to the code for 4095, which although meets the essence of 4095, provides strengthened security:
-
Given the imbalance of community-owned Luna and the staked Luna, a 2/3 attack is plausible when delegation and staking are re-enabled. This attack is mitigated in two ways. First, delegation is opened up to existing validators in the first 60 days. An attack in this time period could only come from the existing validators, who have already demonstrated their commitment to faithfully running the chain.
-
Further, a security measure is implemented within the Delegate command that computes whether or not any transaction will increase a validator’s voting power over a certain limit ( it is proposed that no validator should achieve more than 25% of the voting power). If the limit is exceeded, the delegation command will fail. This security measure will also be in place for the first 60 days.
-
- In addition to security related aspects in independent review, and testing: In consultation with the concerns of the community and validators, the following was added to the code for 4095, which although meets the essence of 4095, provides strengthened security:
It is proposed that code added for 4095, which although meets the essence of 4095, and provides for preventative security be approved:
- That no validator should achieve more than 25% of the voting power for the first 60 days
If this proposal should pass, @ek826 mentioned that the block height for the activation of 3568 and 4095 is 8,890,141, approximately August 12, 2022. This blockheight is subject to change if required by validator adoption or independent review.
Note:
The proposal is open for discussion, and will be submitted in 3 days