[PROPOSAL 1007][PASSED] Enable Permissionless CosmWasm Smart Contract Deployment on Cosmos Hub

Change log

  • 2025-07-30 Created initial post

Summary

Enable Permissionless CosmWasm Smart Contract Deployment on Cosmos Hub

Details

Today, CosmWasm (CW) is permissioned on the Cosmos Hub. This means that in order to deploy a contract, an address must first be whitelisted via an on-chain vote. Once whitelisted, that address can deploy as many contracts as it wants without going through governance again unless its permission is later revoked.

Current situation:

Very few deployments are happening on the Hub.

Suspected reasons:

  • A project needs visibility and certainty to get started. It’s hard to convince investors with a pitch like: “We’ll build for months, but we’re not sure if we’ll be allowed to deploy.”

  • The process is too slow and clunky, due to slow or inefficient governance.

  • Teams are sometimes reluctant to expose themselves publicly or be judged in a vote.

  • The whitelisting mechanism lacks granularity: once approved, an actor can deploy unlimited contracts without further review.

  • The Hub isn’t seen as a developer-friendly environment compared to simpler and faster alternatives (Neutron, Osmosis, etc.).

  • Low current activity creates a loop of inertia: low usage = low attractiveness.

The current Cosmwasm parameters on the Hub are:

{
  "code_upload_access": {
    "permission": "AnyOfAddresses",
    "addresses": [
      "cosmos1raa4kyx5ypz75qqk3566c6slx2mw3qzs5ps5du",
      "cosmos19pmppgpqnjkvjp6mx8q2dpuy382g4hhxatt9sk",
      "cosmos1559zgk3mxm00qtr0zu2x5n4rh5vw704qaqj6ap"
    ]
  },
  "instantiate_default_permission": "Everybody"
}

Why CosmWasm?

  • Several well-known Cosmos teams want to deploy on the Hub.

  • CosmWasm is part of the native Cosmos stack, with a well-equipped ecosystem (IBC integration, CosmJS, etc.).

  • Some live applications are becoming critical (e.g. Hydro).

  • The Hub could attract meaningful use cases if development becomes easier.

  • CosmWasm enables strong modularity and security through smart contracts.

Historical concerns:

The main worry has always been security: risks of exploits, hacks, rug pulls, etc.

What community knows:

Neutron, a permissionless CosmWasm chain, shows that:

  • Deployment volume remains reasonable.

  • No major incidents have occurred to date.

  • Permissionlessness hasn’t led to overload or chaos.

Furthermore, in the current case of permissioned CW on the hub, a previously whitelisted address can deploy a multitude of contracts without authorization, which would be at risk in the case of an unperformed audit. Ultimately, the current permissioned CW only bottlenecks development on the cosmos hub.

If an issue were to arise, ICL (in charge of Hub software) could respond quickly.

Proposed idea:

Enable permissionless CosmWasm SC deployment on the Hub.

The updated Cosmwasm parameters on the Hub would be:

{
   "@type": "/cosmos.wasm.v1.MsgUpdateParams",
   "authority": "cosmos10d07y265gmmuvt4z0w9aw880jnsr700j6zn9kn",
   "params": {
    "code_upload_access": {
          "permission": "Everybody"
        },
        "instantiate_default_permission": "Everybody"
      }
   }

In conclusion:

By allowing permissionless Cosmwasm SC deployment, we will make the hub attractive to developers, enable the development of multiple aligned ATOM applications, create on-chain activity, and therefore, fill the blocks that remain empty, and burn atoms to finally reduce inflation. A better asset to invest in, more useful, less inflationary.

Forum post link

Governance votes

The following items summarize the voting options and what it means for this proposal:

YES - Cosmwasm will become permissionless on the Cosmos Hub

NO - Permissioned Cosmwasm will remain on the hub

NO WITH VETO - A ‘NoWithVeto’ vote indicates a proposal either (1) is deemed to be spam, i.e., irrelevant to Cosmos Hub, (2) disproportionately infringes on minority interests, or (3) violates or encourages violation of the rules of engagement as currently set out by Cosmos Hub governance. If the number of ‘NoWithVeto’ votes is greater than a third of total votes, the proposal is rejected and the deposits are burned.

ABSTAIN - You wish to contribute to quorum but you formally decline to vote either for or against the proposal.

22 Likes

I fully support this proposal.

5 Likes

Voting yes, finally hopefully hub will do something useful.

5 Likes

This is an excellent idea — thank you for putting forward such a thoughtful and necessary proposal. Here are my reasons why permissionless CosmWasm deployment on the Cosmos Hub makes perfect sense:

  1. Faster Innovation
    Developers can deploy instantly without waiting for governance votes, speeding up experimentation and product launches.

  2. More Developer Engagement
    Making the Hub more accessible will attract builders who currently prefer platforms like Neutron or Osmosis.

  3. Reduced Governance Overhead
    Governance shouldn’t have to approve every single contract deployer — it’s inefficient and not scalable.

  4. Real Ecosystem Growth
    More deployments = more use cases, more users, more ATOM burned, and ultimately, a stronger, more active chain.

