# Permissionless Cosmwasm v2

**URL:** <https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436>\
**Category:** Proposal Discussion\
**Tags:** revision-posted\
**Created:** [October 9, 2023, 4:39pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436 "2023-10-09T16:39:36Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![JohnnyWyles](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/johnnywyles/32/3114_2.png) [@JohnnyWyles](https://forum.osmosis.zone/u/JohnnyWyles)\
**Post date:** [October 9, 2023, 4:39pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/1 "2023-10-09T16:39:36Z")

</div>

Raising this discussion again with some further viewpoints that have emerged since the last time it was raised here:

> [@\[DED\] Permissionless CosmWasm](https://forum.osmosis.zone/t/ded-permissionless-cosmwasm/247/):
>
> notice of abandonment I think that it is highly unlikely that this proposal would pass so I don’t think there’s a lot of sense in putting it on the chain. I am very open to exploring this path in the future however, because it makes me profoundly uncomfortable to approve contract addresses instead of contracts, and to say yes to anything that is not open and fully auditable. For the time being, notional will be voting no or veto on closed source contracts, to avoid even the slightest hint of e…

## New discussion points

**Curation vs Aggregation**  
Stargaze is also a focused appchain but is currently having a vote to enable permissionless CosmWasm ([Mintscan](https://www.mintscan.io/stargaze/proposals/226))  
Further discussion on that proposal here:

> **[Common](https://gov.stargaze.zone/discussion/13347-enabling-permissionless-smart-contract-deployment)**

Not all Dapps on chain need to be promoted by each frontend and both Stargaze and Osmosis have a strong target grouping of Dapps that the chain would prefer which is potentially the downfall of chains that begin permissionlessly.

**Barrier to entry**  
Similar to permissionless pool creation on Osmosis, permissionless does not necessarily mean without barriers. A fee for contract upload could be implemented which would minimise the numbers of contracts uploaded with little use case and ensure that testing is performed on the testnet. The downside to this in my opinion is that is disincentivises teams from fast iteration or even deploying on Osmosis compared to a totally free permissionless chain if they do not need the low latency of same chain interactions. The benefit to that is that people will only deploy on Osmosis if they believe that the benefits such as proximity to liquidity, integration with other dapps and frontends and any chain features that differentiate Osmosis from other chains are worthwhile. This should almost exclusively attract only dapps that want to be part of the liquidity and account hub that Osmosis is building towards.

**Security**  
One main issue last time was that a chain halt may be caused by a malicious upload. Any barrier in place would still render this possible. Osmosis validators have responded incredibly well in the past to get the chain back up and running while fixing the error. If the chance of this is sufficiently low then perhaps it is best to allow these uploads to occur sooner in the chain’s lifetime rather than later in order to improve CosmWasm as a whole.

The last time this subject came up it was abandoned due to the idea of a Canary chain being proposed.

> [@\[DED\] Permissionless CosmWasm](https://forum.osmosis.zone/t/ded-permissionless-cosmwasm/247/9):
>
> Thanks for bringing up the discussion of whether or not Osmosis should change from Permissioned Cosmwasm to Permisionless Cosmwasm. Currently Osmosis whitelists addresses to upload contracts to Osmosis without the need to submit a governance proposal for each upload. This means that teams, through an address whitelisted by Osmosis governance, can upload any contract to Osmosis permissionlessly. This reduces the governance burden on Osmosis validators and community members so that they do not n…

A canary chain would have the same impact as another semi-independent permissionless chain rather than gaining benefits of contracts deploying on the same chain as Osmosis despite being a more elegant solution.

**Draft Proposal** : Full Writeup based on feedback to follow.

---

<div class="post-metadata">

**Author:** ![LeonoorsCryptoman](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/leonoorscryptoman/32/208_2.png) [@LeonoorsCryptoman](https://forum.osmosis.zone/u/LeonoorsCryptoman)\
**Post date:** [October 11, 2023, 5:55pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/2 "2023-10-11T17:55:21Z")

</div>

Well, the voting on Stargaze is quite clear 😅

> **[Mintscan](https://www.mintscan.io/stargaze/proposals/226)**
>
> Interchain explorer and analytics powered by Cosmostation.

Every vote in favor is met with roughly 3 against.

Permissioned is still ok for me, since it is still just 1 proposal to whitelist a team, after which it is permissionless _for them_ specifically.

