Dora Vota 0.4.5
Coordinated maintenance release for mainnet vota-ash, deployed on 2026-09-24 as a temporary mitigation for the CosmWasm security issue publicly disclosed on 2026-09-28. Superseded by 0.5.0 (upgrade height 17520000), which carries the full fix.
| Item | Value |
|---|---|
| Halt height | 17453200 |
| Activation height | 17453201 |
| Source commit | 596c8216f40330b2a681f4b597462eb4e3352b16 (based on 0.4.4)
|
dorad-0.4.5-linux-amd64 SHA-256
| 41a37e4656908363619d7ba5756fd220e6d26ec35616991ef8d976f9e758bfe2
|
check-runtime.sh SHA-256
| f1b743d50b527ec03497d0f2c4082ca2c4992f2ee42de15c6f1fcc3014abd551
|
Linux x86_64 (amd64). dorad-0.4.5-linux-amd64 release-info prints the version, commit, chain ID and activation height.
Changes (relative to 0.4.4)
- Statically linked PIE build (Go 1.24.7); run with ASLR enabled (
kernel.randomize_va_space = 2).check-runtime.shchecks the running process. - From height 17453201, Wasm code upload, contract instantiation and migration are rejected at block execution, and the on-chain upload/instantiate permissions (global and per-code) are set to
Nobody. The original settings are backed up on chain undervota/maint/v1/. - Existing contracts, transfers, staking, governance and IBC are unchanged.
This release is only for replaying mainnet blocks 17453201–17519999. New nodes syncing from before 17520000 need 0.4.4 up to 17453200, then 0.4.5, then 0.5.0 from 17520000.