Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

docs: add security model to ics27 docs #841

Merged
merged 3 commits into from
Feb 3, 2022
Merged

docs: add security model to ics27 docs #841

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
9f1d00a
add security model to ics27 docs
colin-axner Feb 3, 2022
cbe90fc
Update docs/app-modules/interchain-accounts/overview.md
colin-axner Feb 3, 2022
5a321d6
Merge branch 'main' into colin/705-ics-security-docs
colin-axner Feb 3, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions docs/app-modules/interchain-accounts/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,4 +29,10 @@ Regular accounts use a private key to sign transactions on-chain. Interchain Acc

`Interchain Account`: An account on a host chain. An interchain account has all the capabilities of a normal account. However, rather than signing transactions with a private key, a controller chain's authentication module will send IBC packets to the host chain which signals what transactions the interchain account should execute.

## SDK Security Model

SDK modules on a chain are assumed to be trustworthy. For example, there are no checks to prevent an untrustworthy module from accessing the bank keeper.

The implementation of ICS27 on ibc-go uses this assumption in its security considerations. The implementation assumes the authentication module will not try to open channels on owner addresses it does not control.

The implementation assumes other IBC application modules will not bind to ports within the ICS27 namespace.