In essence the canary chain should be a very active testnet I guess, since that should reflect the AS IS on the mainnet as well. In ERP-development it is quite normal to make a copy of a live environment to serve as a test-environment. Would that not work for Osmosis and test environments as well? That would offer us a very nice canary chain already.

---

<div class="post-metadata">

**Author:** ![RoboMcGobo](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/robomcgobo/32/633_2.png) [@RoboMcGobo](https://forum.osmosis.zone/u/RoboMcGobo)\
**Post date:** [October 16, 2023, 6:26pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/3 "2023-10-16T18:26:02Z")

</div>

I think the Stargaze folks have it right by shooting this proposal down. One major concern over there was that people could build markets that allow for bypassing royalties and hamstringing a major source of revenue for the chain.

Similarly, per a chat I’ve had with the White Whale team, permissionless wasm would allow for them to deploy their LPs and arb vaults on Osmosis, which could be used to completely bypass / frontrun the protorev module. Those LPs also wouldn’t be subject to taker fees. I imagine any protocol could do the same.

It doesn’t seem to make sense to me to allow for separate, third-party liquidity pools to deploy on Osmosis when liquidity is already fragmented, especially if they can be used to eliminate two sources of revenue for Osmosis (protorev and taker fees).

---

<div class="post-metadata">

**Author:** ![sunnya97](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/sunnya97/32/375_2.png) [@sunnya97](https://forum.osmosis.zone/u/sunnya97)\
**Post date:** [October 19, 2023, 11:39am UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/4 "2023-10-19T11:39:38Z")

</div>

> Similarly, per a chat I’ve had with the White Whale team, permissionless wasm would allow for them to deploy their LPs and arb vaults on Osmosis, which could be used to completely bypass / frontrun the protorev module

They won’t be able to frontrun protorev, because protorev is built natively into the protocol, and as such is triggered automatically after every swap tx.

> Those LPs also wouldn’t be subject to taker fees. I imagine any protocol could do the same.

This is true, but if they want to be integrated into the Osmosis swaps module and frontend widgets, they need to integrate with the pool manager module which charges taker fees.

Thus any volume into White Whale liquidity pools on Osmosis would be net new volume that wouldn’t be being automatically captured by Osmosis anyways.

Note that Osmosis will still profit from this through MEV revenues through POB.

---

<div class="post-metadata">

**Author:** ![RoboMcGobo](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/robomcgobo/32/633_2.png) [@RoboMcGobo](https://forum.osmosis.zone/u/RoboMcGobo)\
**Post date:** [October 19, 2023, 1:54pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/5 "2023-10-19T13:54:42Z")

</div>

Hey Sunny! Thanks for this comment.

> [@sunnya97](#):
>
> They won’t be able to frontrun protorev, because protorev is built natively into the protocol, and as such is triggered automatically after every swap tx.

You’d know better than I would here, and I tried to explain this to them as well, but they seemed pretty confident that the existence of a second set of pools on Osmosis could be used to circumvent protorev when arbing between those pools and the ones natively on Osmosis. Maybe they were referring to arbs that settle on the second pair of pools? If so, that kinda implicates your second point that these arbs wouldn’t have existed otherwise anyway.

> [@sunnya97](#):
>
> Thus any volume into White Whale liquidity pools on Osmosis would be net new volume that wouldn’t be being automatically captured by Osmosis anyways.

Although I do somewhat disagree here. This assumes that volume and liquidity in these pools would be entirely net-new, and not vampired over from the main Osmosis pools. Given the steep learning curve on concentrated liquidity pools and the lack of widespread vault availability at this time, I’m not sure that this would be the case. The CL migration has already fragmented liquidity a ton, and this could serve to fragment it even further.

---

<div class="post-metadata">

**Author:** ![L1am-Stakecito](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/l1am-stakecito/32/218_2.png) [@L1am-Stakecito](https://forum.osmosis.zone/u/L1am-Stakecito)\
**Post date:** [October 20, 2023, 4:18pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/6 "2023-10-20T16:18:15Z")

</div>

Questions for a Permissionless CosmWasm on Osmosis

A) What is the reason for the success of Osmosis since launch?  
B) What key apps have deployed on permissionless L1 chains that would have deployed on Osmosis if it was permissionless instead of onboarding via a permissioned model?  
C) What is the vision for Osmosis today and how will this change with a move to permissionless?  
D) Why will (killer) apps choose to deploy permissionlessly on Osmosis instead of another permissionless L1 and which (killer) apps would likely choose to do so  
E) How does permissionless CW further enable the current vision for Osmosis (smart accounts - asset chain, CEX competitor and and anything else included in the vision in answer to question ‘C’)

---

<div class="post-metadata">

**Author:** ![LeonoorsCryptoman](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/leonoorscryptoman/32/208_2.png) [@LeonoorsCryptoman](https://forum.osmosis.zone/u/LeonoorsCryptoman)\
**Post date:** [October 23, 2023, 6:48pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/7 "2023-10-23T18:48:59Z")

</div>

And 6) What more does it bring to the near-permissionless we have for whitelisted addresses?

