PIP-129: Paloma Mainnet Upgrade to Paloma v2.4.8 to prevent mapping multiple denoms to same ERC20

Governance
1

Proposal: PIP-129: Paloma Mainnet Upgrade to Paloma v2.4.8 to prevent mapping multiple denoms to same ERC20

Status: Proposed

Author(s): @birdlady

Type: Software Upgrade

Discussions-to: Governance - Paloma

Created: 03/05/2025

Simple Summary

This is a software upgrade proposal for Paloma to v2.4.8 Paloma’s MAINNEST tumbler network. This release includes a fix to prevent mapping multiple denoms to same ERC20.

Abstract

Paloma detected an issue that allowed user who create a new denom on Paloma to link that denom to any ERC20 contract even if it already had a denom linked on Paloma.

Motivation

If the denom to ERC20 token mapping is not unique, users can exploit existing tokens that were deployed by other users.

Specification Overview

The specification for this release includes the following fix:

Technical Specification

Paloma

Paloma v2.4.8 upgrades include the following:
Release PR https://github.com/palomachain/paloma/releases/tag/v2.4.8

Prior to upgrade

  1. An upgrade proposal that must be submitted by anyone running a node on the network. This proposal should have the correct block height.
  2. Please use the following tool to calculate the approximate Block Height: Huginn - PalomaChain Release Window Planner
  3. This upgrade proposal is an expedited proposal and requires 1000 GRAIN or 1000000000ugrain for deposit for voting.
  4. IMPORTANT: The upgrade height is the block height where the chain halts and requires the upgrade. Allow at least one (1) day AFTER voting end time and upgrade-height for 2/3 of the network to have downloaded the new binary and prepped for the switch over to avoid/minimize downtime of the Paloma chain.
  5. The Target block height for chain halt for this proposal is tentative 33171508 ****or approximately 03/6/2025 18:00 UTC See (Block height: 33171508)

Proposal Vote Command for CLI

palomad tx gov submit-proposal ./pip-129.json \
--gas auto \
--node=https://rpc-1.paloma.nodes.guru/ \
--chain-id tumbler \
--from <Your Paloma Address>

pip-129.json

{
    "messages": [
     {
      "@type": "/cosmos.upgrade.v1beta1.MsgSoftwareUpgrade",
      "authority": "paloma10d07y265gmmuvt4z0w9aw880jnsr700jz87xyk",
      "plan": {
       "name": "v2.4.8",
       "height": "33171508",
       "info": "",
       "upgraded_client_state": null
      }
     }
    ],
    "metadata": "ipfs://QmfRcU3hpdj2hCU8fFNftjptCbGxMe2aRE31u5kmwJW8Tu",
    "deposit": "1000000000ugrain",
    "title": "PIP-129: Paloma  Mainnet Upgrade to Paloma v2.4.8 to  prevent mapping multiple denoms to same ERC20",
    "summary": "This Paloma v2.4.8 release includes a bug fix for ERC20 mapping.", 
    "expedited": true
}

pip-126_metadata.json

{
 "title": "Paloma  Mainnet Upgrade to Paloma v2.4.8 to  prevent mapping multiple denoms to same ERC20",
 "authors": [
  "BoweryKing"
 ],
 "summary": "PIP-129: Paloma  Mainnet Upgrade to Paloma v2.4.8 release includes a bug fix a bug fix for ERC20 mapping.",
 "details": "\"'{\\\"binaries\\\":{\\\"linux/amd64\\\":\\\"https://github.com/palomachain/paloma/releases/download/v2.4.8/paloma_Linux_x86_64.tar.gz\\\"}}'\"",
 "proposal_forum_url": "",
 "vote_option_context": "Vote YES to support running this binary to upgrade the Paloma Mainnest Network"
}

How to Vote on Proposal 186 with CLI

palomad tx gov vote 186 yes \
--chain-id tumbler \
--from <Your Paloma Address> \
--node <Your node> \
-y

How to Vote on Proposal 186 with Paloma LightNodes

# Mac & Linux
sh ~/Downloads/setup.sh vote-proposal 186 yes

# **Windows**
docker run --rm --pull=always -ti -v $env:USERPROFILE\\paloma-lightnode:/root/lightnode palomachain/lightnode-client:v2 vote-proposal 186 yes

How to check if 2/3 of the network is online after the vote is complete

curl -s localhost:26657/consensus_state | jq -r ".result.round_state.height_vote_set[0].prevotes_bit_array"

—> needs to return ≥ ~0.67 for the chain to start up again

To see which validators are online with the new binary, use GitHub - blockpane/pvtop: top-like tui for watching validator pre-votes on Tendermint chains

About Paloma

Paloma wants to be the fastest relay chain in the world with the most decentralized network of validators that can attest to any transaction with the fastest possible execution. Paloma aims to make it easy for developers to control smart contracts on any Solana, Ethereum L1, L2, and L3 chain.

To learn more about Paloma, please visit https://palomachain.com

To follow the project on Github, please star the project GitHub - palomachain/paloma: The fast blockchain messenger protocol

To participate in the community, please join the Paloma Discord: Paloma