---
# System prepended metadata

title: Wasmd Audit

---

# Wasmd Audit

- There should not be anything consensus breaking
  - example in the past: error messages used by contracts
- Contracts must not write to other storages than their own
- Contracts must not send messages for or act as some other accounts 
- Contracts must not receive or send ibc packages for others ports than their own
- Autorization access restrictions must not be bypassed (https://github.com/CosmWasm/wasmd/blob/master/x/wasm/keeper/authz_policy.go#L9)
- Gas metering must not be bypassed to prevent spam or DOS vectors