We are already permissionless if you are whitelisted. So that minor tollgate is keeping us from being permissionless. I still see the conversations here which are more like “every contract upload goes through governance” versus “permissionless”.  
But that is not the case where we actually are.

So what little edge do we gain by removing the whitelisting-tollgate?

---

<div class="post-metadata">

**Author:** ![L1am-Stakecito](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/l1am-stakecito/32/218_2.png) [@L1am-Stakecito](https://forum.osmosis.zone/u/L1am-Stakecito)\
**Post date:** [October 24, 2023, 3:10pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/8 "2023-10-24T15:10:04Z")

</div>

I’m struggling to see how we are creating any significant advantages from moving to permissionless and we also create potential irreversible disadvantages and design choices… I’m not an expert, but I am against the move and havent seen much counter argument for why we should be permissionless.

Would love to hear more about why this could be such a great move, otherwise there is no need for discussion

---

<div class="post-metadata">

**Author:** ![luisqa](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/luisqa/32/1759_2.png) [@luisqa](https://forum.osmosis.zone/u/luisqa)\
**Post date:** [October 24, 2023, 4:35pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/9 "2023-10-24T16:35:24Z")

</div>

I had the impression I had already posted in this thread but apparently not.

I’m against the proposal, there are no clear benefits that can’t be had with whitelisted addresses right now. As shown in the Stargaze proposal, this didn’t pass there as well.

---

<div class="post-metadata">

**Author:** ![faddat](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/faddat/32/2098_2.png) [@faddat](https://forum.osmosis.zone/u/faddat)\
**Post date:** [December 28, 2023, 12:05pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/10 "2023-12-28T12:05:29Z")

</div>

I’m in support of this proposal.

Currently it is just too difficult to figure out which contract authors should be blessed and which should not be blessed.

---

<div class="post-metadata">

**Author:** ![willbbtc](https://avatars.discourse-cdn.com/v4/letter/w/eb9ed0/32.png) [@willbbtc](https://forum.osmosis.zone/u/willbbtc)\
**Post date:** [July 13, 2024, 1:27am UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/11 "2024-07-13T01:27:05Z")

</div>

bumping this as, like @faddat, I think the current state of things are contradictory.

osmosis is a permissionless chain, only for addresses that have been given permission.

the best integration these approved devs can bet on is getting an hyperlink somewhere on the main interface, leading them to another website. Meaning : users need the same due dilligence as when they use a permissionless chain. If anything, they are probably less careful than ethereum or solana users.

I believe permissioned uploads and governance gate-keeping prevents growth while protecting from no significant danger. If a malicious actor really wants to deploy on osmosis, they’ll find a way.

---

<div class="post-metadata">

**Author:** ![faddat](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/faddat/32/2098_2.png) [@faddat](https://forum.osmosis.zone/u/faddat)\
**Post date:** [July 18, 2024, 7:55am UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/12 "2024-07-18T07:55:56Z")

</div>

> [@willbbtc](#):
>
> the best integration these approved devs can bet on is getting an hyperlink somewhere on the main interface, leading them to another website. Meaning : users need the same due dilligence as when they use a permissionless chain. If anything, they are probably less careful than ethereum or solana users.

I need to admit that I have changed my position because I have looked at ways to create Byzantine contracts cosmwasm and they are quite real.

I agree with you about the contradictions 100%

---

<div class="post-metadata">

**Author:** ![LeonoorsCryptoman](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.osmosis.zone/leonoorscryptoman/32/208_2.png) [@LeonoorsCryptoman](https://forum.osmosis.zone/u/LeonoorsCryptoman)\
**Post date:** [July 18, 2024, 8:00pm UTC](https://forum.osmosis.zone/t/permissionless-cosmwasm-v2/436/13 "2024-07-18T20:00:42Z")

</div>

> [@faddat](#):
>
> I need to admit that I have changed my position because I have looked at ways to create Byzantine contracts cosmwasm and they are quite real.

And with this you mean there are risks involved when going permissionless?
