Bypass Interchain Security Disabled Modules Messages

[mpoke]

Summary of Bug

Consumer chains disable messages for both the Slashing and Evidence modules, i.e.,

interchain-security/app/consumer/ante_handler.go

Line 46 in a9b090f

consumerante.NewDisabledModulesDecorator("/cosmos.evidence", "/cosmos.slashing"),

These mechanism can be bypass by submitting messages wrapped within an authz MsgExec transaction.

This is also the case for Stride and Neutron.

Version

a9b090f

Steps to Reproduce

1. Wrap a /cosmos.evidence or /cosmos.slashing transaction within a authz MsgExec transaction
2. Broadcast this transaction to the chain
3. bypass the blocked messages

---

For Admin Use

• Not duplicate issue
• Appropriate labels applied
• Appropriate contributors tagged
• Contributor assigned/self-assigned
• Is a spike necessary to map out how the issue should be approached?

[mpoke]

An update on this issue:

• The Unjail message is not a problem as this is a noop for consumers, see

  interchain-security/x/ccv/consumer/keeper/validators.go

  Line 184 in fe918ae

  func (k Keeper) Unjail(sdk.Context, sdk.ConsAddress) {}

• The SubmitEvidence message is also not a problem on Neutron or Stride as neither chain has a router set for the Evidence keeper so such a transaction will always panic

Still, this needs to be fixed to avoid any issues in the future a consumer chain sets the evidence router.

[sontrinh16]

hi @mpoke, correct me if i'm wrong but we can check the for authz message in the consumer ante handler and check the msgs array in MsgExec for any message type that corresponded to the disable message types. What do you think ?

[sontrinh16]

spin up some rough idea PR, hope this would be any help