v4.0.1-patch.3
What is this?
v4.0.1-patch.3 is a mandatory security release for Terra Classic (columbus-5).
wasmd and wasmvm are critical components of the Terra Classic smart contract platform. Both are affected by a critical security vulnerability, which is being handled through responsible disclosure. Cosmos Labs will publish the details of the fix on Monday, 28 September 2026, 14:00 UTC. Chains need to upgrade before that date so they don't become targets once the attack vector is public.
Until then, the source code of the fix is shared only in private channels. The Terra Classic core maintainers have applied the fix to terrad and published this patch release. It is rolled out through a coordinated SoftwareUpgrade governance proposal.
The fix changes consensus behaviour. It is activated by the on-chain software upgrade v14_3 at block height 30544730, estimated for Thursday, 24 September 2026, 15:00 UTC. The actual time can differ by up to about an hour, so track the block height rather than the clock.
Who needs to upgrade: everyone running a columbus-5 node, including validators, RPC/LCD providers, exchanges, relayers and explorers. Nodes that are not upgraded stop at 30544730 and cannot continue.
The upgrade makes no state changes. There is no migration, no new store and no parameter change.
Downloads
| File | sha256 |
|---|---|
| terra_4.0.1-patch.3_Linux_x86_64.tar.gz | 4b1428ace2f9c328a813ea0739104c3f506095d3849acdfc5e673fe2d22fd7b3
|
| terra_4.0.1-patch.3_Linux_arm64.tar.gz | 94cc1189902c4bc0c5b570c0c2cfedc90041ffeed510aa9e126e13953f0d93bf
|
| checksums.txt |
The binaries are statically linked, so no separate libwasmvm is needed.
Installation
1. Download and verify. Use arm64 instead of x86_64 on ARM machines.
VERSION=v4.0.1-patch.3
ARCH=x86_64
BASE=https://github.com/classic-terra/core/releases/download/$VERSION
curl -fLO $BASE/terra_4.0.1-patch.3_Linux_$ARCH.tar.gz
curl -fLO $BASE/checksums.txt
sha256sum -c --ignore-missing checksums.txt # must print: OK
tar xzf terra_4.0.1-patch.3_Linux_$ARCH.tar.gz
./terrad version # must print: 4.0.1-patch.32. Install. Do this before block 30544730. Choose one of the two options.
Wait until the node halts with:
UPGRADE "v14_3" NEEDED at height: 30544730
Then stop the node, replace the binary and start it again:
sudo systemctl stop terrad
sudo cp terrad $(which terrad)
terrad version # 4.0.1-patch.3
sudo systemctl start terradAdjust the service name and binary path to your setup. Do not replace the binary before the halt. Once the upgrade is scheduled, a node that runs the new binary below 30544730 stops with BINARY UPDATED BEFORE TRIGGER!.
3. Check. After the restart, the node should produce or sync blocks above 30544730:
curl -s localhost:26657/status | jq -r .result.sync_info.latest_block_heightThe chain resumes as soon as validators holding more than 2/3 of voting power run v4.0.1-patch.3.