---
# System prepended metadata

title: ICA security discussion

---

# ICA security discussion 

Agenda:

1. Define problem clearly  
2. Review API (from ica-auth dev perspective)
3. Discuss amount of work involved for different solutions

Proposed solutions:
* [Seans PR](https://github.com/cosmos/ibc-go/pull/800)
* Update documentation and push the complexity/work onto ica-auth devs 
* Ordered channels that don't timeout. [Damians PR](https://github.com/cosmos/ibc-go/pull/801)
    * This solves the issue of having to manage active channels 
* One port per owner and create channels on different connections ([adityas comment](https://github.com/cosmos/ibc-go/issues/767#issuecomment-1022279345))

**Damian**
    - [Found bug on controller side](https://github.com/cosmos/ibc-go/issues/767#issuecomment-1022160592) 

**Colin:** 
    - [Points out](https://github.com/cosmos/ibc/pull/636) that ORDERED channels that don't timeout may not be trivial work   
    - would like to stick with what we have now rather than add new channel type
    - security concerns 
    - extra work / testing
    - does not want to delay beta release
    - spec is not yet merged in for ordered channels that don't timeout
    - lets do another security audit, no nits 
    
**Aditya**: 
    - feature is no longer trivial (ordered channels that don't time out)
    - may as well just use connection sequence internally (RegisterInterchainAccount) rather than pass work to ica-auth devs
    - Lets do security audit after changes are in
    
**Sean**: 
    - concerned about team delivering under pressure (dev work on ordered channels that don't timeout)
    - dev UX a priority 
    - would prefer minimal changes pre v1 release 
    

**Outcome & Action Items:**

1. The following issues have been created as outcome and are only a couple days of work:
- https://github.com/cosmos/ibc-go/issues/802
- https://github.com/cosmos/ibc-go/issues/803
- https://github.com/cosmos/ibc-go/issues/767 (damian has PRs up already)

2. Once the following issues are finished we can do a beta release:
- https://github.com/cosmos/ibc-go/issues/768
- https://github.com/cosmos/ibc-go/issues/802
- https://github.com/cosmos/ibc-go/issues/803
- https://github.com/cosmos/ibc-go/issues/767
- https://github.com/cosmos/ibc-go/issues/701

3. We will do an internal security audit sometime next week (sync with carlos when he is back)

4. All is well in the land of ICA. :fire_engine: 