  5. Security Doesn’t Disappear
    Permissionless doesn’t mean unsecure — other Cosmos chains have proven that open deployment works without leading to chaos.

Let’s make the Hub developer-friendly and future-ready. Full support from me! :clap:

7 Likes

Let’s go ! Voting yes :+1:

3 Likes

Well written. Full support. Even if concerns in terms of exploits, hacks, rugpulls still holds - that’s part of the game. Besides security, “value” should be weighed in. A 100% secured chain with nearly 0.01% possibilities of value creation for builders, it’s worthless.

Our 2 cents

4 Likes

Fully supporting this, when will this be posted on-chain?

3 Likes

Voting will begin at the beginning of the coming week

7 Likes

Nice! Tokenfactory will be next? Thanks for not giving up, Guinch!

4 Likes

I made a ping for ICL to know if it is planed to add it. If they don’t answer this, I could make a signaling proposal next week .

7 Likes

You have our support

3 Likes

Full support on the prop. Lets get this passed asap.

3 Likes

Hey guys, jumping in here as a creative director and product owner who’s bootstrapped a few startups in the web3 space - think UX-driven DeFi tools and NFT platforms that actually feel fun to use, not like clunky spreadsheets from the 90s. I’ve been lurking on Cosmos stuff for a while 'cause I’m all about ecosystems that empower builders without the red tape. This proposal? Total game-changer. I’m voting YES all the way, and here’s why, plus some brainstorm vibes to amp it up.

First off, massive props to your Cosmos crew for laying this out so clean. The current permissioned setup is like asking artists to submit a portfolio just to buy paint - sure, it weeds out some bad apples, but it kills the vibe for everyone else. I’ve seen it firsthand: teams ghost on projects 'cause “governance roulette” isn’t exactly investor catnip. Permissionless CW on the Hub? That’s flipping the script to “build first, shine later.” It’d spark that flywheel - more devs tinkering, more apps popping up, blocks filling up, ATOM burning brighter. Love how you tied it to real wins like Neutron’s chill deployment scene; no chaos, just steady growth. And yeah, the security angle’s solid—ICL’s got the Hub’s back, and modularity means we can iterate without Armageddon.

From my designer hat: let’s make this Hub feel like a playground, not a fortress. Imagine onboarding flows that scream “welcome, creator!”, maybe integrate some no-code CosmWasm templates right into the docs, or a dev dashboard with drag-and-drop IBC hooks. I’ve prototyped similar stuff for my startups, and it turns lurkers into loyalists overnight. To level it up, what if we pair this with a “Hub Hackathon Fund” via governance? Small grants for permissionless deploys that align with ATOM’s vibe-think/eco-friendly apps or cross-chain UX magic. Or even a community-voted “spotlight” mechanism post-deploy, where top contracts get featured on the Hub’s front page (or whatever the Cosmos equivalent is). That granularity you mentioned? We could evolve it with optional “audit badges” that devs earn through third-party reviews, giving users that warm fuzzy without mandatory gates.

Bottom line: this isn’t just tech tweak; it’s unlocking Cosmos Hub as the go-to canvas for cosmic innovation. Let’s make history by making it easy for the next wave of dreamers to paint. Who’s with me? Hit me up if you wanna riff on designs or product ideas - always down to collab and make this epic. :rocket:

5 Likes

I think we have a lot of resources in the hub community, and soon, thanks to this vote, which we hope will be voted YES, the large cosmos community that has drifted away over time, will come back with more ideas, more knowledge and experience, to build on a more secure, more reputable platform, this will make noise! A lot of people have had ideas about apps that could be launched here, and app launchpads with interesting mechanisms, @agentkwosh has had some good ideas lately and I think we need to develop in his direction and in yours to allow for fast and well-organized development. Let’s take things in order, let’s make this prop 1007 the proposal that will revolutionize the usefulness of ATOM for its close community, that will allow DEFIHUB, etc… the hub is the heart of the cosmos, and thanks to this proposal, it would become the heart + the brain. next step: EVM pss, then multiVM support in the AEZ. let any developer in the world come and build on ATOM, and scale thanks to IBC eureka.

7 Likes

This is a good idea, but why was CosmWasm was not originally launched permissioniess? Really only because of fear of scum?

Security related, and Neutron was the PSS chain with permissionless CW. Right now, Neutron is no more Atom aligned, then ATOM community needs to move forward, and fast.

4 Likes

POSTHUMAN voted YES on this proposal

We belive it will attract more builders on Cosmos Hub

10 Likes

100% YES. Especially now that Neutron is no longer on ICS (or won’t be in the future). This opens the door for countless dApps that want to build in Cosmos but are forced onto other chains (like Neutron and Osmosis) and then IBC their way back to ATOM. Enabling permissionless contracts on Hub would make Cosmos Hub the natural home for these builders.

Next step after that should definitely be x/tokenfactory.

4 Likes

yes yes yes full support let’s make hub great again

2 Likes

:waving_hand: well done, i support this