Audit bridge admin and plan transfer to DEX 2-of-3

PlasticDigits commented

2026-08-15 12:42:59 +00:00

(Migrated from gitlab.com)

Summary

Audit columbus-5 cl8y-bridge-v2 admin still held by cl8y2_admin (terra1xsecn4snv94ezcez0z3vq8an9j4h4kxxcydp8l) and plan transfer of contract admin and wasm admin to the DEX 2-of-3 terra1zlmv2xydxcusurtr6rl78wsvytdc6mfex6hep7.

Do not remove the bridge as a CW20 minter.

Live state (queried 2026-08-15)

Surface	Role today	Must keep after handoff
cl8y-bridge-v2 `terra18m02…dfs7la` code 10971	wasm admin + `config.admin` = `cl8y2_admin`	Bridge must stay extra minter on CL8Y and primary minter on vFDUSD
CL8Y `terra16wtml…hpax3`	wasm + primary minter + marketing already DEX multisig; extra = this bridge	Leave extra minter
vFDUSD `terra1mnl9a…svj3`	wasm admin = `cl8y2_admin`; primary minter = this bridge	If moving vFDUSD wasm admin, do not `update_minter` away from the bridge without `AddMinter(bridge)` first

Audit checklist

Confirm bridge ExecuteMsg for admin rotation (do not assume update_config)
Transfer config.admin + wasm set-contract-admin to the DEX 2-of-3
Re-query CL8Y minters and vFDUSD minter after any token change
Pause / fee_collector / min_signatures stay operable from the multisig

DEX CL8Y minter already handed off; gems/faucet done
UST1 wrap tokens / treasury: ustr-cmm sister issue
Window/oracle: ust1-window sister issue

## Summary Audit columbus-5 **cl8y-bridge-v2** admin still held by `cl8y2_admin` (`terra1xsecn4snv94ezcez0z3vq8an9j4h4kxxcydp8l`) and plan transfer of **contract admin** and **wasm admin** to the DEX 2-of-3 `terra1zlmv2xydxcusurtr6rl78wsvytdc6mfex6hep7`. Do **not** remove the bridge as a CW20 minter. ## Live state (queried 2026-08-15) | Surface | Role today | Must keep after handoff | |---------|------------|-------------------------| | cl8y-bridge-v2 `terra18m02…dfs7la` code 10971 | wasm admin + `config.admin` = `cl8y2_admin` | Bridge must stay **extra minter on CL8Y** and **primary minter on vFDUSD** | | CL8Y `terra16wtml…hpax3` | wasm + primary minter + marketing already **DEX multisig**; extra = this bridge | Leave extra minter | | vFDUSD `terra1mnl9a…svj3` | wasm admin = `cl8y2_admin`; **primary minter = this bridge** | If moving vFDUSD wasm admin, do not `update_minter` away from the bridge without `AddMinter(bridge)` first | ## Audit checklist - [ ] Confirm bridge `ExecuteMsg` for admin rotation (do not assume `update_config`) - [ ] Transfer `config.admin` + wasm `set-contract-admin` to the DEX 2-of-3 - [ ] Re-query CL8Y `minters` and vFDUSD `minter` after any token change - [ ] Pause / fee_collector / min_signatures stay operable from the multisig ## Related - DEX CL8Y minter already handed off; gems/faucet done - UST1 wrap tokens / treasury: **ustr-cmm** sister issue - Window/oracle: **ust1-window** sister issue

PlasticDigits commented

2026-08-15 12:43:43 +00:00

(Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#526

PlasticDigits commented

2026-08-15 12:43:46 +00:00

(Migrated from gitlab.com)

mentioned in issue PlasticDigits2/ustr-cmm#15

PlasticDigits commented

2026-08-15 12:43:47 +00:00

(Migrated from gitlab.com)

Sister audits:

DEX tracker: https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/work_items/526
ustr-cmm: https://gitlab.com/PlasticDigits2/ustr-cmm/-/work_items/15
ust1-window: https://gitlab.com/PlasticDigits/ust1-window/-/work_items/30

Sister audits: - DEX tracker: https://gitlab.com/PlasticDigits/cl8y-dex-terraclassic/-/work_items/526 - ustr-cmm: https://gitlab.com/PlasticDigits2/ustr-cmm/-/work_items/15 - ust1-window: https://gitlab.com/PlasticDigits/ust1-window/-/work_items/30

PlasticDigits commented

2026-08-25 05:56:58 +00:00

(Migrated from gitlab.com)

Sister wrap/treasury app-governance accepts landed on columbus-5 (DEX 2-of-3, 2026-08-25). Bridge admin is unchanged — this issue stays open.

DEX tracker: PlasticDigits/cl8y-dex-terraclassic#526. Do not remove the bridge as a CW20 minter.

Sister wrap/treasury app-governance accepts landed on columbus-5 (DEX 2-of-3, 2026-08-25). Bridge admin is unchanged — this issue stays open. DEX tracker: PlasticDigits/cl8y-dex-terraclassic#526. Do not remove the bridge as a CW20 minter.

PlasticDigits commented

2026-08-28 09:24:26 +00:00

(Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#697