Code Browser

fix(x/consensus): reject removing a validator key type that is still in use

x/consensus: MsgUpdateParams can remove a validator key type still in use, halting the chain at the next validator update

ارتقا

fix(keys): Trim spaces on the mnemonic file content.

Vote-subset-dependent BeginBlock state writes (x/slashing, x/distribution) cause apphash divergence under partial vote gossip (v0.53.8)

chore(x/gov): drop leftover x/params references

fix(runtime): expose all autocli services, not just the last

fix(cosmovisor): retry while upgrade-info.json is still empty

fix(store): data race in snapshot manager test helper

fix(x/auth/ante): deduct fees to the decorator's configured recipient module

fix(baseapp): make BaseApp.Close idempotent

Optimistic Execution can retain stale height when ProcessProposal is skipped, causing misleading hash mismatch on next FinalizeBlock

Problem: mempool removal error cause app hash mismatch

Moh

محمد

Declarative internal-only messages (governance/module dispatch only, reject direct submission)

test(blockstm): add property-based fuzz harness for parallel execution

fix(baseapp): enforce MaxBlockGas in ProcessProposal with NoOpMempool, guard gas overflow in tx selection

baseapp: BaseApp.Close is not idempotent — double app.Close() on shutdown panics with PebbleDB ("pebble: closed")

`rootmulti.PruneStores` prunes IAVL versions but never deletes commit-info records (`s/<version>`) — unbounded metadata DB growth

perf(store): memoize LastCommitID to drop merkle rebuild on every query

Documented: Ante Handler Gas Bypass in Mempool (CWE-20)

BaseApp.runTx commits AnteHandler state to checkState before mempool.Insert; failed insert leaves sender nonce advanced

autocli: multi-service modules silently expose only the last registered service

refactor: streamline SDK

Redundant gas charges from Has -> Get access pattern

Enterprise License Issues

feat: reimplement SDK app wiring and explicit chain-id configuration

CosmosSDK automatically resolves the closest region for JioIndiaWest as IsraelCentral instead of CentralIndia

MsgSubmitProposalCmd contains a serious vulnerability.